Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/s2kLwfTB51_DclSuT6Xa0YoPgYE.roa
File: s2kLwfTB51_DclSuT6Xa0YoPgYE.roa (raw, json)
Hash identifier: rhpk1/ikHTZODBBeM6qYJfqsg3DCBnbe0vCiNTkFHNg=
Subject key identifier: B3:69:0B:C1:F4:C1:E7:5F:C3:72:54:AE:4F:A5:DA:D1:8A:0F:81:81
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42A8
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/s2kLwfTB51_DclSuT6Xa0YoPgYE.roa
Signing time: Sat 05 Feb 2022 00:30:08 +0000
ROA not before: Sat 05 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17064 (0x42a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 5 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=B3690BC1F4C1E75FC37254AE4FA5DAD18A0F8181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e0:db:57:f3:2d:dd:52:70:6d:b4:c0:c2:58:
14:95:35:07:df:82:b9:fd:10:0a:b9:a1:01:6e:69:
c3:9d:4c:41:15:24:1a:4d:20:d2:1f:de:3b:ec:24:
36:23:26:52:e3:93:36:6d:89:8e:af:b4:e5:9a:a1:
76:a0:83:c2:65:f3:2f:e7:25:69:88:b4:6d:20:21:
98:9d:05:63:a0:b3:ff:19:cb:da:57:a2:73:9a:4b:
26:20:b6:98:ed:51:2f:44:1c:76:95:96:5c:8e:e8:
fc:cc:cf:57:01:2b:45:bf:0c:f6:9a:49:d1:27:bf:
87:ff:81:88:7b:68:74:c2:da:ca:be:10:0e:34:3a:
c2:33:f4:2b:26:33:fa:ab:8b:cc:90:6a:2a:7a:05:
c2:1b:e0:92:5b:bb:78:53:ff:b3:2d:a9:dd:1f:7a:
ce:4b:d5:96:79:10:4a:b9:52:7a:b3:ba:29:af:68:
84:23:b4:d9:b0:7e:1a:8e:98:92:35:0b:c8:81:68:
0d:8f:3f:05:71:f6:f1:19:aa:df:65:af:71:09:c1:
23:fc:2d:81:c0:33:42:81:7b:de:36:b4:f1:55:4d:
4f:e5:49:a6:ab:e3:e2:4d:71:9f:83:e9:da:85:ba:
86:7f:cf:39:26:61:1c:52:8d:1a:08:19:b2:2a:ac:
6e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:69:0B:C1:F4:C1:E7:5F:C3:72:54:AE:4F:A5:DA:D1:8A:0F:81:81
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/s2kLwfTB51_DclSuT6Xa0YoPgYE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:38:b5:36:db:13:76:76:25:2c:d1:a4:a8:a1:65:f7:83:b0:
21:9f:0c:90:d6:c1:c3:62:f8:f5:f7:11:7b:ae:bd:5d:bc:d7:
8a:a7:e9:78:dc:a2:24:6f:2f:4e:d4:b8:2d:2a:5c:41:fb:87:
29:e3:1a:95:56:f6:da:3b:ed:74:6a:f4:ef:9d:86:94:bc:48:
21:65:ac:56:bd:75:93:4f:31:91:61:37:c0:19:75:67:6b:46:
9e:d9:34:92:c0:08:be:67:da:86:c0:a0:dd:85:78:76:48:c5:
df:a7:66:a7:b1:ce:3c:48:6c:e1:95:fc:95:b6:67:e8:83:f0:
84:ad:fb:8f:e4:78:c0:7d:f6:46:74:f8:22:50:eb:d9:fa:53:
f9:92:35:96:b0:04:ac:ff:c0:3f:3d:84:37:ec:43:0f:80:2d:
eb:72:2d:ab:37:4b:42:64:ff:12:52:51:6a:88:60:15:00:cb:
49:eb:bd:7e:d9:3b:a8:fd:02:40:7c:78:18:4d:5d:49:fb:7f:
5c:15:9b:20:28:98:62:b9:e3:b8:aa:dc:de:a7:5f:5b:ca:a6:
8e:5a:57:72:f2:9c:07:7d:74:a1:b8:99:bc:ee:08:16:3c:18:
48:22:be:8d:6c:ff:16:5b:36:2d:0b:d4:fc:1f:25:87:b1:7c:
85:0a:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org