Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/Uu0oRl8EH3-dG1dRbgUzpwiz7jY.roa
File: Uu0oRl8EH3-dG1dRbgUzpwiz7jY.roa (raw, json)
Hash identifier: AXUielZh/POBuRXEKKKJ8dFgfWw5leoFCNa9jHjDPz4=
Subject key identifier: 52:ED:28:46:5F:04:1F:7F:9D:1B:57:51:6E:05:33:A7:08:B3:EE:36
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4614
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Uu0oRl8EH3-dG1dRbgUzpwiz7jY.roa
Signing time: Sat 09 Apr 2022 00:30:10 +0000
ROA not before: Sat 09 Apr 2022 00:30:10 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17940 (0x4614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Apr 9 00:30:10 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=52ED28465F041F7F9D1B57516E0533A708B3EE36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:06:fb:c9:e6:2b:cb:8e:4e:33:ff:c8:2e:0f:
4b:de:1c:ff:bf:4e:af:8f:cc:66:d8:20:d7:b6:a3:
c7:66:1a:f9:b6:46:95:94:23:d1:b4:3f:58:33:5d:
7d:b2:dd:4d:3f:b6:7a:61:d0:9b:2d:f8:ab:fe:48:
cf:f7:2f:9c:74:8e:ba:4e:cb:30:88:bb:88:3e:0e:
1e:48:d5:dd:44:2f:a7:b6:b4:32:60:8f:e0:b6:ca:
74:80:a7:89:1c:54:33:09:82:f0:ff:c6:2c:fd:3d:
3c:52:e7:75:ba:62:44:b0:27:a9:a6:5b:01:e3:eb:
88:13:ee:b0:7d:53:2c:a0:80:13:a4:ce:e6:9e:b5:
5c:69:90:97:13:50:b9:21:42:04:e2:6e:19:31:c8:
c4:11:ae:05:3d:db:be:62:c0:d1:72:e4:f6:b3:84:
f6:c6:8a:ec:82:3b:55:76:57:a6:93:83:33:7a:8b:
2e:98:5b:4b:91:9c:9c:8c:a4:42:f3:3a:7d:4e:fa:
95:c7:e5:3f:0b:fb:25:c6:d9:91:67:3d:d4:2f:0a:
fc:75:20:1d:ea:b4:8c:ba:71:50:e9:b0:be:a2:e0:
21:46:7c:0a:56:cf:90:ee:aa:8f:ba:47:0c:dd:ab:
98:67:33:95:ae:7c:03:5b:e0:05:3a:93:3b:82:1d:
b4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:ED:28:46:5F:04:1F:7F:9D:1B:57:51:6E:05:33:A7:08:B3:EE:36
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/Uu0oRl8EH3-dG1dRbgUzpwiz7jY.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
38:78:15:1b:d6:a4:d6:1d:13:2f:b5:ed:b3:5a:34:4d:ac:66:
cc:a2:02:4f:ab:f9:3f:4f:41:70:e2:dc:a1:ce:3f:66:e9:b4:
22:f6:a3:b3:c0:00:55:ad:cb:fb:03:1f:e5:fe:5b:95:00:33:
18:c8:ac:ee:f5:fd:91:46:78:a7:ad:bf:67:6f:99:c1:2c:03:
18:39:bd:ef:b5:6e:14:03:05:c6:e2:ad:71:4a:4f:df:ed:93:
9b:02:a1:6c:5c:60:8e:7a:96:00:da:7f:4f:1f:7f:7b:f8:f6:
53:32:6f:17:b7:d5:9a:9c:f8:7f:79:74:1c:e8:74:32:bc:0f:
43:da:f0:ef:ea:86:06:4c:9d:1d:e7:e7:9c:a0:d3:36:e3:57:
dc:ab:62:48:90:f9:de:dd:a9:5d:b7:12:ac:ea:46:ae:43:03:
30:b9:55:0a:55:85:a0:7c:e4:9e:79:0d:1b:55:6a:9a:30:0f:
4e:82:53:3c:f2:90:3c:99:a4:0e:36:7a:d3:0b:d3:67:9c:38:
95:77:26:8b:2f:4a:db:cb:f9:90:2a:59:6f:9d:d9:a4:1c:16:
7c:57:ff:37:1f:b7:a9:5e:88:9c:b9:d8:6c:19:03:9c:c7:cd:
60:e8:60:a1:41:7a:d2:97:80:ae:68:40:28:dd:a8:55:7c:67:
d1:a3:76:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:53 2024 by rpki-client on console-fra.rpki-client.org