Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/3ut21gd1kcowEHmWNjwq8ZC2Je4.roa
File: 3ut21gd1kcowEHmWNjwq8ZC2Je4.roa (raw, json)
Hash identifier: V3qcI7vR4VtU4oyARyo5o06PL7qJDoR+g1AaNOFtL9w=
Subject key identifier: DE:EB:76:D6:07:75:91:CA:30:10:79:96:36:3C:2A:F1:90:B6:25:EE
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42EA
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3ut21gd1kcowEHmWNjwq8ZC2Je4.roa
Signing time: Thu 10 Feb 2022 00:30:06 +0000
ROA not before: Thu 10 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17130 (0x42ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 10 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=DEEB76D6077591CA30107996363C2AF190B625EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:7c:eb:fa:4b:54:2b:fe:6c:7c:bb:1d:f5:
e5:3d:79:19:a0:89:b6:b2:c7:63:fa:d3:60:91:22:
d3:8e:c3:e1:d0:6e:31:b3:da:64:81:f1:34:12:f8:
42:b4:c3:5d:1e:0d:e3:38:7a:1a:46:be:79:e0:51:
80:19:c2:05:75:aa:1e:b0:fa:28:c2:2d:b2:13:27:
3a:c6:0a:61:44:ba:93:ca:28:94:4e:e1:e7:03:56:
4a:d8:3d:ff:ed:24:bc:2d:b6:60:47:5d:74:a7:a0:
9e:ae:a0:df:30:ea:20:79:1d:b7:c5:2b:57:35:f0:
75:93:d7:b7:a1:56:ea:22:a4:71:d4:0c:dc:44:9b:
84:9e:be:99:38:e9:02:21:41:f1:1f:33:9f:f6:df:
f7:1d:8d:c4:c3:ce:86:7d:3d:18:75:da:51:c0:89:
cf:e1:db:e7:d5:2f:39:ec:24:ad:32:68:86:d2:07:
a0:19:b7:0d:1c:0e:e2:74:ce:39:24:f1:70:de:41:
cd:45:14:9b:b2:09:87:63:c7:6b:87:c1:e0:0a:27:
09:c6:da:31:62:ab:f2:9f:ec:e8:9d:1a:40:d2:b0:
b8:26:8a:10:35:72:ee:4f:b3:03:a2:e9:74:08:4c:
35:e3:27:8f:0e:10:30:cc:3a:d5:91:e3:5c:4c:d4:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EB:76:D6:07:75:91:CA:30:10:79:96:36:3C:2A:F1:90:B6:25:EE
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/3ut21gd1kcowEHmWNjwq8ZC2Je4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:54:bf:48:1b:0f:7e:a7:f6:94:99:69:98:7e:66:ed:a4:76:
9f:1d:45:5a:9d:53:26:a7:85:b9:93:a0:68:65:a9:34:9a:3d:
32:4b:a4:c9:8f:0b:9e:e6:87:48:3a:47:c7:bb:c9:cc:ea:78:
f3:91:24:38:1d:39:ab:89:ac:3f:73:05:94:af:28:00:2f:c0:
45:45:50:f5:e7:41:e6:b1:6e:5e:e0:91:ae:f9:f0:9b:03:b7:
03:49:49:02:41:d8:38:a2:96:1a:bc:70:7b:5d:c3:22:98:c1:
d6:74:c8:74:7f:4c:3e:bd:03:21:7a:40:ad:7c:e3:4c:8b:0f:
ec:67:95:20:f2:60:aa:74:6d:3b:a9:7f:0d:ab:af:fd:98:1b:
13:af:e3:a0:b4:44:01:92:4f:c4:8d:db:3b:65:3d:47:d8:49:
48:80:e4:ae:6e:07:5f:53:f6:55:44:08:3c:57:4f:30:e4:a5:
d7:b4:f1:19:30:8f:4f:2a:63:74:e5:d5:3f:66:b0:fa:8f:34:
03:cd:a4:49:19:9a:c1:b4:94:3e:c4:3a:3e:f5:dd:e2:e8:de:
d7:11:2b:ea:08:88:1d:ed:b6:e1:d0:7d:93:b6:3c:45:25:42:
07:c2:6c:50:6f:92:5a:1f:73:41:c6:3c:ca:b6:5e:df:3d:80:
e5:79:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org