Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/K_4gptu9STxLFULUPSJu_GU0yDU.roa
File: K_4gptu9STxLFULUPSJu_GU0yDU.roa (raw, json)
Hash identifier: ryNRMbeTmJ4RI4RFfaXRTNOMRZb9NT+GpGTtkXwgWvE=
Subject key identifier: 2B:FE:20:A6:DB:BD:49:3C:4B:15:42:D4:3D:22:6E:FC:65:34:C8:35
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45F5
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/K_4gptu9STxLFULUPSJu_GU0yDU.roa
Signing time: Thu 07 Apr 2022 00:30:07 +0000
ROA not before: Thu 07 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17909 (0x45f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 7 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2BFE20A6DBBD493C4B1542D43D226EFC6534C835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:8e:e1:6f:c1:72:f3:db:24:c9:d4:ba:b8:
52:0d:84:16:54:f6:27:63:55:79:b6:55:66:b2:f4:
89:4f:19:b3:bb:0a:e4:95:75:03:38:23:19:04:bf:
79:46:4d:70:aa:bc:a4:80:9a:6e:7f:13:e8:e4:fd:
50:97:29:8d:13:42:04:8d:f7:26:28:60:34:9c:02:
24:19:49:6b:a0:0c:c5:d7:83:71:08:8a:eb:b1:c7:
b8:1e:1a:63:c6:2c:83:43:a4:c0:94:83:bd:c3:a6:
83:7b:5b:46:5a:7f:07:07:2f:76:af:0a:c5:42:6e:
6b:3f:e3:32:e1:eb:b9:5b:4e:99:b4:be:b8:81:61:
e4:37:e7:89:1b:ec:20:b6:ba:48:59:c0:66:a7:ef:
27:b4:dd:c9:51:db:41:84:76:33:8e:9b:bd:1a:24:
f7:8c:6f:c7:f6:d6:61:31:58:bb:89:34:4d:f1:f7:
8e:50:5b:2a:97:21:e1:54:7e:06:8c:a1:34:06:7b:
93:b1:19:97:7f:a5:fd:45:7f:02:c8:5b:06:e8:aa:
94:9b:2a:3b:ad:a9:fa:7e:e2:be:8e:49:17:73:f0:
a9:0f:c1:34:e9:a1:12:e8:d3:a7:d2:32:78:02:3e:
a3:1b:9f:98:47:92:40:db:3e:b7:0c:a7:5e:9c:b6:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FE:20:A6:DB:BD:49:3C:4B:15:42:D4:3D:22:6E:FC:65:34:C8:35
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/K_4gptu9STxLFULUPSJu_GU0yDU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
27:8c:ec:f7:99:b5:86:4b:49:14:0a:c3:11:57:74:65:74:71:
88:d7:29:b8:a2:da:52:91:ac:5d:e6:c0:0f:65:b0:9e:36:f5:
ec:ac:3e:dc:48:a0:81:4f:5a:3f:69:dd:51:a9:a3:bb:ad:a0:
96:df:b7:5e:c7:db:ba:cb:c7:73:30:f0:b2:7e:88:62:28:02:
2c:32:fb:ea:bd:26:04:19:57:c2:b7:8b:73:5e:7f:b9:d8:29:
ae:19:40:1d:39:ac:de:e5:08:53:2e:a7:3e:0e:b4:4c:e0:ea:
31:94:b1:1d:9e:6d:3a:c3:67:0d:44:5c:ef:3f:78:fa:c5:79:
1d:02:62:21:90:6b:a6:b9:a4:99:f6:c9:37:5d:64:f7:57:c5:
09:25:42:c7:50:57:27:9f:07:04:ed:8a:a4:89:51:3f:86:c3:
64:37:af:5b:53:de:6c:e4:21:f6:f5:d5:1d:5d:3e:6b:93:e6:
e5:59:7f:fa:4c:33:70:12:59:76:77:cd:6d:35:33:4e:09:cf:
e5:00:5a:83:ed:7d:cc:4f:05:76:01:83:da:06:b9:ac:3b:bd:
29:c2:ea:f1:c7:97:b7:2d:dc:f9:17:24:04:87:a9:48:67:93:
d0:eb:1d:f1:f3:e2:4b:f3:bd:6c:b8:5c:00:47:4a:56:01:7c:
ae:05:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org