Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/sVVxxouPZ1UAtJvopq3Ib0QtKIc.roa
File: sVVxxouPZ1UAtJvopq3Ib0QtKIc.roa (raw, json)
Hash identifier: OdGa46/ns6lE3jJKM3NxMgezYVMhs1HtfjcQMuBlFxA=
Subject key identifier: B1:55:71:C6:8B:8F:67:55:00:B4:9B:E8:A6:AD:C8:6F:44:2D:28:87
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42A7
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/sVVxxouPZ1UAtJvopq3Ib0QtKIc.roa
Signing time: Sat 05 Feb 2022 00:30:07 +0000
ROA not before: Sat 05 Feb 2022 00:30:07 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 51224
IP address blocks: 147.28.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17063 (0x42a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 5 00:30:07 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=B15571C68B8F675500B49BE8A6ADC86F442D2887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:e6:aa:f8:a5:98:4f:f1:9d:3a:b5:32:6f:
dc:7f:46:80:40:f5:85:8f:3d:38:2b:1f:65:80:58:
a7:80:d5:7f:8a:98:ad:8c:07:33:fd:99:9d:41:21:
e8:84:38:21:84:9f:75:3b:6f:df:d9:55:45:cc:6d:
0b:1c:8b:74:64:31:4d:78:24:bf:2b:23:72:8d:72:
aa:b0:bb:9f:56:42:cd:70:1e:9f:b8:51:1c:07:6f:
94:cf:39:59:ad:3e:e1:79:e6:be:50:98:81:c8:7e:
ff:29:c0:b9:e7:fe:76:14:0e:5d:85:08:e4:f2:3d:
ad:c7:84:f4:9a:de:cf:ec:82:9a:76:15:50:d7:f6:
fb:bf:a4:ab:53:0f:ae:86:78:aa:42:73:97:41:2a:
e0:f1:f6:ac:c7:f4:17:1b:c7:e1:92:6d:40:35:25:
96:71:13:20:60:f6:76:45:7f:51:f6:e2:9a:05:37:
04:af:f0:e4:de:b6:25:c7:a6:3b:ca:28:28:74:7a:
78:4f:41:5c:fa:8d:66:06:59:1c:00:a4:37:af:16:
a7:0a:f6:ae:92:8d:b4:63:ff:07:a2:de:3f:76:77:
ac:e5:e8:90:4d:ae:ae:60:7d:dd:b2:f8:a3:32:a4:
a2:88:c0:f1:26:ce:a7:31:ce:44:b2:84:30:3e:9b:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:55:71:C6:8B:8F:67:55:00:B4:9B:E8:A6:AD:C8:6F:44:2D:28:87
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/sVVxxouPZ1UAtJvopq3Ib0QtKIc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.9.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a0:f8:0e:b4:82:65:ef:1e:29:2a:47:7a:7b:fe:38:ac:77:
d0:e4:1e:bd:0e:08:57:91:dc:bf:f1:15:b7:ab:18:53:d0:61:
a0:04:dd:6e:a3:0c:3a:28:3d:d4:6f:f4:62:c5:de:75:a8:6e:
d1:ef:fb:90:82:26:1e:e2:b8:ae:32:97:06:8e:87:ed:bc:5e:
da:2e:a6:69:b3:41:d5:aa:ed:3a:f4:57:60:03:14:b4:c1:b8:
79:4c:fd:34:a5:d9:b9:c7:e1:b5:d1:26:36:50:c8:54:73:03:
8b:67:ea:e2:bd:ab:a7:42:70:27:f9:f0:e9:ed:23:02:6b:c1:
dc:7d:75:5c:da:30:b8:50:33:5c:eb:71:2d:88:92:b6:00:6a:
4e:8d:12:87:3a:da:95:48:67:f4:bb:6d:0a:32:25:9c:21:66:
b5:ec:9f:d2:3a:c8:f1:54:0e:a9:71:9d:f8:dd:ba:3f:20:b4:
ae:97:5e:e0:2a:25:e2:f0:9a:97:eb:9e:62:19:e1:64:ad:e7:
5b:ce:43:0f:e9:95:36:d2:20:32:24:4f:e8:9b:0c:91:c7:1e:
e0:52:84:d5:97:d6:f9:95:8e:e4:f9:94:d9:2f:71:22:6b:b0:
6a:58:64:59:d7:78:89:8d:70:bf:be:ee:64:07:c0:ed:40:06:
db:c3:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org