Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/BY6WSO73ICEm-ybauTfsmnQYBSE.roa
File: BY6WSO73ICEm-ybauTfsmnQYBSE.roa (raw, json)
Hash identifier: Lsi2chM//vDrO8+YlDy1dJcDvg0VUuZiTYq2I4J/VO8=
Subject key identifier: 05:8E:96:48:EE:F7:20:21:26:FB:26:DA:B9:37:EC:9A:74:18:05:21
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4622
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BY6WSO73ICEm-ybauTfsmnQYBSE.roa
Signing time: Sun 10 Apr 2022 00:30:10 +0000
ROA not before: Sun 10 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17954 (0x4622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 10 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=058E9648EEF7202126FB26DAB937EC9A74180521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cf:1e:da:3c:a8:1b:bd:95:79:d6:81:f4:88:
d2:55:e3:2b:3e:d4:00:56:07:dc:43:55:d6:56:fb:
e9:1c:69:5e:37:22:63:54:8d:b1:e3:bb:3b:9f:79:
67:4e:95:83:62:50:09:48:28:b3:fc:93:f0:91:3a:
53:d8:b8:bc:25:3f:11:c8:bf:e0:33:0c:d5:e1:76:
95:ea:b6:93:60:57:b3:70:59:2f:f7:b4:a3:08:f3:
a7:c7:57:f5:ce:db:b2:fd:c6:71:31:f9:f3:b0:c6:
ab:95:c2:11:7e:ac:87:7a:7f:e7:39:6e:70:bc:fe:
a7:dd:a5:1b:18:65:5a:5a:9b:b9:b9:19:c5:d9:25:
d3:16:52:72:69:64:e6:77:32:71:db:a4:51:51:a8:
3c:00:b6:a6:d0:95:f5:c0:0c:1b:1f:d9:d8:27:5f:
2e:a6:77:41:b3:32:d0:cf:89:1c:8d:09:88:2b:66:
05:42:3c:9d:e9:49:4a:f7:43:8a:a8:8f:42:23:52:
2c:b3:98:f4:85:e1:7f:32:dc:d9:2b:b6:2b:69:c9:
66:84:00:43:06:49:f9:0d:ef:6f:80:b3:d0:19:da:
31:d0:c6:ca:a8:d2:28:97:23:a5:20:22:6f:c2:cf:
14:6b:c8:ad:c3:4b:a6:5c:6e:bd:98:4f:d3:a7:4a:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8E:96:48:EE:F7:20:21:26:FB:26:DA:B9:37:EC:9A:74:18:05:21
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/BY6WSO73ICEm-ybauTfsmnQYBSE.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
27:41:4c:04:34:90:52:39:4c:1b:30:1f:01:a5:d1:5d:c6:74:
d6:f0:58:cf:bf:ca:82:19:3b:e7:1b:83:80:60:56:76:e0:ee:
b4:b5:91:cc:24:2d:26:51:63:60:5a:79:2b:9e:f8:22:f5:d0:
d6:51:79:1c:c3:52:bb:65:93:ca:20:ca:be:f4:31:08:83:64:
f9:f4:8d:bf:65:ee:2b:1d:a2:54:c5:27:80:17:99:b2:ea:fa:
fa:28:56:0b:dd:3f:9d:b5:b5:5c:84:eb:a1:46:54:fa:70:af:
e0:fd:3c:88:58:00:90:3f:cc:a4:ee:37:80:38:4f:6c:df:72:
af:f2:5f:33:b5:26:d2:e9:69:cb:74:66:f1:71:52:c3:df:2c:
26:74:48:d1:39:73:87:57:a3:13:e6:98:5d:d7:b9:03:40:98:
9a:1d:ad:fe:ab:2d:75:8e:b4:75:4a:bb:a9:dd:a4:11:8d:21:
e8:5d:c3:6e:da:b8:60:5b:73:69:22:65:ab:43:2b:95:f0:ee:
fc:1d:e5:c4:15:b3:7c:5d:42:d0:63:3a:df:7a:d2:30:36:ef:
e3:a8:7b:24:07:37:d0:00:39:08:bc:0c:7e:14:a5:1a:c7:2e:
66:fc:e1:88:27:37:46:03:41:0b:47:63:a3:ad:33:b3:86:05:
7f:b2:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org