Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/3epeVMOWN5dGd_xPY-jCTrZadgc.roa
File: 3epeVMOWN5dGd_xPY-jCTrZadgc.roa (raw, json)
Hash identifier: P7+4JNfHb1vpwzCHFbUKg9ss6D/M8PeO2hh2yQ/E0Q8=
Subject key identifier: DD:EA:5E:54:C3:96:37:97:46:77:FC:4F:63:E8:C2:4E:B6:5A:76:07
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 492F
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3epeVMOWN5dGd_xPY-jCTrZadgc.roa
Signing time: Fri 03 Jun 2022 00:30:08 +0000
ROA not before: Fri 03 Jun 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18735 (0x492f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 3 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=DDEA5E54C39637974677FC4F63E8C24EB65A7607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:94:5d:eb:ea:7f:3e:27:72:60:0d:af:b4:
44:22:09:07:65:e5:d4:31:ef:59:b5:3f:76:d4:00:
8d:d1:92:6d:40:24:69:ee:a9:0c:60:ef:2f:ad:a3:
e9:e7:8c:50:22:d4:d9:c0:2e:5c:69:3d:22:f2:0f:
f0:e8:74:cf:69:e9:a6:7f:48:d2:e8:ad:f1:91:15:
6f:35:2c:4d:ff:84:a9:57:13:38:d8:23:2c:fa:83:
1d:cc:53:65:f4:5c:b6:92:87:cd:7d:25:27:d5:2f:
a9:78:85:ab:1f:29:cc:22:82:62:94:4c:34:cd:27:
61:1e:41:b4:a0:ac:97:cd:0e:7f:20:61:2f:c2:4a:
ef:08:af:86:37:31:81:ee:35:bb:be:67:e6:0c:84:
ae:7d:3f:30:b4:4d:ec:a8:1d:86:88:d9:da:a8:95:
1a:1d:1d:f6:16:c8:99:c3:78:7e:47:4c:37:1c:bb:
c8:1e:63:13:d5:3e:56:e4:28:03:d8:64:bb:86:ea:
84:ed:78:34:95:2c:78:7e:53:2b:bf:35:68:eb:e2:
50:95:22:b2:49:2f:38:f5:a0:cf:45:5e:14:60:fc:
d1:a5:cb:b5:2e:3a:7f:2c:a6:27:6e:e6:b6:29:7f:
b7:93:91:e0:c1:e8:83:f4:66:59:25:ef:32:55:81:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EA:5E:54:C3:96:37:97:46:77:FC:4F:63:E8:C2:4E:B6:5A:76:07
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3epeVMOWN5dGd_xPY-jCTrZadgc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.14.0/24
Signature Algorithm: sha256WithRSAEncryption
34:da:2e:d7:4a:d2:1b:62:49:52:74:6c:dc:05:f4:90:08:30:
25:2f:0e:d0:f4:1c:76:41:46:ee:b6:a0:8e:a9:c3:18:cb:b9:
f0:5c:41:c7:63:d1:ef:f1:60:1d:78:71:7d:55:07:22:70:63:
2d:f3:ae:51:68:e2:fe:f8:72:b3:2b:e3:12:8c:63:5a:74:8d:
a0:06:90:07:e6:3b:d5:6d:85:20:a3:9a:67:58:79:71:e4:11:
2e:e7:3b:f4:0c:ef:6d:92:a1:17:c1:d2:3b:f4:05:c0:ae:72:
ef:20:14:78:12:a3:d0:5a:8c:b2:4b:60:89:3f:92:ce:73:92:
4a:1d:5c:df:f2:7a:2c:2b:08:ff:33:88:33:15:4b:06:a2:29:
18:32:01:ca:f4:8b:0d:ad:b4:64:88:19:a1:f4:aa:5f:1e:1c:
f7:21:70:40:4a:8f:60:d7:7b:e5:5f:dd:c7:20:16:93:e2:da:
b5:1a:d2:45:a5:64:eb:25:99:1f:5c:1e:23:27:dc:2d:4e:70:
3e:59:9b:64:25:9d:cb:ae:38:6c:05:83:d0:38:bf:e1:67:d1:
52:ee:87:86:28:87:f7:72:a0:9e:b5:14:32:4b:b6:35:7f:d9:
d8:3b:3d:e4:8c:57:cd:f6:6d:ee:6a:d1:3f:39:82:f6:3f:18:
4c:75:20:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org