Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/F7WvSAasAbeTr-BHlrbbLUVh9Mw.roa
File: F7WvSAasAbeTr-BHlrbbLUVh9Mw.roa (raw, json)
Hash identifier: hQVf8F2DRNO9NczFXwwwpY6AfFFZNNGb134+eJO4OQg=
Subject key identifier: 17:B5:AF:48:06:AC:01:B7:93:AF:E0:47:96:B6:DB:2D:45:61:F4:CC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49A2
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/F7WvSAasAbeTr-BHlrbbLUVh9Mw.roa
Signing time: Fri 10 Jun 2022 00:30:06 +0000
ROA not before: Fri 10 Jun 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18850 (0x49a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 10 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=17B5AF4806AC01B793AFE04796B6DB2D4561F4CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:9b:d0:cd:bc:92:a1:2b:4a:ed:a5:27:0b:
b5:99:42:dc:f3:cb:6a:84:c2:ec:8b:48:a7:0f:cf:
9a:16:6e:60:59:6c:29:b6:44:ad:19:b6:8d:c2:69:
00:1e:91:db:2b:38:17:1c:57:10:49:d4:59:3d:59:
8a:f3:92:96:50:09:07:a6:81:40:f5:62:9f:10:4a:
fd:0a:68:0d:3e:48:39:27:ef:a6:22:02:72:c5:e4:
c5:e6:77:46:5d:3a:b5:c9:cd:20:5f:f2:78:98:f2:
2f:c4:76:dd:b9:c8:0e:3a:74:f5:e3:a3:02:63:e5:
2b:8c:73:b4:91:d0:a3:bc:4c:cb:21:37:ac:ef:14:
99:26:f5:fc:84:bb:01:18:27:b2:b1:b4:42:df:b7:
9c:ae:59:e1:34:1f:a1:ca:c8:5d:63:be:21:df:22:
60:72:64:c6:86:29:7c:cb:e6:59:b7:99:69:d3:57:
a3:0f:e5:f8:da:76:72:6d:fe:98:29:ea:71:7c:24:
be:bf:f4:e3:b6:72:79:86:91:bc:95:7d:1c:ec:9c:
04:5e:7f:99:a6:7f:4f:ff:27:13:78:7c:15:35:86:
25:ae:36:13:9e:d6:e3:5f:bd:e7:d9:5c:4c:82:37:
d0:23:d5:e4:22:52:c6:2d:42:4f:2d:57:17:95:76:
c3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B5:AF:48:06:AC:01:B7:93:AF:E0:47:96:B6:DB:2D:45:61:F4:CC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/F7WvSAasAbeTr-BHlrbbLUVh9Mw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:34:47:e0:ba:d1:77:67:ee:11:48:66:e8:5a:fa:21:10:7e:
fa:9e:7b:ee:fb:61:5d:e3:23:37:e4:15:8b:8d:87:d5:df:7f:
e5:91:10:39:b8:ba:7e:e0:4e:7d:53:e2:f6:c5:13:7a:f1:39:
81:87:f2:2e:db:1f:d3:71:a7:2c:2d:68:40:3d:c3:1c:02:a1:
d9:42:56:fa:84:5e:d7:53:93:eb:8a:b7:b8:b6:91:1a:23:7e:
50:73:e3:e8:f2:9d:a1:7e:a0:9a:f5:68:87:11:77:b8:ed:bb:
06:75:c7:24:01:1a:1f:f3:e1:0d:b4:ec:a2:01:a4:78:c6:a9:
8c:80:48:0a:8e:63:25:30:e4:dd:6a:34:80:b5:fb:89:53:6c:
2d:69:c9:61:29:a9:94:28:b1:55:da:3d:c4:08:e4:90:e4:b6:
60:f9:d6:78:20:1c:7b:df:50:05:67:02:ba:99:a7:2a:34:6d:
07:5a:c9:c8:73:af:d0:26:7b:5c:96:88:6a:83:29:65:36:09:
32:50:09:ed:74:da:03:64:0d:a5:3d:bf:a3:b5:99:fa:57:b3:
4e:a0:b0:37:a5:8c:3f:62:d7:f3:0f:d6:63:d9:e0:60:e7:00:
d7:e7:0c:d1:74:ef:7d:83:08:9e:eb:9a:a1:5e:62:21:cb:8f:
d6:8f:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org