Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/vutTSv_itCwYegHkwvvNrzEDedc.roa
File: vutTSv_itCwYegHkwvvNrzEDedc.roa (raw, json)
Hash identifier: R2ABNS3GpQvJAGuX3Zp5ft9hgFBPqQIyIceOxJU4YDA=
Subject key identifier: BE:EB:53:4A:FF:E2:B4:2C:18:7A:01:E4:C2:FB:CD:AF:31:03:79:D7
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4836
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vutTSv_itCwYegHkwvvNrzEDedc.roa
Signing time: Wed 18 May 2022 00:30:06 +0000
ROA not before: Wed 18 May 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18486 (0x4836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: May 18 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=BEEB534AFFE2B42C187A01E4C2FBCDAF310379D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:5b:26:8b:a8:a3:b5:59:6d:b7:70:80:af:
7c:6d:8a:ca:7b:1c:d1:cf:41:9c:05:5a:c1:89:92:
cc:87:c2:2d:0a:41:65:4f:f7:de:4b:f8:0f:df:e3:
98:19:68:d8:9c:d9:86:a6:56:6b:08:79:da:1a:b6:
ab:fc:70:6d:63:e5:c3:71:0f:77:9b:fc:8b:18:d7:
46:da:2f:79:e7:01:0c:ee:51:03:8e:83:d3:71:f8:
bf:0d:a3:f2:f3:f9:65:45:b6:78:22:ed:48:45:38:
ba:88:8a:cf:48:61:f0:8a:44:4a:18:b2:d4:65:95:
09:a5:bc:5f:b8:5d:56:16:31:37:eb:31:cb:6c:74:
1d:ca:49:e8:a4:94:40:82:ab:83:4b:8d:d7:65:96:
be:7d:61:19:a8:46:05:6e:63:8f:2e:54:43:b6:3c:
a7:ce:0a:3b:83:e1:df:a7:29:93:1a:b8:c0:b7:f7:
69:fa:52:a9:e2:0d:fd:c5:af:f3:49:90:5e:b7:4c:
ce:36:40:c4:a4:ff:cb:0e:32:01:5c:43:ba:b5:82:
b0:8c:0d:74:b9:00:99:c6:af:70:da:ae:b5:15:7f:
f4:ab:e9:12:45:62:94:3f:a7:88:a8:66:b8:0e:6d:
ef:dd:9a:f2:b7:5e:1d:16:b4:a6:55:d9:1e:19:9f:
a6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EB:53:4A:FF:E2:B4:2C:18:7A:01:E4:C2:FB:CD:AF:31:03:79:D7
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/vutTSv_itCwYegHkwvvNrzEDedc.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f7:c2:07:40:e8:f9:7a:d0:f6:c9:bd:64:ee:e6:17:66:5e:
1e:b2:c1:ac:28:d0:36:5f:d4:4f:3d:21:7d:0a:1d:0d:7b:c0:
99:06:6d:3b:15:d5:2b:d1:77:fa:fe:90:f1:37:59:11:88:9e:
51:ef:8a:bc:b6:8b:17:ce:2e:6b:51:f5:f3:ac:25:35:60:f9:
d6:9b:17:af:e8:c2:51:a5:df:20:b5:f0:4c:33:b9:65:3f:e4:
9e:15:fc:62:22:be:b9:32:d4:9e:a1:7c:61:48:13:d0:01:9e:
2b:fc:e7:44:dd:69:33:ac:64:a6:ba:4a:a8:d6:2c:50:bb:4d:
f1:8f:90:07:04:af:4b:bb:ee:fe:75:94:98:59:3b:30:e7:e9:
c9:3b:60:0e:84:47:22:0b:68:1a:a7:f2:56:8d:a7:3d:e5:7b:
33:6b:5d:af:70:1f:2f:35:09:a3:93:ff:23:34:18:4e:ae:62:
f8:45:0b:b0:fc:e3:c1:73:39:6d:b5:5d:4b:37:d7:be:29:3f:
b2:28:23:18:92:42:24:a7:dc:d1:20:e0:09:29:3d:37:ec:8f:
b6:b6:d4:47:e1:ab:eb:5f:14:49:2c:7e:26:96:8d:df:40:cb:
f8:a6:a7:9b:d1:34:8a:5c:e8:66:5f:d4:01:56:e3:af:74:eb:
89:37:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org