Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/mkvZLqG_d_eNAAaMMwLcFCcYrxI.roa
File: mkvZLqG_d_eNAAaMMwLcFCcYrxI.roa (raw, json)
Hash identifier: R4YVvuXTvQrR51qGvikXZD3kFuJ164XLXk5RFf+9858=
Subject key identifier: 9A:4B:D9:2E:A1:BF:77:F7:8D:00:06:8C:33:02:DC:14:27:18:AF:12
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 44C3
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mkvZLqG_d_eNAAaMMwLcFCcYrxI.roa
Signing time: Wed 16 Mar 2022 00:30:08 +0000
ROA not before: Wed 16 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17603 (0x44c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 16 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=9A4BD92EA1BF77F78D00068C3302DC142718AF12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:a0:01:b9:0d:f0:69:ce:4d:39:60:2c:5f:
34:1e:08:87:a3:55:93:64:a2:f0:df:d2:48:8f:41:
88:b8:06:10:fb:f5:a3:30:64:ac:1c:38:93:05:4e:
57:36:56:26:d6:22:ae:c9:67:6b:41:c5:40:23:44:
d3:3c:7b:52:af:57:0a:4b:92:70:24:4b:a2:d1:6d:
60:ca:04:e4:6c:98:26:bb:d2:41:45:c9:3c:47:7a:
4d:d1:84:ed:62:c4:6f:82:ce:98:66:e3:62:b8:0c:
1f:35:cd:91:7f:e5:7b:60:98:cc:97:ed:8c:06:a1:
40:19:59:36:a2:9e:2c:64:7b:12:a8:d0:e9:60:26:
89:71:a3:73:38:22:f9:d3:8a:75:d7:0f:d9:2f:a3:
7d:c0:9b:57:24:43:26:db:ed:80:32:50:fb:1d:35:
8d:cd:bd:37:a7:25:a2:1c:cc:0a:0a:a0:eb:a3:15:
28:95:2e:01:2d:26:82:c5:21:56:38:de:0a:42:08:
cc:da:6f:3f:82:fa:cb:a5:84:62:69:c3:bd:43:6a:
75:ae:a8:73:8a:eb:c6:46:f9:2b:8c:33:4f:ca:6b:
dd:cc:ac:48:10:83:42:40:23:e6:fa:40:f9:f3:88:
34:ea:7d:df:ef:9c:54:4a:5b:14:b2:7f:b7:23:c9:
4a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4B:D9:2E:A1:BF:77:F7:8D:00:06:8C:33:02:DC:14:27:18:AF:12
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/mkvZLqG_d_eNAAaMMwLcFCcYrxI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:15:e2:22:c5:e6:da:c6:e0:e9:00:a6:bf:f5:b5:f5:59:aa:
09:dc:d5:35:75:0b:51:4f:94:44:01:aa:65:09:b0:45:ec:7a:
bc:0e:7f:c9:4a:76:66:c5:96:86:cb:09:22:db:35:41:ee:b5:
61:09:49:9c:fa:58:d8:0d:85:1d:b4:45:e6:22:4b:ac:73:27:
54:c9:02:7e:8b:2a:2d:0b:1d:1b:7c:6c:3d:d3:35:27:ae:01:
2b:2a:fa:4e:4f:b5:ef:92:8c:4a:76:43:1b:40:7f:34:fc:a5:
c8:bc:63:82:b7:24:a5:20:98:1a:b2:a5:e9:c2:60:f5:f7:aa:
29:b0:ef:d5:85:11:67:98:4a:cb:a7:91:42:ab:97:0e:07:e9:
75:2f:dd:3c:f2:2c:10:74:e7:63:54:63:ef:bc:d3:14:78:b9:
ae:82:11:2d:b2:12:7d:47:01:bb:d4:54:7a:a3:89:5c:51:d9:
20:81:85:bf:93:31:1c:3c:56:b9:30:c7:7f:3b:b2:4f:ec:b3:
fb:6c:cb:c3:0b:1e:4e:ef:ad:d9:c5:37:d4:d3:19:9e:a6:2d:
b9:e5:ed:96:2b:6b:aa:a6:12:2d:7c:d8:1e:2a:ee:1b:df:36:
00:bc:ff:b4:85:a0:0d:49:d1:37:e8:45:90:2d:85:77:d9:1f:
0a:8e:94:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org