Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Eh15MEPGNocFlwuK7iG6L31lmzo.roa
File: Eh15MEPGNocFlwuK7iG6L31lmzo.roa (raw, json)
Hash identifier: gm+KZNXOXbf2F/EVbh7n4dVJ5sSTRELHv06I8YV6/v4=
Subject key identifier: 12:1D:79:30:43:C6:36:87:05:97:0B:8A:EE:21:BA:2F:7D:65:9B:3A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45AF
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Eh15MEPGNocFlwuK7iG6L31lmzo.roa
Signing time: Sat 02 Apr 2022 00:30:07 +0000
ROA not before: Sat 02 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17839 (0x45af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 2 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=121D793043C6368705970B8AEE21BA2F7D659B3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fa:63:16:eb:fe:d2:a4:74:bb:61:eb:eb:ad:
c4:e0:59:3b:e1:f1:64:6f:be:ae:cd:a1:3a:45:3f:
03:22:11:1d:da:d2:dd:7c:14:d9:db:d1:5e:f5:24:
f5:a9:88:9c:21:e3:46:d4:49:77:6d:6e:c2:bd:0b:
91:68:90:25:dd:eb:4d:8e:7c:15:ad:db:0c:ad:08:
95:ec:a6:e3:04:99:c0:f3:f3:1e:4f:91:0d:eb:a2:
27:85:d5:13:48:d0:e9:21:98:fa:3c:0d:00:9f:8f:
33:35:36:56:cf:51:dd:02:e2:2b:86:f2:58:e1:e8:
92:af:55:ce:58:96:23:9e:aa:3a:6d:dc:ba:9e:fe:
24:a4:c1:13:c4:95:9f:19:91:3f:ac:f0:da:a1:87:
e7:5d:d9:35:56:6e:56:a4:18:90:08:9a:14:5f:68:
38:23:8a:bb:cd:c9:a4:d0:e0:dc:fa:fd:5a:a2:85:
cc:79:d0:1b:06:7b:73:d5:b2:a9:bc:ec:da:dc:3a:
91:5a:53:18:62:86:5c:ac:8f:8b:68:ef:f4:a6:f3:
00:fa:2e:90:7f:81:c8:25:0e:52:1f:69:37:8c:ed:
15:2e:03:dc:e4:03:e4:3d:21:3c:76:7d:f7:7d:77:
f3:eb:dd:e9:03:ec:94:cc:13:ad:5c:f3:42:64:f7:
5f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1D:79:30:43:C6:36:87:05:97:0B:8A:EE:21:BA:2F:7D:65:9B:3A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Eh15MEPGNocFlwuK7iG6L31lmzo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d2:7e:8c:2f:61:60:ea:c7:08:f2:97:be:b0:33:12:e3:f7:
e7:6f:49:9f:aa:40:c6:22:e6:6f:fc:85:75:c3:9c:5a:ef:c7:
1b:8b:4f:99:16:80:2f:69:77:46:01:3f:5f:5b:36:5e:01:25:
0c:7e:bc:2e:00:60:92:1a:ae:83:2a:38:27:93:b8:11:23:d0:
ba:19:95:cf:64:28:95:19:57:cd:c6:07:73:a1:82:24:3f:c9:
1d:36:05:41:2b:08:14:ad:8d:0b:6c:28:75:76:e4:2d:3d:33:
b2:31:a8:4d:6a:73:31:6e:2e:ce:8e:61:20:a5:7a:1e:ac:83:
48:99:38:97:f0:f5:1d:e5:98:e9:26:23:6a:7e:c8:2a:b9:98:
6d:c4:17:e7:ca:16:34:e0:82:7f:72:42:98:4b:31:47:dd:6d:
af:91:77:16:ea:fc:d4:dc:8c:af:9b:ae:9a:2f:75:d9:cb:05:
55:e8:52:20:04:b6:cb:89:42:ed:80:e5:79:1b:a6:0d:d2:2c:
e9:d8:cb:80:cc:2d:63:33:57:13:e6:37:12:9c:2c:7f:28:bd:
23:95:45:bd:31:ec:fb:6d:c8:39:93:8b:99:d5:b3:03:fb:29:
01:4f:75:e1:87:9c:e6:f7:1b:06:0f:7b:e6:f7:c0:d9:4c:d2:
68:0d:ac:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org