Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/d2890472e0f4a65951456430688e51246e3b2bd5.roa
File: d2890472e0f4a65951456430688e51246e3b2bd5.roa (raw, json)
Hash identifier: lyyp1is4VVVR1saxhMVTHjx7fvzTJJD9yj57n+V/dTo=
Subject key identifier: B8:BF:53:FE:FC:D7:78:76:F9:2F:77:17:C8:E2:28:E8:08:E9:F8:D6
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 0392AA
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/d2890472e0f4a65951456430688e51246e3b2bd5.roa
Signing time: Tue 11 Jul 2023 13:00:30 +0000
ROA not before: Mon 10 Jul 2023 13:00:30 +0000
ROA not after: Fri 11 Jul 2025 13:00:30 +0000
asID: 7418
IP address blocks: 190.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234154 (0x392aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 13:00:30 2023 GMT
Not After : Jul 11 13:00:30 2025 GMT
Subject: CN=d2890472e0f4a65951456430688e51246e3b2bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:44:37:6b:03:a9:bd:cd:10:a3:e6:59:64:
89:f0:28:3d:9e:25:26:c2:a9:ae:c0:81:a6:39:ec:
d3:c3:88:ba:87:d7:47:ee:22:08:e4:da:f5:0d:17:
39:3a:17:57:15:c5:4f:36:ee:3b:05:95:60:c6:30:
7b:40:fb:6a:f7:11:f7:c5:06:04:7e:c7:f1:4f:c9:
0f:bb:b1:dd:24:6b:06:91:de:61:bd:61:0b:16:de:
bf:1a:ea:45:0b:0e:06:8c:b5:92:52:ba:3f:97:9b:
13:5e:59:8e:9e:42:1e:65:c3:5a:1a:a2:ee:8a:6d:
e2:bd:7c:62:cb:2d:55:46:3d:a3:7e:69:46:b7:4f:
46:0b:2a:bc:f8:23:c4:4d:87:ff:3c:e8:8f:d4:54:
dd:a5:d8:6b:d8:1b:a6:de:23:48:a2:5f:01:77:fc:
fe:6b:b6:87:63:fe:4a:42:d3:15:d9:ef:be:e4:be:
eb:ed:86:8a:2c:c2:7a:51:cc:a7:38:f8:d8:5f:32:
94:b9:da:48:f1:01:6b:dc:e0:c3:3b:46:1c:56:bf:
c8:dd:16:e9:70:f4:73:e8:30:20:90:d5:5f:97:d8:
f8:f3:28:13:4c:10:7e:c9:b4:fe:7e:7d:10:35:79:
7a:eb:ac:d2:99:a2:bc:f6:55:ae:04:e4:e0:41:df:
9c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:53:FE:FC:D7:78:76:F9:2F:77:17:C8:E2:28:E8:08:E9:F8:D6
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/d2890472e0f4a65951456430688e51246e3b2bd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:3b:f8:43:f5:20:ed:a5:06:37:0e:cd:72:7d:72:a6:8d:44:
6f:8f:3a:8c:41:6c:a1:cd:86:eb:e6:3d:b3:cb:3f:37:a5:29:
58:1d:20:9f:31:dc:58:83:70:72:9a:9f:60:d6:bf:f5:0d:06:
b3:03:a0:8a:62:2c:60:08:65:37:69:ef:2a:bd:d7:4e:da:f0:
80:fe:64:e7:7a:b3:c6:09:7a:1e:3d:c5:93:38:03:3d:19:49:
d3:45:ff:b2:b0:d0:23:64:4f:3a:e3:9d:a7:cf:63:df:05:ae:
10:dd:52:39:ac:1a:57:01:e5:68:90:99:81:62:3f:c3:70:b2:
20:73:d1:be:58:36:a9:74:cd:b3:71:b1:e3:73:5e:0b:0d:02:
bb:d9:03:48:f9:9c:80:d2:12:3c:d3:6f:ac:82:10:ac:91:42:
a5:9f:77:9d:6e:6a:3a:84:0c:2b:34:46:5c:dc:2f:57:42:64:
de:5a:94:e6:87:f7:65:42:18:28:88:98:37:fd:a3:b3:22:33:
f8:43:e8:f7:47:3d:e6:e4:96:84:48:d8:80:6f:1b:6b:76:79:
06:ad:3d:19:8d:fe:d3:d0:df:7a:5e:31:4b:b3:36:01:ae:aa:
d0:08:69:86:b8:23:9c:d4:b4:6a:19:0a:1d:0d:61:5e:21:70:
b3:b7:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org