Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/cDfUW_q3rzToEVCSS6vtPzsaeyw.roa
File: cDfUW_q3rzToEVCSS6vtPzsaeyw.roa (raw, json)
Hash identifier: Xqf6V4qHE4/dm4T7SYJ0Eb7Q48m2rg3o3cMU1FBsROc=
Subject key identifier: 70:37:D4:5B:FA:B7:AF:34:E8:11:50:92:4B:AB:ED:3F:3B:1A:7B:2C
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4517
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cDfUW_q3rzToEVCSS6vtPzsaeyw.roa
Signing time: Tue 22 Mar 2022 00:30:08 +0000
ROA not before: Tue 22 Mar 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17687 (0x4517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Mar 22 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=7037D45BFAB7AF34E81150924BABED3F3B1A7B2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:49:d3:8e:8f:12:ba:23:2a:65:ec:11:22:
40:ea:11:73:33:6e:32:53:ce:45:cd:7e:c0:f3:03:
05:db:22:cd:88:c5:d9:d6:99:74:a5:c4:b9:db:de:
c5:7c:5a:33:c8:c8:1b:a5:a9:cc:de:ae:9a:12:a1:
25:f3:cb:ee:80:dc:2e:9b:aa:f7:b5:3a:d3:62:60:
3f:97:24:5a:63:2f:7e:1a:3c:f7:40:db:72:a4:43:
1f:45:ef:92:36:23:0f:31:74:e0:0f:0c:ed:a0:cc:
62:47:1e:00:90:d4:9b:c5:4a:97:9b:cd:51:43:99:
fc:0f:8f:27:6c:8d:a3:20:7c:cb:82:bc:4e:9f:f3:
ec:85:86:24:13:3b:3e:1d:e2:88:5a:a0:dd:4c:23:
b0:c3:64:a8:b2:88:20:65:82:dc:c6:8f:b8:ca:50:
3a:16:e8:1a:c0:3e:2e:90:7b:62:83:b6:21:2f:f8:
16:be:4a:52:85:f2:6c:3d:e4:b7:d4:16:ca:ef:35:
72:72:a9:ab:f1:64:3b:34:3f:5c:18:d6:25:cb:4f:
75:c7:9b:66:72:69:88:5b:7c:6a:d6:a5:84:60:78:
2d:72:10:76:82:85:59:16:dd:85:ba:75:82:2f:a0:
73:5f:6f:e4:a7:49:e2:e3:51:34:e4:16:9c:f3:07:
91:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:37:D4:5B:FA:B7:AF:34:E8:11:50:92:4B:AB:ED:3F:3B:1A:7B:2C
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/cDfUW_q3rzToEVCSS6vtPzsaeyw.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
02:4c:fc:60:ea:3e:19:b8:04:1a:31:ef:2d:c6:ba:b9:e2:d5:
ca:6b:aa:a4:a1:95:68:e6:b1:d6:11:20:17:1d:be:c1:66:9f:
07:1a:98:c0:f7:3a:be:dd:35:b7:5a:cd:5a:be:94:5c:24:a9:
c3:8c:0e:e1:a7:91:6b:6a:91:32:db:eb:e2:ba:a8:0d:11:45:
90:b0:5d:b5:23:e7:74:17:e8:8a:b4:5a:d5:be:35:fd:83:48:
7f:f8:d8:4c:9e:fc:ff:86:ed:92:88:19:9d:ca:03:bc:a0:bc:
3f:42:05:2c:b9:50:0b:6d:a5:37:05:7a:91:31:86:77:05:80:
fb:84:ca:98:ab:3e:2e:a1:c6:48:f6:1f:1d:ca:1c:d9:5f:9a:
84:94:2a:8d:47:e0:45:82:fc:5a:b1:fa:fb:96:5e:ad:0b:73:
b2:f1:d4:da:a7:92:28:ab:5d:a9:c0:21:34:ae:53:3f:57:6a:
3a:c2:cb:17:54:35:40:70:2d:a9:c2:f2:b5:a6:8c:46:c0:27:
67:bc:e4:31:99:32:9d:6a:f3:bc:fa:88:cb:8c:95:e8:4a:79:
0f:c8:20:79:03:24:2e:71:e8:9e:41:a8:24:5c:ae:ae:e7:fb:
7b:a7:a4:0b:bd:1c:f9:9c:91:bc:3b:6c:87:c1:00:7f:33:c2:
79:92:a5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:37 2023 by rpki-client on console-fra.rpki-client.org