Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/d4c735eea5f97423a23ba03bcc9c760a10970b25.roa
File: d4c735eea5f97423a23ba03bcc9c760a10970b25.roa (raw, json)
Hash identifier: wUXBRHqN+FDOHTbLef0a5BEAtsm/pdCtBmyfPHoXRcg=
Subject key identifier: 09:1F:FF:9F:6E:9C:00:39:E7:27:0C:0D:1A:28:B2:BA:F7:2C:29:55
Certificate issuer: /CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Certificate serial: 16CECB
Authority key identifier: F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/d4c735eea5f97423a23ba03bcc9c760a10970b25.roa
Signing time: Sat 18 Nov 2023 01:52:35 +0000
ROA not before: Sat 18 Nov 2023 01:52:35 +0000
ROA not after: Tue 18 Nov 2025 01:52:35 +0000
asID: 22698
IP address blocks: 190.13.192.0/24 maxlen: 24
190.13.193.0/24 maxlen: 24
190.13.194.0/24 maxlen: 24
190.13.196.0/24 maxlen: 24
190.13.197.0/24 maxlen: 24
190.13.198.0/24 maxlen: 24
190.13.199.0/24 maxlen: 24
190.13.200.0/24 maxlen: 24
190.13.201.0/24 maxlen: 24
190.13.202.0/24 maxlen: 24
190.13.203.0/24 maxlen: 24
190.13.204.0/24 maxlen: 24
190.13.205.0/24 maxlen: 24
190.13.206.0/24 maxlen: 24
190.13.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1494731 (0x16cecb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Validity
Not Before: Nov 18 01:52:35 2023 GMT
Not After : Nov 18 01:52:35 2025 GMT
Subject: CN=d4c735eea5f97423a23ba03bcc9c760a10970b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:69:a1:97:83:74:90:09:72:63:b1:84:2f:
e9:99:5a:b3:f7:49:46:91:ed:cf:f3:10:8d:6e:44:
d7:3d:e5:ae:46:db:6b:c1:87:af:d1:cb:15:c3:0d:
b5:dc:9a:88:73:46:0d:27:ed:82:10:9a:52:75:b4:
22:c2:d9:ff:cb:ea:11:30:00:3c:25:a1:db:6b:2e:
4b:7b:62:79:08:5f:37:1a:fd:e3:b7:b0:1c:b3:62:
6c:45:9d:cd:e0:e7:55:c7:65:1f:38:a8:e0:71:86:
dc:e2:9f:c6:a6:66:aa:b9:b6:38:d9:c0:82:50:51:
9c:6f:a8:a8:82:dc:99:3e:0d:61:d0:7d:25:d3:5e:
b2:2c:10:70:49:c7:7a:2a:34:38:12:6d:2f:d0:a9:
3a:4c:f5:ea:f6:4e:ff:92:9f:ec:1e:c5:e9:8b:c6:
ef:9b:cc:e2:fe:8c:a4:f2:66:53:83:23:e4:9c:10:
b5:e9:14:40:3e:c0:c3:14:db:2d:55:f7:06:cf:2f:
12:43:6d:2f:00:69:08:ed:ad:6f:42:25:3a:32:af:
3d:d7:1c:5d:13:f4:4f:11:69:dc:ac:75:14:c9:06:
64:b0:38:a6:5f:9b:06:32:4c:d4:db:92:47:06:cd:
91:52:a6:3d:4f:9e:2d:3d:aa:36:9e:5e:51:12:de:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:FF:9F:6E:9C:00:39:E7:27:0C:0D:1A:28:B2:BA:F7:2C:29:55
X509v3 Authority Key Identifier:
keyid:F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/d4c735eea5f97423a23ba03bcc9c760a10970b25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.13.192.0-190.13.194.255
190.13.196.0-190.13.207.255
Signature Algorithm: sha256WithRSAEncryption
c7:f3:14:ca:85:6b:47:c5:8e:ef:d4:69:08:f2:33:ea:bb:bc:
3c:90:43:95:ca:86:13:4b:08:b7:f9:8f:13:16:ee:89:9e:f9:
18:3b:7e:80:14:16:e1:19:34:b3:58:83:bf:94:e0:52:2d:ac:
58:e2:f4:b6:21:53:73:14:44:e5:22:92:ed:4c:11:35:54:4a:
85:3b:8e:97:2b:45:eb:6f:76:dc:70:5a:c1:64:06:d2:63:1e:
1c:10:00:2d:98:a1:1e:c0:93:39:fe:7b:f3:53:20:88:54:3a:
b3:5f:22:7f:9d:e6:79:c5:5a:e5:af:11:38:e6:e4:8e:f2:ec:
e6:4a:94:ff:a4:a4:31:98:25:d2:55:8d:47:40:12:48:fc:ab:
de:99:70:4f:4a:83:29:c1:9d:10:48:1f:1a:dd:75:b9:25:96:
e3:d3:15:db:da:8a:39:9e:96:a9:df:b1:bd:51:dc:59:a7:18:
57:02:6b:86:d5:5c:a6:56:34:62:6c:08:83:07:7d:82:bd:76:
5f:c2:a3:4d:20:25:c6:aa:4b:93:06:e9:80:30:01:44:41:2d:
b3:1d:b8:53:49:77:b2:f1:66:fb:b7:14:80:2a:15:4a:2c:f4:
c3:0b:21:4d:e2:5e:72:e0:ac:56:fd:4f:7c:b2:a6:b2:91:1d:
d5:3b:42:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org