Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/UxWBL1oYU9bjYdVnPWBVpIGvCqo.roa
File: UxWBL1oYU9bjYdVnPWBVpIGvCqo.roa (raw, json)
Hash identifier: 7eIXnPqt0nJnA273niCkNXJ+zfsb3TZ7oAwZ45LByrM=
Subject key identifier: 53:15:81:2F:5A:18:53:D6:E3:61:D5:67:3D:60:55:A4:81:AF:0A:AA
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4998
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UxWBL1oYU9bjYdVnPWBVpIGvCqo.roa
Signing time: Thu 09 Jun 2022 00:30:09 +0000
ROA not before: Thu 09 Jun 2022 00:30:09 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18840 (0x4998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 9 00:30:09 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=5315812F5A1853D6E361D5673D6055A481AF0AAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:8f:11:0d:43:a3:35:fb:eb:db:fe:60:cb:
2e:b1:27:00:92:32:8c:0c:57:de:d1:0e:7a:71:a1:
5d:8b:c4:01:a5:99:c0:27:c0:60:c6:f0:ed:84:c5:
2b:8a:42:49:9d:e6:3a:aa:a1:a7:83:ee:1f:53:bb:
b5:11:fc:9d:78:8b:c1:b0:50:06:60:f8:b0:1b:5d:
26:d9:29:79:e4:06:c2:76:cb:35:79:33:bd:6f:dd:
bb:34:14:8e:10:84:50:f2:e3:d2:d3:84:df:d9:f7:
6a:8f:40:d7:48:9f:e6:24:7f:bc:93:8d:dd:dd:42:
4e:2d:4f:1d:a8:06:39:69:5f:86:a3:99:5a:c6:35:
b0:dd:78:89:ef:f1:fa:01:5e:6c:cf:38:3c:40:f9:
c6:e5:c1:d5:06:fb:65:d5:ca:49:e4:80:c4:c0:a4:
23:40:fc:b9:cf:9b:37:a1:e4:73:62:77:00:ab:b1:
3e:dd:da:9c:60:29:2d:32:36:2c:c3:90:3d:db:6b:
61:41:7b:8d:5e:9a:0f:bf:71:fa:a3:0d:e1:98:10:
fd:d4:ed:03:79:34:95:bb:a0:23:ba:f7:92:0b:d5:
7b:89:c4:75:f2:a8:ff:d3:87:1b:23:93:16:02:e7:
38:7f:a3:98:bf:a6:8c:94:d6:66:14:47:5b:00:18:
94:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:15:81:2F:5A:18:53:D6:E3:61:D5:67:3D:60:55:A4:81:AF:0A:AA
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/UxWBL1oYU9bjYdVnPWBVpIGvCqo.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.3.0/24
Signature Algorithm: sha256WithRSAEncryption
91:cb:e3:c2:bb:03:7a:ff:b1:da:a4:aa:f0:b8:5d:85:22:ca:
e2:5a:9c:92:80:c6:14:a8:41:cc:e4:65:02:5b:18:e9:25:c2:
40:ec:8f:89:7c:39:25:08:2e:e8:8a:69:43:d5:f3:97:c0:2a:
1e:d0:fa:ae:81:c6:b4:60:e2:1d:7e:dc:95:b9:41:48:a0:40:
33:13:ac:1a:b1:36:5b:4e:ee:c2:c4:a1:61:b9:b6:20:30:e9:
a7:bf:a6:76:fa:71:59:73:57:2e:1a:1f:5a:63:ab:9f:0a:f0:
fb:dc:91:b7:17:33:c3:4a:4f:9c:6f:8b:bc:7b:7f:bd:43:ea:
33:b3:ff:5f:4c:35:d4:98:ba:6a:a6:e7:c1:68:d8:7f:3e:af:
89:ff:80:1d:6a:3f:03:95:0a:30:c1:08:9f:cd:01:c5:45:5f:
fb:48:ec:8b:73:8a:51:25:74:8c:5e:eb:5a:1d:b5:bd:38:2c:
24:67:f7:d7:89:1d:1c:47:01:3f:fe:58:34:30:58:55:00:7a:
ca:24:de:74:0a:ec:ea:75:1c:92:a8:08:6e:ca:93:cf:9a:77:
0e:4e:6c:01:16:0c:ca:15:a3:8b:94:de:f8:79:37:28:5b:c2:
2b:02:48:d2:03:5a:82:88:b1:31:47:fd:04:75:54:85:b3:c9:
6c:e6:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:51 2023 by rpki-client on console-ams.rpki-client.org