Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/MNz1ifcrdzG8rZMlv3bajKAGNJk.roa
File: MNz1ifcrdzG8rZMlv3bajKAGNJk.roa (raw, json)
Hash identifier: kEV2kFKo1g2ZU/0XvZDIXFhSPzGqKp1Y+ZwosTUfB9o=
Subject key identifier: 30:DC:F5:89:F7:2B:77:31:BC:AD:93:25:BF:76:DA:8C:A0:06:34:99
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 49BD
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MNz1ifcrdzG8rZMlv3bajKAGNJk.roa
Signing time: Sun 12 Jun 2022 00:30:05 +0000
ROA not before: Sun 12 Jun 2022 00:30:05 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18877 (0x49bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 12 00:30:05 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=30DCF589F72B7731BCAD9325BF76DA8CA0063499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:50:10:0e:b7:ca:d9:bb:40:3e:56:cf:7c:
77:38:39:a0:be:8c:b0:96:b6:59:89:82:03:ac:cd:
64:ac:55:f6:45:f3:f1:e1:94:76:07:2e:6d:7d:6b:
dd:a6:84:bb:d0:47:ce:60:98:19:83:9c:27:66:91:
29:40:04:38:ad:8c:68:7a:75:e9:59:97:72:2e:fe:
0b:c2:97:62:ee:b5:73:b5:90:c8:56:7b:22:50:d6:
c7:6b:f1:a5:34:ab:10:65:1d:81:89:33:84:d2:ed:
7b:91:5b:23:1c:f7:59:c2:f5:a5:a1:30:ba:c1:67:
57:4f:7e:60:52:bd:a5:1d:4e:e2:52:cf:4a:60:0c:
59:19:6c:54:d1:41:ee:c3:89:fd:9b:93:e5:5d:83:
c9:d3:87:35:ca:e0:ca:7b:b2:f7:b0:c6:08:26:3f:
40:96:03:cb:b8:3b:60:b1:d1:11:29:d2:e8:d6:2f:
52:a1:c7:b4:16:e1:56:5e:05:6c:a3:b8:02:94:66:
0a:5b:ed:69:50:e2:27:45:3a:78:bc:a2:4d:5f:eb:
25:4f:5f:ec:6e:39:cb:54:8e:21:23:32:7a:3a:e6:
2c:89:a0:48:e6:30:e6:26:74:f5:3a:50:cc:ab:3e:
bf:a1:14:dd:ba:d0:e7:59:33:b1:d0:ba:45:17:15:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DC:F5:89:F7:2B:77:31:BC:AD:93:25:BF:76:DA:8C:A0:06:34:99
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/MNz1ifcrdzG8rZMlv3bajKAGNJk.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.5.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d7:44:87:16:88:5b:e9:9e:af:0e:b7:2b:ad:82:b7:12:07:
42:86:5b:92:ad:a3:5d:07:4f:49:20:fa:83:0b:1d:7a:a7:64:
fd:16:ad:16:97:a4:3f:03:d2:a5:77:f5:83:ad:8a:87:3d:e1:
a6:2f:f5:16:ac:0e:d4:34:ec:fa:90:fd:c2:74:64:f3:02:cf:
25:00:5d:b2:5e:76:33:a6:a0:31:a6:f0:40:b3:2c:c3:c8:76:
ac:d5:70:26:d6:48:02:cb:f5:85:44:43:e1:cc:b4:13:93:d7:
be:f6:f3:c0:1c:9d:30:e1:05:69:7a:63:29:45:9f:60:a6:00:
6c:81:56:2c:01:df:02:54:e9:7d:d5:5f:44:60:cf:49:1c:d0:
5a:d2:1f:d9:30:af:6c:5a:8e:93:5f:bf:db:38:80:a4:f3:40:
62:7d:7f:4e:c6:25:ac:cc:10:d5:71:c5:74:06:74:9a:6f:59:
e5:91:9a:30:9b:27:f9:a8:7a:40:b5:aa:56:d0:e3:da:e7:4b:
95:bc:ff:12:b4:a8:23:80:44:89:b1:59:e6:2f:8b:80:75:49:
3e:bf:69:1d:2a:f3:f5:36:a9:d4:7c:02:ec:a4:8c:df:54:c8:
02:3e:f9:ab:af:01:76:f7:4b:1b:b9:c7:ad:5a:0d:e2:94:10:
bd:aa:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org