Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/BTXZTv47BsHmrkmE9RnnbEEQm6U.roa
File: BTXZTv47BsHmrkmE9RnnbEEQm6U.roa (raw, json)
Hash identifier: IzvMyhw+0RY5OIrmz+hO5GytJ72fqbMD2RY6pH20EY4=
Subject key identifier: 05:35:D9:4E:FE:3B:06:C1:E6:AE:49:84:F5:19:E7:6C:41:10:9B:A5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45B5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BTXZTv47BsHmrkmE9RnnbEEQm6U.roa
Signing time: Sat 02 Apr 2022 00:30:10 +0000
ROA not before: Sat 02 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17845 (0x45b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 2 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=0535D94EFE3B06C1E6AE4984F519E76C41109BA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:b8:eb:50:e1:a0:65:02:32:e9:9e:7c:cb:
15:50:d3:b0:aa:4c:f0:93:be:68:f6:76:ab:1c:16:
2c:cd:0c:73:bc:1b:ba:ac:90:3a:1e:5e:25:e5:3b:
2f:17:c2:b9:e5:07:c0:c5:3e:53:68:00:49:ad:0f:
a9:ca:c0:c7:c1:3a:20:be:86:7b:25:73:ac:22:a3:
15:eb:2b:3b:03:16:3a:be:f0:7f:db:07:aa:9f:86:
7e:f1:64:63:81:3e:f5:92:ee:f1:92:37:17:3e:1d:
c8:03:dc:3f:b2:ec:6c:03:f5:21:52:e5:3c:7c:92:
2b:bb:1e:ac:09:ff:fc:f7:d8:d7:dc:54:7c:a2:c4:
48:28:3c:27:da:0b:d9:98:df:24:57:0d:36:97:9b:
19:5d:e1:fb:e5:b0:9b:5b:e3:28:71:20:81:84:8e:
47:a1:b2:c1:77:f7:42:21:b0:14:82:75:20:ac:19:
22:3b:aa:bc:46:d6:d8:44:b2:c3:d5:6f:0e:1e:a6:
c6:16:32:0d:70:14:01:26:b6:d8:33:8d:26:17:2a:
0d:2b:cf:31:d2:22:0c:8d:ec:55:37:9f:87:2e:8b:
f5:9d:ee:21:ad:63:9d:14:52:cf:56:dd:ca:1f:59:
e0:30:09:4f:49:2d:4a:33:d2:24:75:d2:08:99:ce:
e7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:35:D9:4E:FE:3B:06:C1:E6:AE:49:84:F5:19:E7:6C:41:10:9B:A5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BTXZTv47BsHmrkmE9RnnbEEQm6U.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.11.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:68:8b:b3:74:ca:cf:5b:82:28:1e:09:e7:ff:98:7e:91:cf:
eb:17:ec:d4:f8:e3:c4:da:80:8e:45:6b:cc:f7:07:4f:70:74:
9f:82:f2:b4:a7:68:86:4a:ab:b8:25:47:08:d4:47:67:60:6d:
73:3c:27:ec:77:bd:f5:8b:64:52:72:9c:6f:de:0a:d5:55:b0:
fe:26:19:49:9b:79:81:c7:0a:f2:de:29:70:83:c8:a4:70:ce:
c5:4c:67:81:bd:3f:4e:a8:d6:57:d1:45:07:8a:6d:c1:6e:fb:
09:bb:da:4f:bb:f2:bd:c3:48:b1:25:9e:c6:98:bc:fd:4f:34:
94:e7:7b:0f:5e:86:1a:d0:64:c7:82:42:8b:51:fb:8c:46:82:
f3:32:91:49:c2:b9:dd:37:da:95:d7:f8:d8:1f:df:f0:b8:cf:
27:18:3c:74:26:b3:81:56:80:fc:e8:54:ac:3d:2b:88:5c:5c:
8e:1c:35:e9:66:7e:3b:ef:d3:70:54:58:06:a8:45:32:a3:06:
85:b2:95:a9:c0:80:00:ab:de:1b:70:f4:5a:ce:7a:b7:6f:5c:
ff:af:b2:3d:ed:63:b5:48:69:ca:ca:1d:12:6e:0d:b0:cf:18:
d2:d1:d8:36:64:60:d6:99:bb:53:63:ad:42:a5:0d:f1:c6:c5:
81:04:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org