Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/zhCVPsP3bTdTZXHwbpIRj9xelcM.roa
File: zhCVPsP3bTdTZXHwbpIRj9xelcM.roa (raw, json)
Hash identifier: Yc5C5Z1hyFeEepafZz5bMn0Q+BeVsprwb35BzDXjdFI=
Subject key identifier: CE:10:95:3E:C3:F7:6D:37:53:65:71:F0:6E:92:11:8F:DC:5E:95:C3
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4986
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zhCVPsP3bTdTZXHwbpIRj9xelcM.roa
Signing time: Wed 08 Jun 2022 00:30:06 +0000
ROA not before: Wed 08 Jun 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18822 (0x4986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 8 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=CE10953EC3F76D37536571F06E92118FDC5E95C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:88:7d:df:5e:2c:f5:66:ba:fa:8c:36:3c:
2c:6d:59:0b:35:0f:89:6c:f7:b3:c0:83:9b:5f:72:
a3:8b:0f:9c:3b:e6:5d:c2:63:28:bb:57:59:7b:a6:
8f:8c:8c:2b:61:47:b8:06:6c:35:d4:6c:f4:2f:ad:
94:ba:95:7e:a5:50:91:eb:21:45:f0:ed:d5:ce:c9:
f0:53:8e:19:95:b9:96:c5:9b:be:f2:03:b0:8e:07:
f2:bf:19:ef:5e:5e:2e:a1:b2:40:48:51:a4:14:ad:
08:80:1b:c5:ea:95:23:ce:8a:d5:ff:9d:2e:10:33:
c2:7e:d6:ee:ac:66:2f:cb:0b:c4:3a:fa:82:3b:79:
0c:7b:bd:34:4e:77:94:44:ff:70:4f:dd:d9:b5:82:
4d:6f:57:e4:00:9b:0b:15:f6:b0:d8:1a:18:03:6c:
6b:df:1c:d0:89:34:01:b2:60:9c:ad:dc:c8:70:a7:
3e:f3:2d:f5:02:2a:c1:65:f2:ca:7e:c5:ef:f6:90:
ed:68:ce:5a:04:36:ef:98:54:60:2c:01:4d:b8:0e:
f4:fc:89:3e:d6:30:1a:eb:20:4a:08:a7:74:63:e9:
ba:92:e5:18:32:be:cd:30:36:f8:20:c2:c5:3d:30:
6f:ec:e9:2c:03:94:66:0e:2d:0b:4b:c5:25:81:f7:
a2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:95:3E:C3:F7:6D:37:53:65:71:F0:6E:92:11:8F:DC:5E:95:C3
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zhCVPsP3bTdTZXHwbpIRj9xelcM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c2:52:62:42:e0:5e:b9:58:49:86:38:5e:5c:b5:55:fb:c7:
0c:f2:a2:7b:3a:cf:97:b7:81:77:66:c0:18:fd:dc:49:6f:8f:
96:ac:e9:4f:cb:3c:1a:c3:2c:b8:b4:4b:b7:7b:f2:86:1d:27:
6e:ac:3e:5f:26:11:27:2a:fb:00:fb:24:d8:48:d0:09:46:94:
02:e5:c4:6b:0e:6f:c2:f5:15:4c:a6:68:7a:17:f1:5f:ac:d8:
41:6a:8e:73:91:5a:04:e4:28:7f:2e:d6:ae:d5:76:ea:35:b3:
5c:83:07:a5:96:76:b0:e0:48:80:66:20:4d:2a:2f:5b:fa:31:
04:7f:ab:c4:9e:b9:7b:95:01:62:89:97:87:21:a3:23:4c:d6:
1b:b6:30:e8:76:dd:55:f9:85:8b:7c:9d:1d:16:24:ef:11:ba:
4a:60:2a:cb:dc:e2:f9:b0:36:39:2d:66:4f:78:aa:9a:31:ad:
8c:0d:86:74:af:ef:fe:94:38:e1:a4:1c:41:15:a5:47:dc:3d:
0b:6c:13:6a:c4:67:59:cb:01:30:13:45:a5:5f:2c:d1:32:bb:
8b:4f:68:cb:90:95:03:69:69:06:10:72:8a:5c:46:f9:c4:ec:
66:20:26:24:bc:d3:b1:31:d2:a8:00:86:be:4e:b6:f8:44:c3:
66:14:15:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org