Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/HNUjyvOzvkoqbH3mmNCyi1Z4Dfs.roa
File: HNUjyvOzvkoqbH3mmNCyi1Z4Dfs.roa (raw, json)
Hash identifier: OOnmGHRxkYmkONKmYlDoqs1raMomgcLe4pwdliNiSY4=
Subject key identifier: 1C:D5:23:CA:F3:B3:BE:4A:2A:6C:7D:E6:98:D0:B2:8B:56:78:0D:FB
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 430A
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HNUjyvOzvkoqbH3mmNCyi1Z4Dfs.roa
Signing time: Sat 12 Feb 2022 00:30:06 +0000
ROA not before: Sat 12 Feb 2022 00:30:06 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17162 (0x430a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 12 00:30:06 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=1CD523CAF3B3BE4A2A6C7DE698D0B28B56780DFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ee:6d:43:e8:9a:9a:65:8e:27:a0:17:fc:77:
3f:80:23:e8:ec:12:77:2c:3c:03:48:be:1e:6b:e9:
b8:18:2d:72:67:7d:fd:5b:85:55:1f:9a:65:7b:15:
4a:c6:88:b9:6e:5d:14:0c:c5:56:93:1b:af:69:1c:
65:32:17:9a:b1:8c:ad:a0:88:b5:2e:17:3b:40:97:
14:65:e8:51:5f:d7:bf:3a:5f:bf:e7:86:96:77:cd:
84:08:b9:a7:26:26:d4:05:4f:46:70:b7:64:49:ad:
77:ff:9f:ed:78:90:21:0a:53:ee:3e:de:be:d5:86:
1a:f2:52:51:5f:89:d8:00:06:3e:82:3c:b9:bb:28:
4e:4e:43:a7:e9:d4:44:96:16:1b:c0:c6:4f:8b:54:
c6:73:92:4d:40:06:df:8b:e4:e7:e2:19:34:65:00:
44:02:00:5a:0e:2a:44:4f:d2:b0:d7:aa:18:b0:41:
25:89:d1:b4:9d:dd:3c:93:2a:6e:87:36:50:68:f9:
de:0a:46:d6:4d:49:96:ad:35:2b:86:4e:80:28:b8:
1f:3a:cf:8b:a9:b7:79:cf:8b:4c:35:7a:29:5c:9e:
21:d5:09:9c:ae:ab:98:6f:2a:dd:45:7d:da:2b:fa:
2a:0d:23:94:58:16:c0:3d:51:1d:6e:27:ae:30:59:
6d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D5:23:CA:F3:B3:BE:4A:2A:6C:7D:E6:98:D0:B2:8B:56:78:0D:FB
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/HNUjyvOzvkoqbH3mmNCyi1Z4Dfs.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a6:83:1f:28:55:31:b1:57:fe:d3:65:9f:5e:96:0b:8e:91:
81:27:9d:9d:8b:3c:88:a0:46:d3:c3:37:d3:d5:cb:27:70:9c:
b9:c1:3a:e7:5f:6b:dd:a8:d0:30:ee:90:40:20:7d:40:e8:62:
cc:e1:27:a7:0c:1a:4c:d9:59:20:85:e7:23:0c:fd:e2:ba:0a:
0c:6d:dc:ab:54:c8:88:20:d2:8e:f6:b4:64:57:50:29:52:b1:
b4:4d:ef:88:ec:9a:71:40:d0:33:aa:88:8c:f7:d7:8e:a0:e5:
ed:ba:73:88:14:57:f0:17:1a:77:87:b8:cd:97:a8:16:7c:b9:
cb:9c:f2:39:ed:bf:a2:98:cd:f7:15:1b:71:6c:99:c1:a4:c6:
00:47:89:a3:3d:a7:b6:35:b6:2d:01:9e:d8:18:06:35:01:c8:
b0:a2:07:b4:24:88:54:06:ef:52:fa:07:ce:7d:9f:af:c6:66:
40:1d:80:37:9a:aa:9d:40:09:af:7a:1b:2a:31:59:fe:a9:6c:
d4:22:c8:47:5a:1d:68:32:44:ee:6d:93:f0:7f:6a:43:5e:50:
a7:ea:c4:66:e8:8d:a2:32:5c:eb:cc:45:ea:15:ab:96:e0:f4:
8a:53:1f:75:a1:33:58:23:68:63:3f:ba:cc:f4:6d:05:d6:c5:
ed:04:0c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org