Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/smtRho_tchzQJh6BpoXSK4dKG_g.roa
File: smtRho_tchzQJh6BpoXSK4dKG_g.roa (raw, json)
Hash identifier: VncFh0FIWDnjn1om0/Iw/FdMT803G9gS42Bcj5Bb1u8=
Subject key identifier: B2:6B:51:86:8F:ED:72:1C:D0:26:1E:81:A6:85:D2:2B:87:4A:1B:F8
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4879
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/smtRho_tchzQJh6BpoXSK4dKG_g.roa
Signing time: Mon 23 May 2022 00:30:06 +0000
ROA not before: Mon 23 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18553 (0x4879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 23 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B26B51868FED721CD0261E81A685D22B874A1BF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:0b:df:ac:ef:a4:7c:c0:3d:5f:45:43:e2:
ae:dd:6a:fb:6e:77:d6:1b:6e:65:f6:a3:15:93:83:
53:cf:3d:11:eb:3a:39:c6:3b:1c:0b:e5:f8:ca:ec:
8b:f1:d6:62:cd:17:85:a0:00:7d:6e:55:e1:aa:a2:
6e:71:90:4f:64:c9:0a:e9:06:56:4d:a9:61:a6:3b:
b2:4d:45:bc:85:d2:75:fe:f5:8e:94:35:5a:3e:1e:
4a:06:7f:d3:fd:58:a3:26:83:ee:4a:b2:3e:bc:92:
54:86:be:2c:53:12:e9:a1:f6:de:6d:37:f6:4e:b3:
1a:a6:e5:f6:78:d6:c2:06:75:93:85:f7:f8:b5:60:
a8:75:e0:44:87:ca:79:15:7b:13:3e:27:86:61:32:
2d:95:50:c8:ae:50:23:e1:54:c4:31:f0:28:9c:2d:
81:0b:54:af:86:ee:51:8b:f4:44:20:a5:29:1e:6a:
4d:2d:c6:6b:f7:3f:6c:0d:e9:a6:b2:38:ff:f0:ca:
88:96:05:d7:40:0b:48:d7:58:b3:ab:6a:cb:00:84:
3d:ea:70:bd:ae:6f:c8:3c:47:16:28:63:8c:48:a4:
3d:7b:0d:00:90:5f:44:23:90:89:af:3b:6e:1e:f4:
c5:cf:ac:93:96:9d:5e:3a:d1:a3:0b:89:8c:af:07:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6B:51:86:8F:ED:72:1C:D0:26:1E:81:A6:85:D2:2B:87:4A:1B:F8
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/smtRho_tchzQJh6BpoXSK4dKG_g.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:bf:89:05:78:1e:26:fd:c8:3f:25:47:ae:4e:d9:fb:4a:25:
27:83:0f:81:fb:ee:5c:61:75:17:62:e1:c5:41:64:9e:6d:56:
fd:99:c0:a9:b1:a1:e1:66:e0:38:ed:b0:c6:f7:ee:b6:c3:76:
91:a6:3e:67:09:07:30:b7:4d:f0:f2:cf:6c:62:a6:34:be:0f:
12:ad:dd:dd:48:c0:91:fc:bd:cc:df:95:76:36:c9:b6:fa:2f:
d5:5c:49:1e:8a:44:25:e3:eb:04:b1:d0:d1:57:87:30:50:2d:
55:af:32:3c:12:b4:9e:4f:3b:9a:69:ee:cf:8e:c2:33:83:1a:
69:d2:35:d0:6c:9f:e7:1e:78:7b:08:50:61:c8:4f:ba:3f:a2:
59:ea:6c:b8:5d:cf:47:91:0e:79:e9:62:d4:ea:0f:dc:25:3c:
a8:c4:5e:76:ab:96:e5:0a:de:41:74:c3:bd:67:fa:27:a3:93:
02:05:52:dc:bc:0c:cc:08:02:6f:25:84:83:6e:b0:40:ec:d8:
63:b7:24:c7:5d:8f:6e:e2:fb:a4:24:e8:1b:b1:81:4d:9e:fe:
53:f2:24:5d:45:7d:5d:0e:b4:a9:a2:fd:45:d6:0d:1d:f4:1a:
98:70:ab:97:25:ce:c8:ed:77:5b:9e:fa:fe:f0:18:5d:e0:4c:
2b:0f:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:21:41 2025 by rpki-client