Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/GDsZ44mwiio8dmemKN7pKDAxNGo.roa
File: GDsZ44mwiio8dmemKN7pKDAxNGo.roa (raw, json)
Hash identifier: P6XlJh8PsF/CVZnyq+mmyP245dc6HlBikdJ7phOS7q0=
Subject key identifier: 18:3B:19:E3:89:B0:8A:2A:3C:76:67:A6:28:DE:E9:28:30:31:34:6A
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4745
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GDsZ44mwiio8dmemKN7pKDAxNGo.roa
Signing time: Sun 01 May 2022 00:30:06 +0000
ROA not before: Sun 01 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18245 (0x4745)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 1 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=183B19E389B08A2A3C7667A628DEE9283031346A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:9c:20:fb:c9:d3:87:c9:59:ba:80:97:f6:
18:20:c2:4e:d6:28:30:d4:5b:49:b1:14:b9:0f:4a:
ba:82:03:f6:13:2d:06:00:32:72:f2:28:b7:da:4a:
e0:88:bd:7b:57:58:82:31:e7:88:01:34:30:bd:09:
0b:2a:cb:c4:3e:3a:2e:ff:e2:5f:13:d9:9b:fc:34:
f0:8b:19:d7:fc:f0:45:5b:6a:a9:bc:1f:d5:34:e0:
7c:00:c5:75:b8:e0:7b:83:37:45:ac:3f:84:df:b1:
99:4e:4e:60:a2:3c:1d:af:27:0e:92:71:74:78:d3:
0e:6f:ad:09:84:60:98:f5:a5:b6:47:f0:ec:3c:d1:
b4:3e:5e:cf:5c:22:f9:a9:35:9b:7d:17:ca:8f:59:
53:02:10:0e:e2:17:0b:b1:72:eb:a2:38:29:16:d9:
96:fc:63:d3:bb:9f:ee:9a:00:2f:d9:fd:1e:e0:17:
e9:a7:01:91:d9:b8:2a:62:c6:3c:aa:55:35:fe:ea:
2c:86:ec:24:ac:74:b6:56:11:98:bd:ce:c1:5c:15:
79:38:3b:f3:b9:b9:56:d9:d4:22:b0:ea:da:d0:39:
4f:b9:40:a6:3a:29:64:7e:ae:13:bf:d8:fc:b8:9b:
3d:57:c2:02:a8:88:7b:1a:90:f0:a8:0d:77:19:1d:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3B:19:E3:89:B0:8A:2A:3C:76:67:A6:28:DE:E9:28:30:31:34:6A
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/GDsZ44mwiio8dmemKN7pKDAxNGo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
79:be:a0:90:45:a7:21:de:f7:54:ea:01:10:60:18:87:c7:53:
c2:2b:1b:4a:90:ac:5d:18:d0:3b:f0:6f:08:1c:7c:1a:fb:6c:
d6:79:34:2e:99:46:be:92:6c:a8:34:b8:5b:e3:a7:3c:75:74:
87:99:8d:8f:e9:5d:eb:8f:06:75:3c:d1:04:ec:46:45:64:1b:
6c:2c:76:45:38:ce:a1:9a:b0:c0:a9:a3:1e:4f:52:50:f1:b5:
b7:27:ac:43:c2:e2:59:af:9b:18:0c:37:3c:90:71:e9:9d:e3:
f5:ce:6a:e9:ff:d3:c6:5f:28:df:db:68:17:6a:11:9c:28:e4:
d7:83:a2:c4:8e:4c:17:d2:10:80:b0:50:64:7b:8c:02:ad:0f:
3c:a7:c9:48:c3:51:8f:f6:6b:30:70:d9:96:11:a2:a5:72:59:
a2:b0:11:66:49:2d:9b:12:d6:1d:fe:96:15:20:21:fd:e6:db:
28:cc:a7:2b:52:c8:03:b2:e9:8f:d1:6b:59:28:33:90:a0:fc:
bf:44:56:91:4c:b8:e1:4f:73:77:f8:9d:31:77:ac:f7:ba:dd:
e0:e5:f0:e5:a2:ec:9a:98:93:a0:b8:56:14:a0:69:97:32:31:
40:0d:b2:f4:e5:1e:50:46:72:28:de:9c:4f:db:29:44:cf:3d:
14:70:bb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org