Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/srtLnA52pwFw1cMeHWbyp1D2190.roa
File: srtLnA52pwFw1cMeHWbyp1D2190.roa (raw, json)
Hash identifier: n9XDLsB2XS3pMIdNzH4IFoC3F2jVc8XdqdO8GSAYJBQ=
Subject key identifier: B2:BB:4B:9C:0E:76:A7:01:70:D5:C3:1E:1D:66:F2:A7:50:F6:D7:DD
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 496A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/srtLnA52pwFw1cMeHWbyp1D2190.roa
Signing time: Mon 06 Jun 2022 00:30:06 +0000
ROA not before: Mon 06 Jun 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18794 (0x496a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 6 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B2BB4B9C0E76A70170D5C31E1D66F2A750F6D7DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:b1:d1:70:3d:1b:97:7e:b8:3e:c8:3c:20:
b4:4d:2c:23:8f:da:4a:72:f4:99:ba:f5:65:6e:07:
e6:43:8b:6b:30:88:b9:a3:3d:9e:a7:d5:94:db:16:
7b:f0:bf:d5:84:99:73:2b:b1:f6:97:7d:df:ba:ee:
3e:f8:ba:b3:19:f8:12:c1:74:3f:35:4f:17:d3:e7:
36:f8:a1:4e:54:98:0a:aa:97:52:af:48:9f:d2:93:
fe:f5:72:1d:be:9b:71:8d:26:0b:ec:19:a3:84:ae:
2d:d1:67:9b:d2:ab:4c:78:4b:55:5b:fc:c0:76:b6:
5e:68:fb:d1:1c:30:f7:b6:4e:b6:da:84:f2:cd:48:
85:2a:ca:27:ed:c3:4b:4d:51:0b:3c:1e:2b:d4:ba:
da:91:86:9e:56:c6:bf:01:3d:e5:c7:4a:40:06:d3:
b8:19:8f:d9:b6:b9:c8:ae:37:5f:53:90:a5:af:28:
de:af:3f:b9:9b:a5:57:43:1d:8d:82:2e:90:6c:58:
62:12:4c:71:b2:40:6e:fc:64:f1:57:b5:bb:25:bf:
db:0e:9a:01:2c:dc:2e:ee:a0:19:69:3a:01:19:51:
1b:c9:ff:47:62:9c:b3:6d:a1:c6:82:81:10:f7:c6:
09:ee:5e:94:55:b6:17:a7:ba:87:47:ce:53:b1:d6:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BB:4B:9C:0E:76:A7:01:70:D5:C3:1E:1D:66:F2:A7:50:F6:D7:DD
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/srtLnA52pwFw1cMeHWbyp1D2190.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:c8:d5:fe:63:61:0a:af:36:a8:a7:4e:4a:ae:1c:b4:38:be:
65:9b:08:a1:b4:32:9e:68:b1:a5:93:6d:ce:b3:cf:e1:20:b6:
6a:d1:fd:e5:18:ea:e7:33:e5:76:ea:8b:48:c7:ab:d8:51:2b:
49:c2:d3:dc:ce:ec:64:9a:94:92:e1:10:9a:16:1e:c6:7c:85:
2b:96:00:e6:93:ad:d1:a5:21:8c:71:ef:84:17:a0:87:9a:f1:
d4:04:92:4d:e5:1a:70:a0:86:72:73:d5:be:7a:4c:43:f3:fb:
17:f3:8f:8f:ce:29:8c:16:af:29:ff:32:fd:8e:a1:ec:c1:0d:
c8:9d:d6:cc:90:0f:db:21:61:3b:08:5b:0b:20:44:96:71:3d:
d9:d5:28:bc:07:dc:c9:31:e9:17:1e:ea:88:a2:0f:77:1c:42:
43:aa:cf:48:f2:ff:67:86:d5:7e:c5:6c:87:f8:6a:f0:3c:73:
40:3c:12:7b:c9:39:a7:18:6c:21:f7:48:a0:37:c3:f0:f6:7b:
c1:59:00:c7:c3:d0:fa:eb:57:e1:ba:63:ac:8b:6c:11:93:0b:
04:f8:f7:c5:ee:d8:c6:78:7e:e4:1d:86:1a:33:2b:a5:e5:78:
9f:8f:98:86:1a:5b:86:2d:00:b5:b6:bd:35:b3:90:87:88:61:
c7:07:4a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org