Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/5EZUefji_Ujsho9n31SybFit5MU.roa
File: 5EZUefji_Ujsho9n31SybFit5MU.roa (raw, json)
Hash identifier: dZ0o1TLeL3GqS9duVWD1J2VTEH2zlCJopwcSuvRF5GI=
Subject key identifier: E4:46:54:79:F8:E2:FD:48:EC:86:8F:67:DF:54:B2:6C:58:AD:E4:C5
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 45DC
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5EZUefji_Ujsho9n31SybFit5MU.roa
Signing time: Tue 05 Apr 2022 00:30:07 +0000
ROA not before: Tue 05 Apr 2022 00:30:07 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17884 (0x45dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 5 00:30:07 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=E4465479F8E2FD48EC868F67DF54B26C58ADE4C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:17:fa:9e:ab:17:f3:d4:52:6f:01:ed:a9:
b5:e5:5e:89:e5:b6:92:71:55:5d:47:50:0f:b0:aa:
70:2e:28:3a:1b:e7:0a:92:56:51:b8:05:7d:37:db:
a2:0a:76:46:fe:20:6d:90:29:20:33:ac:ed:2f:e5:
e1:c3:ed:e5:24:ed:d9:f6:98:b7:d8:42:0e:84:2e:
b2:6e:44:15:24:2b:bc:f6:aa:4b:f0:bf:9c:69:37:
2f:0a:98:bc:d8:b3:35:ab:5a:29:54:de:73:ee:d6:
b4:4e:5e:3f:42:a5:d1:e7:81:18:1a:17:28:34:0a:
3d:53:74:cb:84:d0:84:91:66:06:4d:63:b1:79:52:
d5:91:83:71:8c:92:57:e7:c3:88:88:2a:e7:65:d2:
79:b2:1d:e4:6f:ff:1c:82:4c:60:81:97:fe:c7:2e:
1c:a7:dd:64:5f:d9:0f:85:48:1f:69:05:58:4e:5d:
8d:dc:fc:e7:a6:35:ea:71:40:fd:15:c2:1b:e7:da:
5b:2b:ab:5b:d1:91:1f:46:08:f9:10:cd:73:41:53:
19:19:5c:79:0f:f2:78:68:ed:88:be:b9:ad:3f:29:
90:b7:48:33:18:01:15:8f:b4:6a:eb:4a:7f:49:e4:
4f:eb:2e:0a:cb:78:d1:16:13:50:92:9a:7d:cc:2b:
61:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:46:54:79:F8:E2:FD:48:EC:86:8F:67:DF:54:B2:6C:58:AD:E4:C5
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/5EZUefji_Ujsho9n31SybFit5MU.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
19:64:23:87:5a:30:9e:d4:36:10:5b:83:72:0b:99:36:a1:69:
9f:2b:1f:9d:fe:46:b7:7b:e8:a6:df:7c:45:25:5a:53:e4:5e:
9c:bb:1b:1b:85:50:eb:14:ab:a1:8e:88:1d:1c:7a:d6:fb:88:
4f:5b:ad:bc:a7:2a:c9:68:6c:8a:c4:ad:09:4a:aa:13:88:7c:
27:34:a9:39:38:2b:43:5f:e2:42:75:01:ea:e1:66:9d:11:f7:
f3:c3:60:45:6f:a5:82:3c:85:60:88:83:b2:f9:c6:20:ba:a6:
f7:99:a5:b9:4e:34:b8:6d:f1:8b:1f:5a:24:12:29:05:ae:62:
d9:26:ac:b9:75:bb:77:27:ec:92:d5:3e:cc:90:67:e8:fe:20:
70:18:b6:4e:35:5f:35:78:c9:9e:28:02:db:c3:ed:02:18:e8:
4c:ee:47:12:3e:f3:22:4f:87:70:f0:d0:06:ba:1f:d8:2e:ac:
df:37:a2:38:07:7b:4a:f7:68:e9:9d:c9:f7:0a:bf:b5:1d:10:
12:64:53:50:f1:c6:d8:ca:ea:86:03:fb:24:8f:f6:53:5e:29:
68:14:0e:a9:47:4c:68:97:8d:a4:ee:e9:de:95:8b:6c:ed:12:
0f:b8:d3:2f:f7:b1:4a:00:ab:f4:89:d1:aa:cc:29:d1:58:e0:
94:ad:5a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:50 2023 by rpki-client on console-ams.rpki-client.org