Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/LdIyG8tKGYjtaRM3WAjrhllyEkI.roa
File: LdIyG8tKGYjtaRM3WAjrhllyEkI.roa (raw, json)
Hash identifier: ohCutt0EEFZvNZEsAQZplky0ddY8Z+yfCJo9XeDwNxY=
Subject key identifier: 2D:D2:32:1B:CB:4A:19:88:ED:69:13:37:58:08:EB:86:59:72:12:42
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 47D4
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LdIyG8tKGYjtaRM3WAjrhllyEkI.roa
Signing time: Wed 11 May 2022 00:30:12 +0000
ROA not before: Wed 11 May 2022 00:30:12 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18388 (0x47d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 11 00:30:12 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=2DD2321BCB4A1988ED6913375808EB8659721242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:d7:21:82:0d:5e:30:90:07:32:7f:65:74:
96:17:40:3e:53:b9:b5:5e:d6:b9:e5:76:97:f0:bb:
d0:c0:af:02:be:b5:3a:33:e5:3d:4a:9b:0a:e5:c1:
04:aa:27:62:9c:8f:d7:6d:db:2a:8e:a1:7e:7e:cc:
c2:1f:62:95:27:c6:fd:7d:69:f5:85:a3:42:b9:37:
5e:ae:a8:83:bc:42:e6:1e:f3:5c:26:1e:5f:26:bb:
e6:89:50:af:5d:87:78:72:dd:b9:78:8b:ad:7b:fc:
a6:d8:0b:93:94:02:64:87:27:fa:31:06:ad:d6:8a:
07:a3:fb:39:5d:37:da:c8:95:4f:87:34:21:e8:b8:
14:04:eb:38:7c:c6:ba:3c:31:f1:2d:16:1d:3e:0d:
b0:26:6f:81:ae:75:f2:02:ad:ad:ed:80:a6:8e:d4:
4b:b7:d0:65:8c:64:7b:cc:6b:77:9f:cf:81:33:3c:
30:96:30:a5:4b:fd:5e:74:e4:9b:c7:b7:81:d6:b6:
01:df:55:38:fd:b1:43:c1:5c:b1:b6:29:70:13:35:
e6:80:be:f0:d6:71:7d:5b:05:9c:75:3e:08:b9:5a:
73:7a:3a:1c:58:cf:26:e5:c8:96:25:55:c9:d0:c5:
85:7c:aa:ff:85:95:50:8a:d6:5d:35:79:d7:df:f3:
50:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D2:32:1B:CB:4A:19:88:ED:69:13:37:58:08:EB:86:59:72:12:42
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/LdIyG8tKGYjtaRM3WAjrhllyEkI.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
33:69:10:68:f4:86:7d:48:e4:6c:53:1a:90:14:14:0a:d7:ee:
f2:45:b7:71:35:8f:6b:52:42:fe:54:00:ea:4c:f2:9a:df:5d:
46:76:2e:2f:ae:53:f9:78:a3:e3:14:65:40:9b:fa:88:7b:7f:
84:3c:f4:8f:37:08:cd:bf:da:24:a9:01:ca:89:b0:24:e7:9a:
df:6d:ec:0d:c5:34:3e:ad:a7:30:00:04:b2:b9:cf:10:3f:c9:
8f:48:30:5f:50:b8:94:1d:49:b1:cf:74:79:8c:ba:27:21:c5:
57:28:1d:f2:11:8a:7f:22:5a:97:e2:59:61:22:66:97:10:44:
f4:68:e4:8b:c6:94:7c:bd:49:a5:2b:13:29:59:bb:41:f9:8d:
ce:6d:3a:51:2c:23:55:64:a1:67:4e:f2:fd:0a:95:72:86:3f:
1a:b5:0c:51:52:de:c0:76:0f:5f:3c:6b:65:94:77:9f:95:08:
14:99:a4:a1:04:3f:96:9a:62:89:81:11:d5:f4:f8:2d:57:0b:
75:8f:0b:5a:c1:1d:13:cc:75:cb:25:89:c4:61:f7:66:c5:ea:
e9:e4:9d:17:92:15:2a:d5:e7:4a:82:7c:c0:63:be:b5:ac:eb:
b3:d6:1c:c3:7b:50:79:ea:1a:f2:00:61:a0:d8:cc:3b:74:cc:
2c:d5:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org