Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/uh_alm4Saj_hJMt73AaatDwmt7Q.roa
File: uh_alm4Saj_hJMt73AaatDwmt7Q.roa (raw, json)
Hash identifier: 5LyS7bxA1dl66jzzZ0Vvm3fkvdZREjzbC5h5Dk0lAV8=
Subject key identifier: BA:1F:DA:96:6E:12:6A:3F:E1:24:CB:7B:DC:06:9A:B4:3C:26:B7:B4
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 4978
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uh_alm4Saj_hJMt73AaatDwmt7Q.roa
Signing time: Tue 07 Jun 2022 00:30:06 +0000
ROA not before: Tue 07 Jun 2022 00:30:06 +0000
ROA not after: Sat 01 Apr 2023 22:21:14 +0000
asID: 51224
IP address blocks: 147.28.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18808 (0x4978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Jun 7 00:30:06 2022 GMT
Not After : Apr 1 22:21:14 2023 GMT
Subject: CN=BA1FDA966E126A3FE124CB7BDC069AB43C26B7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:50:69:dd:21:88:f1:11:eb:7d:67:67:c4:
6e:77:71:a4:d6:d6:9a:38:5e:cf:86:a5:2e:13:a8:
b9:e4:11:74:1c:e9:97:04:c5:8d:09:f7:f1:67:3f:
51:90:97:72:3a:03:47:ec:e8:7e:88:be:e4:fd:31:
6b:a3:b4:84:46:26:49:97:36:1c:93:e1:3a:a7:f3:
a7:f2:ed:fb:cf:2c:36:b7:60:89:be:31:39:85:9f:
12:ad:16:2d:ef:ab:73:43:94:06:4d:0a:df:b7:19:
60:49:ef:09:0c:94:5b:30:93:b5:bf:dc:40:a7:9e:
1c:0a:1b:a1:20:a3:22:47:3f:34:e9:b5:ed:8b:d8:
6e:cf:3a:51:92:82:93:be:d7:7a:ab:97:34:7b:8a:
07:4a:03:4c:45:ab:53:35:43:a1:81:06:fe:7a:96:
06:4a:0c:95:20:6a:b4:1c:54:12:39:43:56:57:dd:
1b:1b:ef:b7:36:66:43:41:59:56:46:4b:87:eb:be:
da:26:09:ce:cc:f1:11:2d:69:d3:d9:39:29:ab:46:
8d:7b:5c:65:c3:35:43:25:d1:e5:fb:38:4d:f8:ee:
b2:f3:0b:fb:b9:47:ec:3d:f7:e9:ef:b6:b3:53:0a:
02:95:aa:01:5a:20:e9:1e:8c:3a:7d:c4:76:0e:3d:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1F:DA:96:6E:12:6A:3F:E1:24:CB:7B:DC:06:9A:B4:3C:26:B7:B4
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/uh_alm4Saj_hJMt73AaatDwmt7Q.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f1:71:dc:aa:48:90:db:c9:2e:64:fb:da:4d:e3:fb:3a:54:
6e:e0:c6:c8:5a:50:0a:de:d4:2f:19:8a:a1:0b:5c:5b:d2:41:
cf:19:9a:45:29:a0:07:64:c9:e2:ed:5a:f0:85:69:fc:81:cb:
bf:13:ec:5d:f1:3a:8a:6d:41:27:fb:01:e0:f2:9e:03:6c:fc:
45:ff:87:04:a0:95:53:85:56:6d:ef:68:ec:2f:08:3f:34:b3:
b6:fb:18:b1:cc:86:f1:36:1c:2c:5e:b2:65:0b:bd:ea:c1:06:
7e:d3:40:ca:26:31:1e:b9:b7:ad:d5:7b:a2:4d:fc:43:c2:54:
1a:4a:60:0d:79:cb:ce:1a:62:3f:9d:ce:62:08:e6:27:d8:18:
46:af:a6:f6:44:a9:33:af:36:ac:c5:67:2a:52:35:1a:07:a6:
4c:af:e3:5d:4d:7d:6d:e6:57:01:10:f6:4d:20:31:ac:7f:5d:
b1:f2:4b:5e:ef:c8:bf:e9:c2:a6:cf:18:aa:98:1f:60:14:8f:
7f:bf:eb:2c:e8:e3:6c:24:22:49:53:e7:86:a9:cf:88:67:78:
03:d9:72:09:2b:e6:af:a7:de:c2:e5:35:18:34:42:26:92:04:
6c:98:4d:71:b4:f6:5f:c4:63:fd:43:c4:87:93:38:63:72:b3:
b4:91:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:52 2023 by rpki-client on console-ams.rpki-client.org