Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/uC-mjOuMVYO7LUadi5mQTCxlFrM.roa
File: uC-mjOuMVYO7LUadi5mQTCxlFrM.roa (raw, json)
Hash identifier: mb0R5OCHQIKvSFTrbw/+ckDcO7lQZOGUyqhWOmWp5HU=
Subject key identifier: B8:2F:A6:8C:EB:8C:55:83:BB:2D:46:9D:8B:99:90:4C:2C:65:16:B3
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 48A6
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uC-mjOuMVYO7LUadi5mQTCxlFrM.roa
Signing time: Thu 26 May 2022 00:30:16 +0000
ROA not before: Thu 26 May 2022 00:30:16 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18598 (0x48a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 26 00:30:16 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=B82FA68CEB8C5583BB2D469D8B99904C2C6516B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:da:bf:a8:50:4d:5d:22:ac:2e:2d:d4:ed:
cf:92:21:1e:b6:fd:9c:25:c9:e1:d6:78:1a:0d:2b:
57:9d:76:65:45:7a:4a:76:92:88:60:cb:fd:c8:90:
3d:5f:05:94:83:7a:29:89:ac:ad:b3:e5:98:75:d6:
28:53:4b:41:e5:0f:a5:1f:67:c9:7a:ed:06:5a:3b:
69:72:bd:54:67:9b:6e:f4:04:3d:e9:fc:70:4f:b9:
b9:1d:c3:52:e3:5e:aa:4f:82:0d:ad:66:7c:a5:67:
d6:ba:4d:19:df:73:30:66:51:b5:33:cf:79:f5:1a:
d0:c5:7a:ac:4a:41:19:a2:ec:3f:0b:20:6a:87:1c:
ef:70:ec:76:ed:80:df:b3:82:81:53:fd:31:c9:0d:
f6:14:10:3c:8a:2b:12:80:59:b0:64:9b:23:e2:47:
ea:02:2c:58:64:e4:80:bf:28:30:51:17:fe:f1:53:
55:ef:ab:c6:fa:7f:8f:93:50:36:78:54:0f:b6:40:
65:bc:34:3c:41:65:06:d5:33:bb:01:c7:f5:9c:ae:
5b:b1:ad:e0:88:08:e6:b3:ae:18:6a:5a:42:79:05:
2e:d4:82:4d:9d:dc:9f:35:fd:52:7a:51:dc:f3:9b:
98:8d:4a:7b:ef:ce:ea:58:48:05:48:b2:a6:68:97:
43:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2F:A6:8C:EB:8C:55:83:BB:2D:46:9D:8B:99:90:4C:2C:65:16:B3
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uC-mjOuMVYO7LUadi5mQTCxlFrM.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f4:ee:a2:01:d3:75:00:a7:8e:94:2f:70:ed:27:94:8d:67:
7a:d8:20:e0:35:1b:b5:80:62:3c:29:06:73:e7:59:da:35:a5:
81:e3:88:01:6d:72:2e:8c:64:5f:86:33:a3:1b:87:4b:e3:23:
a2:4c:fd:21:2a:20:85:02:fe:fa:7a:68:c1:8e:d0:28:34:7f:
b5:cc:15:c5:32:a1:e3:1b:09:5e:1c:75:04:48:f9:fa:c8:14:
90:4c:21:af:1e:b2:23:f7:c0:d9:3c:f2:f0:af:fc:e8:b2:04:
b9:f8:2d:5a:5d:81:30:6b:38:9d:d4:54:55:98:0c:2c:18:e5:
56:24:03:40:0d:08:a1:72:1b:40:43:82:47:50:8c:5d:38:3c:
93:24:bd:a3:80:99:b6:f4:4f:c7:be:59:f9:48:53:34:8e:02:
6e:b4:9f:14:b9:9a:69:58:ae:dd:bc:1b:21:db:a0:ac:43:ff:
6f:7e:ac:34:67:62:f2:87:32:9b:ee:ad:cb:03:02:b6:44:57:
0b:50:cf:4e:a5:40:0a:ec:1b:8f:4e:f7:b9:ac:61:e3:e6:98:
ef:ff:7a:33:93:4a:fe:9e:0d:49:c4:4e:e5:89:77:00:51:8d:
5b:66:e1:6a:74:aa:25:18:61:08:f6:77:2f:0a:10:8f:ee:5f:
f8:06:88:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org