Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/wQ6ZvxfZobjlV7W-r447Ofv42dQ.roa
File: wQ6ZvxfZobjlV7W-r447Ofv42dQ.roa (raw, json)
Hash identifier: 5G3PTXV/hDSj2Cc+Z3RSrkUGSdfRIZ5C0nvRLrH8QJY=
Subject key identifier: C1:0E:99:BF:17:D9:A1:B8:E5:57:B5:BE:AF:8E:3B:39:FB:F8:D9:D4
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42D2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wQ6ZvxfZobjlV7W-r447Ofv42dQ.roa
Signing time: Tue 08 Feb 2022 00:30:05 +0000
ROA not before: Tue 08 Feb 2022 00:30:05 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17106 (0x42d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 8 00:30:05 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=C10E99BF17D9A1B8E557B5BEAF8E3B39FBF8D9D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:72:3f:21:d8:e6:ef:14:c4:f3:70:61:d0:
00:58:0c:be:e5:43:e0:be:2a:8b:31:a4:e9:db:90:
b8:cd:8f:74:ca:eb:be:c3:3a:63:e7:77:b5:95:c8:
9b:01:d5:c6:0a:17:9f:21:d4:e9:a9:ec:0c:7f:f8:
b3:3d:81:dd:10:a7:33:5b:99:69:2a:9f:df:dd:6e:
03:66:b4:bd:9d:bb:09:f6:02:92:fa:20:ac:3d:f4:
81:5a:72:20:f2:35:05:f0:56:70:a0:3d:5c:ba:af:
97:69:57:2f:c9:c2:41:fa:30:7c:54:a9:18:10:51:
a2:39:01:a3:48:70:c5:d6:de:6c:4c:d5:12:dd:0e:
1e:f3:4f:78:2b:6a:70:6d:4d:53:73:bc:8c:59:6c:
fe:a9:1b:ec:7a:fb:39:96:38:9f:24:7c:fd:b6:a3:
4c:14:0c:f9:0b:ee:ca:d1:1c:08:ee:ba:37:6c:0f:
9a:37:49:23:a9:fd:06:1b:b3:05:a7:f7:4f:57:a5:
92:c1:e4:a9:f7:f3:cd:38:84:70:4f:4b:b1:03:5b:
ca:57:8a:14:55:ee:15:1d:d9:a1:d9:2e:d3:8b:a2:
46:6e:8f:41:2e:6e:d4:f0:c7:93:c7:c7:3d:be:ea:
7c:eb:e3:43:c2:a1:e8:5f:2b:be:30:2d:34:94:83:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0E:99:BF:17:D9:A1:B8:E5:57:B5:BE:AF:8E:3B:39:FB:F8:D9:D4
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/wQ6ZvxfZobjlV7W-r447Ofv42dQ.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
92:f0:42:4a:15:fb:98:c2:a4:6e:9f:48:22:7e:e1:25:10:bf:
70:00:9c:13:82:dc:de:a1:21:fb:34:49:3c:46:12:55:0c:4c:
f1:63:02:10:e6:18:de:ff:fd:af:db:eb:71:fe:4b:91:fc:92:
14:b0:96:04:d3:15:26:50:75:a1:83:e3:25:d8:68:74:5a:f0:
33:ad:fc:53:e4:3d:6d:22:94:50:79:57:bc:83:07:e8:e5:ce:
5a:11:56:7c:f1:44:86:9e:ba:b0:2b:0e:77:90:6d:b4:9d:e2:
8b:22:3a:e8:51:f5:30:e0:0d:a9:3b:28:a0:0b:9f:59:e6:78:
cb:db:11:37:22:11:f2:26:a4:43:53:4e:e8:d9:58:b4:39:90:
e3:cc:d0:33:30:c4:fd:d3:70:3d:b6:38:91:49:1e:85:41:e2:
5a:82:b7:29:04:f8:59:47:21:82:a5:6b:04:62:e3:ba:43:8b:
c0:5a:6b:f6:34:99:05:72:bf:7c:72:c2:e8:3a:39:61:7e:16:
73:67:3b:2e:d1:30:e8:e4:30:d4:df:66:41:ad:55:25:e4:43:
24:a5:89:82:da:5f:41:51:29:60:20:c6:77:58:c6:c1:43:db:
e3:92:ef:a5:64:c7:d8:c9:7c:6d:e6:2c:b3:c9:21:a2:3b:3b:
f9:42:4d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org