Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/fpyqoRjexoRdOHBJtADHW-Ywv3c.roa
File: fpyqoRjexoRdOHBJtADHW-Ywv3c.roa (raw, json)
Hash identifier: XAwfBm9Hxd8wLoMEgVmI4zsEoKEqQvfImn8D8Xrq3f8=
Subject key identifier: 7E:9C:AA:A1:18:DE:C6:84:5D:38:70:49:B4:00:C7:5B:E6:30:BF:77
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 477D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fpyqoRjexoRdOHBJtADHW-Ywv3c.roa
Signing time: Thu 05 May 2022 00:30:07 +0000
ROA not before: Thu 05 May 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18301 (0x477d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 5 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=7E9CAAA118DEC6845D387049B400C75BE630BF77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:eb:af:de:59:ae:95:27:c2:76:ed:e7:63:
13:3f:fe:4f:2a:0e:37:34:45:1b:96:b6:63:ab:5b:
ff:37:25:5d:cd:66:b2:b4:7f:2a:a5:2f:68:f1:dc:
46:83:ff:f8:1e:c1:ca:e2:e2:21:a4:b2:96:19:6e:
46:7a:02:3a:40:b2:a2:f4:db:4e:de:f5:e3:35:5b:
ca:60:b7:47:0b:21:0b:d7:71:82:25:fc:ef:53:59:
26:bb:dd:0a:3a:16:4b:6d:bc:64:26:cd:f4:a6:c0:
c7:a7:25:78:ca:68:76:d2:ea:57:b1:60:92:86:35:
36:43:1a:db:aa:bd:90:84:73:fc:1e:14:c6:6b:5f:
6d:e4:2c:ec:ee:c9:93:9b:b5:94:55:55:47:ad:82:
24:40:cf:ca:19:3d:e8:f6:61:b2:9f:77:25:cc:ae:
8e:a5:fd:9a:e6:bc:a8:fd:c7:48:79:e4:25:70:5d:
66:5f:c1:74:1c:09:eb:7d:b4:bb:c6:ac:30:18:44:
4e:d1:1b:6e:bb:20:bb:ec:0a:b1:dc:4c:66:8d:3e:
92:6d:b9:62:95:93:83:b1:87:36:28:5d:0d:8c:25:
06:a5:66:f3:30:3c:00:b8:ba:ce:6e:de:ea:6f:c3:
6a:e2:c1:0a:24:e3:28:64:f6:3c:19:e1:2c:53:43:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:AA:A1:18:DE:C6:84:5D:38:70:49:B4:00:C7:5B:E6:30:BF:77
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/fpyqoRjexoRdOHBJtADHW-Ywv3c.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:4d:73:e6:7d:16:d9:a8:e8:ad:23:83:bd:33:d3:35:0c:b6:
4c:99:7e:ff:51:38:4c:41:15:59:73:9a:8b:37:d2:a9:d9:e3:
5b:53:0a:b3:98:91:52:53:64:1d:21:73:7e:67:dd:bf:27:e8:
1e:97:e5:11:d9:6a:fb:47:46:3d:26:aa:10:21:d1:a2:e1:1f:
af:9d:1e:ea:5a:60:90:2c:b8:d7:82:f2:37:77:04:a2:b3:63:
4a:6f:59:b8:48:cf:b8:11:4d:56:d1:0d:38:e3:da:94:69:d0:
62:db:62:7b:ea:dc:1c:81:a2:45:db:db:47:b8:c8:64:0a:bd:
9e:2d:bd:a8:fc:f4:c2:94:f0:73:dc:7d:2b:ce:f0:8a:02:47:
b2:01:23:9d:fc:17:0c:de:a3:b0:ba:76:8c:20:11:37:76:7b:
4d:aa:10:68:5a:8c:03:7e:9f:b6:25:81:7c:ee:14:41:56:91:
61:2c:a0:16:e8:b0:91:d6:10:34:93:37:30:c4:d2:c2:13:0a:
96:9b:0d:db:6f:35:ac:38:36:a0:30:e3:44:dd:99:b5:ba:75:
72:18:4f:52:ca:bc:60:a2:7b:63:8e:35:ed:a4:af:c3:8d:39:
a7:71:1a:48:b5:2d:ca:4c:26:41:55:54:28:38:6e:86:a5:cc:
ac:f0:f1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org