Route Origin Authorization
$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/zJU-vPr3I-sedEyxFTJTz_VlE7w.roa
File: zJU-vPr3I-sedEyxFTJTz_VlE7w.roa (raw, json)
Hash identifier: 1F/Ddi8hFL2XfhfJql/BbMxWHSp/+tzJpfgM9HhzXUY=
Subject key identifier: CC:95:3E:BC:FA:F7:23:EB:1E:74:4C:B1:15:32:53:CF:F5:65:13:BC
Certificate issuer: /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial: 42EE
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access: rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zJU-vPr3I-sedEyxFTJTz_VlE7w.roa
Signing time: Thu 10 Feb 2022 00:30:08 +0000
ROA not before: Thu 10 Feb 2022 00:30:08 +0000
ROA not after: Sun 01 Jan 2023 01:01:02 +0000
asID: 47065
IP address blocks: 147.28.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17134 (0x42ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Validity
Not Before: Feb 10 00:30:08 2022 GMT
Not After : Jan 1 01:01:02 2023 GMT
Subject: CN=CC953EBCFAF723EB1E744CB1153253CFF56513BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:32:43:14:9a:89:a7:23:a0:81:6a:41:1d:
fb:db:46:7f:33:84:19:36:3a:96:f9:3e:a1:7c:c0:
6b:10:08:53:bb:bb:29:04:67:57:8c:35:6b:c9:13:
4a:68:67:f5:48:bb:f9:14:93:a9:b8:12:36:d6:6f:
a4:02:b6:c0:fc:4a:6e:d4:08:af:7c:19:73:8d:00:
b2:16:e1:a8:0a:93:8e:d8:32:f9:e3:09:27:bf:0d:
92:c3:15:7a:7c:eb:65:25:3d:81:d3:7b:a5:4a:f0:
d0:0c:10:29:fe:c8:1d:b7:79:80:5d:cb:a7:54:22:
03:2a:d7:4b:41:be:8a:b9:ea:2c:82:70:85:a2:37:
f1:13:ba:70:3c:b3:0a:18:70:26:44:96:25:a1:df:
4e:a9:b8:e1:a8:94:60:ba:d9:61:46:b0:3b:67:a7:
8d:23:e7:e9:a4:7a:ec:11:d1:11:4a:f5:32:4b:f8:
44:d0:29:db:e4:e5:7f:46:a8:30:8d:e9:df:65:54:
a6:b7:2b:3d:e1:0f:be:7b:d5:bb:09:32:3c:ab:5c:
e6:a2:d3:81:b2:04:81:7d:14:fe:c2:23:14:f0:e2:
41:f2:de:71:01:e6:6f:c9:65:f6:19:fc:e3:40:1e:
79:26:be:0b:68:4e:2f:04:36:6b:46:fe:86:32:33:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:95:3E:BC:FA:F7:23:EB:1E:74:4C:B1:15:32:53:CF:F5:65:13:BC
X509v3 Authority Key Identifier:
keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl
Authority Information Access:
CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/zJU-vPr3I-sedEyxFTJTz_VlE7w.roa
RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
147.28.13.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:34:6c:98:8f:fc:53:15:30:ac:b4:17:a6:aa:77:ec:68:4e:
98:95:4b:59:1c:0d:83:2a:54:12:e4:bd:10:3c:56:b2:cb:cb:
e4:a5:f3:9d:d4:4b:a8:51:0f:cd:17:06:ee:51:f7:7c:fc:85:
34:3e:06:d0:2c:d3:ff:33:f1:e4:db:7a:39:cf:be:5f:17:22:
a0:dd:be:4b:4c:f9:49:6a:82:d9:70:b2:ad:60:df:78:1a:36:
0e:a4:10:8a:ec:a8:49:08:9f:4b:52:6c:50:e4:51:c1:41:bf:
e0:81:41:63:94:19:14:be:02:cb:64:10:e8:12:83:d3:c6:14:
23:39:47:d1:8c:39:03:50:a4:73:51:9a:f3:ce:ee:3e:87:04:
7b:2c:8e:71:e9:25:b4:65:66:b5:ca:32:6a:3c:84:e7:03:e9:
7c:e8:9d:a9:74:37:48:31:57:6a:0c:4a:fb:85:b3:02:93:e0:
c6:61:7f:89:3d:b4:d5:14:d5:df:6f:56:c1:9c:b9:63:20:84:
82:d4:6b:86:28:6e:73:92:d9:18:ed:e2:ab:0f:a5:4f:a9:c9:
ed:15:ce:1f:d8:73:8e:58:ae:2b:e2:31:e8:c8:3b:03:1b:d3:
a6:f6:7a:ad:45:01:39:09:c5:4f:5e:8b:7f:1b:71:ed:7f:82:
c5:47:dc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:53 2023 by rpki-client on console-ams.rpki-client.org