Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/w515kr4cFu3879ng-02LdRPZWro.roa
File: w515kr4cFu3879ng-02LdRPZWro.roa (raw, json)
Hash identifier: 7Z52vCGI2UHkPD2QpzvpNwYPaz3E8e/vob3/lfK7HCE=
Subject key identifier: C3:9D:79:92:BE:1C:16:ED:FC:EF:D9:E0:FB:4D:8B:75:13:D9:5A:BA
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48BE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/w515kr4cFu3879ng-02LdRPZWro.roa
Signing time: Sat 28 May 2022 00:30:05 +0000
ROA not before: Sat 28 May 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18622 (0x48be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 28 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=C39D7992BE1C16EDFCEFD9E0FB4D8B7513D95ABA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b1:01:86:ac:93:b1:7e:33:7a:9c:cf:53:59:
8e:09:6e:fc:e1:2a:76:48:1c:64:46:1a:d6:0d:c2:
6f:ce:38:46:06:b9:88:26:a3:a8:ef:64:15:2e:da:
a6:0a:2c:dc:65:55:f5:f4:22:93:c0:33:55:5e:9e:
06:36:6d:a2:8e:77:03:77:40:e6:ff:96:56:b7:84:
99:d3:46:b5:46:18:3a:11:7f:36:19:a2:27:a7:a4:
08:41:3f:db:83:65:5f:15:31:13:3f:73:5f:4a:be:
71:10:68:56:5d:06:ec:87:2b:22:0b:03:ca:d8:1e:
12:1e:5c:3c:32:5c:9e:de:e0:1c:a2:cf:f2:da:df:
cd:5e:a0:7d:cc:9d:45:5a:1f:1b:c3:17:79:24:a3:
c2:ce:39:fc:ec:35:65:83:fe:1a:5a:2c:87:25:5d:
14:3f:87:18:6c:0f:8c:e1:c1:33:2b:2f:ed:82:11:
f2:93:05:2e:11:94:f4:7f:0f:4f:29:d9:b9:ed:fe:
de:04:af:4f:d0:94:de:db:7b:8a:81:2b:d8:85:86:
70:6d:e1:f4:e8:fd:3a:e8:46:23:f2:98:49:a8:5f:
25:db:fe:5f:8f:8e:b5:05:72:b5:a2:db:2c:ef:e1:
e0:a1:be:ab:b0:34:c7:67:14:b1:3f:b9:fa:28:de:
d2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9D:79:92:BE:1C:16:ED:FC:EF:D9:E0:FB:4D:8B:75:13:D9:5A:BA
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/w515kr4cFu3879ng-02LdRPZWro.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:51:40:7c:d9:37:da:09:af:56:e2:c3:cd:6d:79:5b:8c:7e:
71:2b:70:e7:06:78:a1:5f:8e:bf:b1:01:be:58:36:7d:89:76:
71:fe:4e:63:02:d3:d1:81:a2:c2:71:ed:29:20:92:b1:78:62:
d7:7a:d8:ac:a3:99:65:92:dc:88:fa:d8:4c:a7:b4:fc:ec:41:
7d:b7:12:09:83:ac:a4:4b:9c:92:bf:87:ba:f1:10:c5:5d:e9:
5f:a9:c2:77:96:7a:db:49:f4:85:0e:9e:2e:fa:0a:41:92:8b:
38:f7:37:7e:ba:13:46:57:82:74:95:a7:42:54:e0:26:eb:ba:
78:6e:2c:25:e4:25:a9:56:2e:cd:7c:80:04:3f:9d:4a:92:b1:
40:52:cf:f2:87:f4:f3:3e:78:ad:fb:c2:fc:23:60:10:6a:52:
82:46:03:f2:ff:47:e8:9e:78:ec:f9:fa:f6:5a:86:a6:6c:07:
68:7a:bd:27:96:fe:77:8b:4e:7c:81:72:7b:0e:c7:38:c5:53:
71:6b:3b:5f:d7:81:4d:16:92:c1:b5:01:b8:79:15:45:ad:c7:
c9:22:1e:f1:27:1f:34:ec:c5:f0:f4:1c:64:11:c0:7e:a3:30:
7f:4a:05:e1:02:29:77:03:3f:f8:51:a9:89:86:7a:9b:be:e4:
72:7f:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org