Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/ecZ0mF0gBNSFGFwWdJkiC6BNFL4.roa
File: ecZ0mF0gBNSFGFwWdJkiC6BNFL4.roa (raw, json)
Hash identifier: w7wqwbJORptDclU4ABKhxib6U2u85Fnh5QAtTJGch4U=
Subject key identifier: 79:C6:74:98:5D:20:04:D4:85:18:5C:16:74:99:22:0B:A0:4D:14:BE
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4780
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ecZ0mF0gBNSFGFwWdJkiC6BNFL4.roa
Signing time: Thu 05 May 2022 00:30:08 +0000
ROA not before: Thu 05 May 2022 00:30:08 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18304 (0x4780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 5 00:30:08 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=79C674985D2004D485185C167499220BA04D14BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:77:f4:2c:6d:48:dc:59:3e:37:08:2a:93:
00:84:29:97:cd:f6:39:c9:e1:9e:e2:7f:07:d8:c5:
59:b8:10:d3:06:38:ae:ec:e5:31:73:c1:8c:14:c0:
fb:d6:a8:61:28:5c:dd:99:52:82:03:91:6d:63:18:
81:b8:81:d2:21:68:1b:67:ad:02:af:f3:6f:28:f5:
a6:34:5e:5f:1a:5e:bc:24:47:17:13:52:c0:6c:83:
40:56:c3:ea:b7:79:89:2d:3d:1f:70:2c:8d:0f:6e:
c8:b3:51:4a:37:ec:f2:04:79:07:fd:b6:90:f0:4c:
b3:e3:8a:74:e1:9e:a2:6e:eb:52:b8:e8:c1:17:24:
af:15:dc:d5:c9:0d:ac:86:ba:49:8f:94:d9:35:ab:
38:ba:35:44:0e:ac:15:0b:32:ac:16:ce:d8:46:ce:
be:fb:ac:05:6b:78:8e:c7:53:3a:7b:b1:77:ca:cd:
60:be:df:41:56:5c:b9:3a:67:24:fd:6f:00:38:87:
49:46:3d:f6:8b:0f:8f:cf:3b:1a:08:48:76:1c:b6:
ff:d0:ec:36:e6:1a:d2:1b:82:ee:ba:1f:ea:c7:f5:
3e:2b:04:37:04:95:10:a7:95:4d:cc:a9:2a:b7:18:
c1:e2:ec:52:0b:72:5d:80:d8:f7:48:cf:25:d4:16:
f5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C6:74:98:5D:20:04:D4:85:18:5C:16:74:99:22:0B:A0:4D:14:BE
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/ecZ0mF0gBNSFGFwWdJkiC6BNFL4.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a1:f5:cb:7c:8c:01:de:87:35:c7:db:b9:23:7a:49:be:23:
c0:89:76:dd:d9:1e:f9:40:a3:ce:e8:d8:95:29:83:8d:a4:63:
0b:61:e0:21:c3:a3:51:f0:7b:87:4a:5c:8c:33:43:92:3b:1e:
bf:5c:b1:38:ac:33:5b:b4:b4:62:d9:ed:ef:6d:28:a2:a7:ca:
f4:cd:71:78:b9:10:ef:6a:43:ac:a5:92:66:26:f6:8f:3a:73:
e3:d0:59:39:d4:ea:f5:33:50:9c:20:37:b5:54:00:07:2a:ee:
c4:74:1d:2c:f9:42:94:43:b5:0c:60:0a:fb:ed:54:88:fc:12:
98:d2:2e:c2:2b:90:c8:1b:47:14:e3:54:11:a3:06:42:f0:1e:
9e:0b:2f:b9:06:e1:f9:9f:9d:09:ca:ef:0d:d9:85:b6:b9:1f:
e4:0f:63:9c:0a:75:30:af:dc:a4:49:4d:12:58:fd:d6:f3:3d:
b0:68:de:24:b3:f0:38:f7:7d:c7:d9:6f:55:a8:43:1e:4c:96:
bb:89:43:df:59:df:dc:fb:a9:cf:1d:8e:9d:45:31:b6:86:4b:
69:2a:f1:c3:02:94:c8:69:7e:f9:04:79:f0:a7:de:5d:f0:08:
5c:71:fb:fd:34:23:34:c2:dc:c0:41:c2:61:c6:23:33:2b:8c:
53:08:d9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org