Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/b01787bded0e6a793937d28ad43984f6a96cff09.roa
File: b01787bded0e6a793937d28ad43984f6a96cff09.roa (raw, json)
Hash identifier: xK2EtR5cdRT0DFetbU2JEXn2L4ImUCbx2dI4SNiLKmo=
Subject key identifier: 26:E4:AA:0F:C0:99:C1:00:21:12:87:88:26:A9:09:BC:B9:28:83:9A
Certificate issuer: /CN=71ccf671605b5e725ec595356fba462b15442130
Certificate serial: 1AF8C6
Authority key identifier: 2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/b01787bded0e6a793937d28ad43984f6a96cff09.roa
Signing time: Fri 03 Nov 2023 07:30:00 +0000
ROA not before: Fri 03 Nov 2023 07:30:00 +0000
ROA not after: Sun 02 Nov 2025 07:30:00 +0000
asID: 271813
IP address blocks: 190.123.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1767622 (0x1af8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ccf671605b5e725ec595356fba462b15442130
Validity
Not Before: Nov 3 07:30:00 2023 GMT
Not After : Nov 2 07:30:00 2025 GMT
Subject: CN=b01787bded0e6a793937d28ad43984f6a96cff09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6a:60:51:55:7b:12:94:7d:41:0e:f9:fc:ff:
2e:70:0f:5d:4c:4c:62:7a:b1:d5:e9:74:93:34:66:
43:49:eb:53:bf:4b:7c:aa:44:a4:66:3e:54:0a:94:
42:f1:84:e3:26:b7:69:e8:8f:15:66:31:26:69:63:
c6:47:77:09:e1:be:a4:56:bd:89:ef:62:3d:9a:e9:
72:e8:d6:fa:77:8e:00:2d:bb:fb:59:64:37:ae:1a:
07:e9:08:f3:b6:52:36:3f:5d:9e:c3:8c:75:ee:1c:
09:29:91:3e:90:a8:7c:0f:86:bc:bf:2b:26:68:54:
cb:c1:d3:f9:d3:c9:f0:d5:13:db:f8:00:07:d5:8a:
a2:1f:a1:9f:7d:92:9c:7d:43:90:91:03:3c:57:0c:
d2:14:7b:5d:5b:6a:f0:6d:53:65:ce:f2:11:22:e6:
c8:5d:b5:a8:93:b9:ca:8e:e7:46:d0:39:1c:7c:73:
61:9a:9f:f4:b6:45:a2:c7:a3:bf:35:b0:28:81:0b:
10:6d:7a:34:06:d5:71:5b:2f:fa:6f:94:26:9a:e0:
34:14:89:95:6b:65:55:c9:b7:24:79:b6:04:11:4b:
18:e4:e2:01:25:88:77:cf:56:f5:33:3f:b7:d4:d9:
71:69:48:28:61:f0:76:d8:2a:80:aa:43:49:54:a8:
d7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E4:AA:0F:C0:99:C1:00:21:12:87:88:26:A9:09:BC:B9:28:83:9A
X509v3 Authority Key Identifier:
keyid:2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/b01787bded0e6a793937d28ad43984f6a96cff09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/71ccf671605b5e725ec595356fba462b15442130.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.123.66.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:c9:f2:57:50:65:1e:63:50:ba:0b:9b:90:91:fa:0a:4b:ba:
80:61:60:0a:0e:07:49:83:f8:0e:9b:cb:37:9e:d8:aa:c0:06:
13:37:81:14:c1:79:6d:94:d4:b7:10:f4:95:ce:45:ca:dd:a4:
f3:ac:0a:83:c2:b1:d2:c3:a3:5b:a8:2d:c8:f3:4a:7d:4e:af:
1e:8b:ee:f5:cf:1f:de:8e:1a:59:6d:3e:83:f0:d4:53:9d:61:
8a:44:e4:9b:83:0d:72:05:7e:57:55:ab:49:ef:1d:84:4c:8b:
eb:48:ae:ef:ac:12:d5:b0:5d:5d:1e:65:d7:8a:c1:03:0c:b2:
ca:2b:05:98:f1:a6:03:cf:4d:b6:ca:84:10:b6:ea:37:90:13:
b6:a8:65:9d:f4:6c:e5:d4:d2:1a:43:67:76:52:04:fa:ad:70:
18:8a:c2:3f:87:9e:a4:79:34:b7:d6:d8:03:7e:f5:09:39:fc:
2e:da:ea:11:31:cd:8d:fd:11:b5:8d:fc:d0:af:3c:09:de:a7:
ce:a0:2f:80:05:75:77:ca:5d:56:c9:e5:b3:27:5d:19:4d:83:
61:0f:d9:25:64:a5:48:eb:8b:e4:a0:10:2d:f0:72:00:fd:fe:
10:94:b5:8d:82:21:ab:01:25:d2:df:f7:54:ca:45:01:5b:04:
31:3d:50:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org