Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/-4vjtyMlDlLoHSi8rFOoFwggB7Q.roa
File: -4vjtyMlDlLoHSi8rFOoFwggB7Q.roa (raw, json)
Hash identifier: Cd8WOSI653vk91bjJY6t8IjCAbLfNQEN8fNwiGEWlzQ=
Subject key identifier: FB:8B:E3:B7:23:25:0E:52:E8:1D:28:BC:AC:53:A8:17:08:20:07:B4
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48A3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-4vjtyMlDlLoHSi8rFOoFwggB7Q.roa
Signing time: Thu 26 May 2022 00:30:16 +0000
ROA not before: Thu 26 May 2022 00:30:16 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18595 (0x48a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 26 00:30:16 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=FB8BE3B723250E52E81D28BCAC53A817082007B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:d5:3f:3f:9a:d0:2f:1f:b5:a2:5d:2f:cc:
f8:76:a2:d2:7e:d4:a8:67:2b:e2:ce:48:13:7b:ed:
eb:31:f1:e9:21:dd:32:33:01:ad:0e:e1:aa:d0:29:
6d:bd:6a:67:49:6a:c2:f3:37:33:70:99:47:a5:3e:
ae:51:d3:b4:c0:cc:99:53:44:f6:14:bb:25:cb:c4:
a7:d4:2e:09:d3:f3:53:3b:9b:c0:40:c9:48:29:53:
d7:24:10:51:06:e6:61:7f:6a:ca:9e:16:67:44:8f:
72:03:1d:4d:a9:ce:85:a3:21:10:f2:17:7e:b1:18:
17:68:18:0d:9f:92:5e:ac:c6:f1:b6:ea:d3:70:eb:
4f:5f:02:99:5e:c4:7f:c3:90:0f:d6:6a:61:13:66:
48:8f:0b:c7:cb:8d:e0:1a:d9:ca:ec:6d:83:5d:b3:
16:ba:f7:9e:42:57:22:67:0f:b6:24:7b:ac:77:f7:
c5:ce:be:04:c4:a9:85:97:52:71:cc:8f:c7:6f:44:
d4:58:80:12:78:b8:fd:33:e3:79:0e:0b:dc:ae:0f:
78:e5:24:a3:09:8b:79:60:1a:5c:f5:b4:a2:77:6c:
7e:f7:48:9c:a9:05:57:5e:63:eb:aa:38:80:03:a5:
f8:95:dd:80:2b:e8:f1:ae:f1:d8:bb:80:42:82:24:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8B:E3:B7:23:25:0E:52:E8:1D:28:BC:AC:53:A8:17:08:20:07:B4
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/-4vjtyMlDlLoHSi8rFOoFwggB7Q.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:3d:54:61:ee:ec:9c:79:aa:0d:1e:83:02:0c:63:c9:50:b2:
5c:0b:24:05:de:6f:d9:72:cb:22:17:47:9b:5f:8e:be:e2:df:
c7:a1:fc:a6:b0:95:cb:fc:86:a8:24:0f:35:48:6e:b2:2b:f6:
f8:18:60:33:70:31:c1:3a:2e:89:5d:1d:2f:ec:76:5b:b5:36:
e3:d9:f4:e2:a3:56:71:c2:8b:3a:4c:bf:00:99:ac:ac:49:2d:
c3:87:71:87:e5:b5:ac:25:68:49:0b:23:98:1c:8d:40:33:d9:
68:97:01:77:b2:0e:2c:ce:4c:09:b5:df:64:86:6c:98:7e:a7:
92:c7:29:f1:db:2d:d7:14:c8:d2:07:99:46:f1:f4:d3:e9:5f:
16:c8:dd:cc:17:35:da:86:c3:41:7b:73:19:57:de:09:a7:e0:
42:21:d6:7b:42:bd:2e:3b:e1:23:96:6e:7e:3c:89:fa:81:07:
23:c8:06:d7:5e:91:4a:ef:8a:5c:3c:6d:cb:00:51:9f:4e:eb:
6c:77:dc:4d:eb:29:6c:56:db:5b:67:e2:e6:a5:01:04:a6:a8:
65:b1:fd:d2:fd:fe:2c:34:1e:f8:8b:89:86:5f:07:d3:63:be:
43:87:ba:86:c5:bb:01:dc:da:f0:82:0c:f0:4e:ca:44:4a:c1:
81:83:1b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org