Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/e24582c9dce3cc922e2ebfede56d431f57f4a15c.roa
File: e24582c9dce3cc922e2ebfede56d431f57f4a15c.roa (raw, json)
Hash identifier: gq2fbe2GVPSF6yQnAKgt5fccwD1oOAWZ27ZwC9eKbkw=
Subject key identifier: C1:31:A1:05:43:0E:A8:3F:43:EF:2F:61:5E:03:23:AA:E1:60:20:14
Certificate issuer: /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial: 1E6C8D
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/e24582c9dce3cc922e2ebfede56d431f57f4a15c.roa
Signing time: Fri 27 Jan 2023 13:06:56 +0000
ROA not before: Thu 26 Jan 2023 13:06:55 +0000
ROA not after: Thu 27 Jan 2028 13:06:55 +0000
asID: 1000
IP address blocks: 190.210.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1993869 (0x1e6c8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Validity
Not Before: Jan 26 13:06:55 2023 GMT
Not After : Jan 27 13:06:55 2028 GMT
Subject: CN=e24582c9dce3cc922e2ebfede56d431f57f4a15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b2:32:0f:84:c4:2a:19:90:7b:4d:ae:6a:b5:
be:3c:83:a0:c1:14:cb:f0:5c:20:12:98:76:3f:9d:
bf:af:98:09:a1:d5:0d:ef:a4:f3:18:2c:62:1f:fb:
5a:1e:cb:e6:3b:05:a8:82:ce:9f:04:0a:a6:a3:89:
e7:51:72:66:bb:24:e4:16:7b:67:d0:aa:89:90:b1:
4b:bf:67:79:5a:92:1a:6c:9d:a3:15:47:c8:91:55:
93:b6:71:1f:aa:c2:1e:8d:07:5c:71:0d:40:42:31:
16:7b:d6:1f:e3:fa:d7:8a:07:c5:0f:71:09:bc:ff:
fa:68:55:00:fe:54:c0:54:0b:86:03:38:ce:bd:a8:
a5:aa:de:23:a3:38:2c:79:0a:6a:31:a8:82:47:21:
af:e1:a9:4e:24:98:0a:e4:0c:9d:9a:62:ae:17:27:
d0:df:a7:a1:bb:b6:bf:be:63:4f:33:63:71:46:51:
28:9d:32:dc:aa:c5:9e:e8:09:09:e1:ef:56:ce:0b:
61:48:70:8d:0d:4e:c6:55:07:82:9c:bf:79:13:d1:
24:1d:3d:34:60:a7:a1:79:4c:c2:24:b7:29:cf:f9:
6a:95:ac:63:b0:e1:92:13:2e:9f:cb:e9:9b:56:d1:
88:aa:8e:96:d1:13:f9:eb:b5:40:cf:69:60:f6:4c:
c9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:31:A1:05:43:0E:A8:3F:43:EF:2F:61:5E:03:23:AA:E1:60:20:14
X509v3 Authority Key Identifier:
keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/e24582c9dce3cc922e2ebfede56d431f57f4a15c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.210.210.0/23
Signature Algorithm: sha256WithRSAEncryption
43:05:ec:81:b7:4b:0b:cb:f4:92:42:8f:cd:07:2d:91:7f:aa:
f3:f6:4d:3d:74:61:9b:dd:4c:b1:aa:bd:5b:11:57:43:07:2b:
dd:d5:f7:08:17:b7:b9:38:f0:83:d4:b1:6b:4f:81:2f:79:64:
51:d4:98:41:47:9f:f8:6a:67:f1:99:f1:1a:f8:ea:3e:f9:f0:
a7:ee:66:9e:6f:df:e1:0b:8c:04:7d:f2:ed:5a:6b:96:8a:b2:
3d:a5:a9:c7:81:a6:a5:9c:e8:4a:ab:11:8b:8c:67:e4:ff:e2:
20:b4:74:a4:6f:ea:2b:65:d1:d1:d9:b7:77:79:ca:4d:91:ff:
cc:5a:8f:62:a3:64:5c:06:af:cd:87:be:ab:2a:d5:de:c8:ea:
80:c2:09:29:b2:3c:39:46:44:c4:01:b2:73:1a:22:4a:a2:ce:
40:85:6f:8d:0d:ff:71:5a:74:3a:38:4f:0c:84:11:43:69:4c:
b2:9c:0a:1e:4e:e3:ef:07:6c:5c:64:4b:05:6a:ba:6c:30:8a:
13:c2:3e:20:93:a3:6b:bf:86:c7:76:c8:55:da:5a:d3:a2:55:
8d:69:85:aa:d1:d1:2e:d4:12:28:d0:45:c6:f1:31:92:bf:98:
a1:e7:a8:b3:7e:1b:19:52:8a:1f:23:d6:43:2d:ff:22:c5:87:
55:9e:d8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org