Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/c47b6c1ddb222be4d293bac485f1a6c9c865f1b1.roa
File: c47b6c1ddb222be4d293bac485f1a6c9c865f1b1.roa (raw, json)
Hash identifier: HbV82+BkN2zULssxYo6tY4nmSF6tKnKa1frSSzFUJH0=
Subject key identifier: BC:6F:FC:55:ED:1D:35:B8:A7:02:4A:E1:56:F8:01:3C:DB:15:67:20
Certificate issuer: /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial: 0E1DD6
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/c47b6c1ddb222be4d293bac485f1a6c9c865f1b1.roa
Signing time: Wed 24 Mar 2021 14:31:36 +0000
ROA not before: Wed 24 Mar 2021 14:31:34 +0000
ROA not after: Tue 24 Mar 2026 14:31:34 +0000
asID: 23456
IP address blocks: 190.2.17.0/24 maxlen: 24
190.210.206.0/24 maxlen: 24
200.68.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925142 (0xe1dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Validity
Not Before: Mar 24 14:31:34 2021 GMT
Not After : Mar 24 14:31:34 2026 GMT
Subject: CN=c47b6c1ddb222be4d293bac485f1a6c9c865f1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:ed:40:8a:85:3c:22:ac:07:62:74:d1:a7:
30:f9:37:94:b1:4b:ab:81:2b:81:3a:b3:0e:d1:3a:
0f:16:de:aa:de:02:ad:89:ad:33:6f:65:90:02:f0:
19:e6:87:41:80:c4:5e:f3:f6:7e:d6:3f:42:81:d2:
79:d1:a7:c8:24:fc:4a:af:3f:ce:4b:98:96:11:5c:
f7:69:1d:cb:d5:04:19:2b:75:45:ce:8d:eb:2a:cd:
3b:0f:1a:d4:fe:a5:06:10:ca:8f:84:dd:c1:19:89:
aa:56:5c:15:73:63:d6:88:00:0a:bb:61:0d:54:74:
58:98:d8:71:be:4d:ac:52:2b:e3:d4:75:94:1c:38:
d0:a5:47:a1:16:00:18:e8:15:d7:1d:1e:bf:85:79:
5b:3f:77:9f:9d:c6:64:1e:a0:4f:80:9f:be:81:08:
46:f3:ab:09:1c:4c:cb:1e:fc:0b:e5:5c:1b:a7:c3:
6e:46:94:f0:22:08:2b:ce:54:09:43:aa:c2:78:5f:
5b:17:ea:98:c0:8e:16:14:11:05:ed:28:1b:99:33:
c7:3e:31:42:36:e6:fb:6e:3a:d5:0a:31:e5:c1:dc:
a8:3c:c8:bf:cd:97:f8:ef:d0:6c:ac:da:2a:3f:66:
3b:4b:b7:a3:9d:08:50:7f:09:9f:f2:7f:57:83:91:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6F:FC:55:ED:1D:35:B8:A7:02:4A:E1:56:F8:01:3C:DB:15:67:20
X509v3 Authority Key Identifier:
keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/c47b6c1ddb222be4d293bac485f1a6c9c865f1b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.2.17.0/24
190.210.206.0/24
200.68.114.0/24
Signature Algorithm: sha256WithRSAEncryption
44:00:d0:50:d3:52:1c:ff:b9:e4:77:4f:7f:db:fd:79:60:9c:
69:e0:7a:df:40:97:6a:11:08:6e:7f:5e:ab:c7:e1:67:c4:29:
16:9c:a6:78:d1:d7:d4:04:f5:a5:dd:c6:e4:c0:e9:b8:f2:79:
cc:08:f4:90:7a:28:60:f5:bb:02:06:23:21:cd:ae:a5:a5:19:
7f:a3:98:79:f0:df:2e:3e:cc:f1:c5:ad:29:6f:61:1f:a1:ae:
51:0b:18:db:37:41:99:79:1e:fa:c7:78:82:4d:33:af:90:db:
40:72:b0:76:a6:dc:ad:38:cf:96:f8:0b:b0:dd:d2:7c:98:7a:
8f:b0:4c:10:73:1d:35:27:fa:60:e8:47:6c:a0:b1:9c:6e:6a:
7a:6d:0c:4c:9b:c5:38:70:23:45:ad:e4:42:e7:7e:5f:40:68:
d4:39:20:f3:ab:48:8d:1e:fe:65:dc:f4:d4:aa:a5:3b:93:b1:
00:22:8a:01:5a:42:59:f1:40:32:2f:a2:11:2f:40:6b:cb:54:
65:a9:9f:f5:84:73:f6:4a:a0:18:2a:46:5f:e7:8c:18:03:a9:
f3:91:a2:cc:03:a8:58:82:c4:32:0b:73:39:a5:22:ec:50:a2:
2b:d4:f0:45:86:7a:fa:a6:cd:af:c2:92:28:1b:95:b8:a1:50:
fb:0a:ca:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org