Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/svvnbBUT4gKma4pvciQl2qvRZHY.roa
File: svvnbBUT4gKma4pvciQl2qvRZHY.roa (raw, json)
Hash identifier: T3HJuNJTelrcoLMVdJR8PFlAxwhE+0Nhm+uO5IEhhrA=
Subject key identifier: B2:FB:E7:6C:15:13:E2:02:A6:6B:8A:6F:72:24:25:DA:AB:D1:64:76
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 46E3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/svvnbBUT4gKma4pvciQl2qvRZHY.roa
Signing time: Sun 24 Apr 2022 00:30:07 +0000
ROA not before: Sun 24 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18147 (0x46e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 24 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B2FBE76C1513E202A66B8A6F722425DAABD16476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:50:49:4d:a1:38:39:91:f2:b4:88:2b:ed:
c9:26:96:a1:78:d8:02:64:a0:c8:10:be:df:54:f3:
6a:a2:93:f0:b0:07:9b:81:1d:84:d5:ae:d9:b5:6a:
fd:8e:7b:70:4d:7a:0a:19:15:ec:b7:c0:18:81:5f:
fb:9d:93:a0:1b:8c:83:1d:ad:ef:f6:83:38:12:5c:
93:c5:46:8e:d8:24:20:fb:77:ba:10:a5:49:02:af:
61:b3:90:e5:f2:45:e1:6a:67:5a:fa:a5:76:70:11:
88:5d:a7:bd:76:ac:7c:63:5e:e2:aa:e9:e2:07:b2:
db:33:8c:9e:d0:7f:5b:6a:6f:0b:c6:b9:12:18:67:
cb:1c:50:01:c0:b8:02:93:5b:48:0d:fd:65:fb:77:
26:e1:98:40:c3:59:be:55:75:90:63:3b:0e:bc:69:
94:07:81:0f:69:91:85:fc:ab:bc:8d:0a:cc:9e:a3:
91:44:f2:25:c0:3e:97:1b:0d:c4:89:4c:d8:4b:26:
1c:b4:20:82:e6:be:ff:cd:19:80:51:91:6d:75:b8:
1b:08:c0:3b:0c:25:4a:3d:7c:3d:fc:40:f9:18:0d:
55:fd:d2:92:cd:14:c9:fd:16:73:9c:29:ec:b7:0a:
77:92:a4:12:57:d7:05:b7:08:6d:0b:8a:90:67:e3:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:E7:6C:15:13:E2:02:A6:6B:8A:6F:72:24:25:DA:AB:D1:64:76
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/svvnbBUT4gKma4pvciQl2qvRZHY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
64:27:d2:56:77:20:bb:7e:51:23:e4:f9:d2:42:80:4f:98:b8:
bc:a5:94:49:66:bb:af:26:37:bc:fa:19:ea:e0:5c:0f:3f:18:
bc:2d:74:15:35:55:ca:c7:a2:e0:96:01:a7:be:bd:84:95:fc:
7a:20:9d:f6:d1:28:48:bd:25:22:3d:fe:0e:8c:2c:4f:f8:98:
d1:d2:8d:07:bb:f3:9f:e8:5b:bb:63:a6:23:8c:e8:52:5f:14:
4c:28:dc:f1:1c:8e:cf:a8:03:a2:85:11:b7:03:39:c9:bf:75:
b6:04:38:76:cf:50:64:45:da:da:c6:05:de:c5:75:d5:59:3b:
9d:43:35:23:65:61:bc:d1:8e:c9:ff:14:8f:da:8e:33:b5:d2:
07:b3:aa:5f:27:f9:38:f8:ab:53:42:f6:15:e1:3b:57:16:43:
25:8b:51:6a:ad:bd:88:21:02:bd:ae:c1:7f:1a:96:1b:b9:59:
6a:45:2f:c5:fd:ec:9b:a7:10:b8:df:1b:24:10:fd:94:72:99:
9d:35:e5:5d:69:4b:48:56:db:e6:e2:6a:dd:fb:f1:57:dd:cb:
4d:da:bb:4a:35:f3:90:87:34:af:d9:0e:5e:cb:93:25:20:aa:
90:87:60:aa:9d:f2:d2:2b:c1:51:c1:01:6e:bf:69:9b:fb:af:
d0:25:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org