Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/4OAcL4s1CBssl8zt7M69H2QAWf4.roa
File: 4OAcL4s1CBssl8zt7M69H2QAWf4.roa (raw, json)
Hash identifier: xxfktFIGvWfZxJKLGsqmk58VQZ0vSwdPrq6tY9BwPTU=
Subject key identifier: E0:E0:1C:2F:8B:35:08:1B:2C:97:CC:ED:EC:CE:BD:1F:64:00:59:FE
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4994
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4OAcL4s1CBssl8zt7M69H2QAWf4.roa
Signing time: Thu 09 Jun 2022 00:30:07 +0000
ROA not before: Thu 09 Jun 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18836 (0x4994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 9 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=E0E01C2F8B35081B2C97CCEDECCEBD1F640059FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:7e:a2:88:53:84:0f:ac:97:26:7f:9a:a9:
d9:12:05:c0:98:30:62:0e:5a:ec:80:b4:c6:c8:39:
4e:3a:c1:e8:d3:5f:cf:1d:db:d6:fb:72:c4:73:d1:
21:ac:65:8c:b2:d7:3f:df:47:03:2e:c6:2d:20:2e:
2a:bf:74:a7:17:fe:50:6d:22:96:14:c7:8e:31:e8:
e0:35:63:32:5b:f3:df:19:71:ee:eb:9c:0b:de:b2:
bc:06:34:00:bb:44:e9:ef:75:60:b0:72:e2:09:ab:
7e:12:75:23:bb:b7:62:05:e8:ff:a1:5a:ad:23:bc:
70:96:9a:64:6b:81:e0:6b:22:01:9f:ce:94:4b:ce:
62:54:4f:d7:d3:4d:1b:bc:79:8c:73:8d:94:8a:29:
4b:4f:d1:dc:8f:63:61:aa:17:5a:bb:fd:d0:5a:aa:
ec:8f:52:4b:c8:6a:35:37:9d:5d:36:8a:3e:83:f4:
1c:86:11:12:51:29:09:a3:8a:e4:be:8c:d1:3d:41:
9f:df:d1:38:66:54:41:91:8d:e4:1c:7b:ae:de:9d:
da:13:83:a9:08:38:e1:63:40:30:b3:3a:0d:38:57:
72:a5:fe:32:d2:c9:81:b7:a2:9c:86:67:47:8f:f6:
15:93:1d:07:ae:6b:1c:a0:82:4a:6a:45:4c:8f:c5:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E0:1C:2F:8B:35:08:1B:2C:97:CC:ED:EC:CE:BD:1F:64:00:59:FE
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/4OAcL4s1CBssl8zt7M69H2QAWf4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e9:12:a3:9a:aa:99:d0:43:f8:de:c8:83:4f:2b:2f:fa:51:
66:3d:c3:f1:23:d8:8e:9b:ae:2f:44:d4:19:87:6b:d8:4c:b5:
09:52:69:ae:73:2e:ff:7d:77:d8:52:10:b4:3a:8c:1c:00:6d:
d6:98:5a:7e:9f:67:6a:89:26:82:ab:b6:0a:28:6d:0b:7d:5b:
9d:f4:93:e7:ee:c9:9c:7e:42:0c:6a:71:eb:c7:dc:90:14:12:
36:b2:57:6e:a1:7f:eb:35:e0:5f:57:cc:82:16:1b:4b:1d:4e:
c1:45:d2:03:58:59:bf:0a:ac:8e:4f:77:38:fe:87:88:ce:ed:
2c:33:b4:fc:c3:bc:79:ae:5e:03:5b:65:96:7a:64:f2:d4:00:
fb:b1:30:71:e4:dc:92:f6:c8:24:13:9c:d6:18:b2:77:ea:eb:
be:10:d0:e1:1f:dd:ae:d6:b3:c6:0d:92:f7:c7:fa:cf:2d:bf:
28:26:bf:07:89:52:00:e1:89:d0:1d:6b:be:5c:02:6c:0f:35:
f1:9c:16:32:6a:36:71:0f:6a:8e:d6:94:e6:f7:eb:af:62:21:
66:a7:fd:0e:0c:7b:e4:73:a9:ba:2c:d8:0d:6f:41:d7:f3:ad:
5e:1f:15:eb:51:6e:bd:ef:eb:ca:76:e5:af:ce:70:76:d1:96:
bd:b1:92:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org