Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/e4b45a821b6b961cb1942ddbe458159eb9a189bf.roa
File: e4b45a821b6b961cb1942ddbe458159eb9a189bf.roa (raw, json)
Hash identifier: 6ocm1zYh/71qs7xrR+aPVw2gtA4unu7AcQKjWacumig=
Subject key identifier: 9E:87:CB:7F:1E:C4:55:23:3F:6A:19:94:D0:2A:52:DD:CA:40:DD:78
Certificate issuer: /CN=c4935075ec435dbda09406df9fa324ff802f1d14
Certificate serial: 24DAB1
Authority key identifier: 76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/e4b45a821b6b961cb1942ddbe458159eb9a189bf.roa
Signing time: Tue 17 Oct 2023 20:46:43 +0000
ROA not before: Mon 16 Oct 2023 20:46:43 +0000
ROA not after: Fri 17 Oct 2025 20:46:43 +0000
asID: 23383
IP address blocks: 190.4.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2415281 (0x24dab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4935075ec435dbda09406df9fa324ff802f1d14
Validity
Not Before: Oct 16 20:46:43 2023 GMT
Not After : Oct 17 20:46:43 2025 GMT
Subject: CN=e4b45a821b6b961cb1942ddbe458159eb9a189bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:37:d9:96:01:01:c4:95:f8:71:9c:2e:48:
39:55:50:21:4b:38:98:28:dd:0e:54:70:00:f6:9a:
9f:b3:7c:c0:0d:6d:82:b0:e5:e2:0c:bf:72:b5:2b:
52:d0:48:c5:a4:d7:a3:67:05:ea:2b:3e:5f:10:23:
8b:55:d4:08:9b:40:b8:88:1d:d5:b6:90:d6:e3:59:
0f:03:a4:ed:4f:2c:51:0c:88:96:71:25:f2:8b:3b:
1c:a9:0b:ba:c7:e3:6c:e5:9d:01:c6:d7:83:64:7c:
c4:1d:dd:e4:ea:23:bf:14:eb:e1:5d:58:14:6a:77:
1a:d8:33:a9:0f:9a:83:53:b5:c3:d4:aa:69:a6:00:
38:8e:11:ce:93:a5:c7:9f:c5:ad:c5:dd:31:79:a3:
18:8a:54:1e:80:f0:29:96:f3:fe:fe:e1:aa:be:61:
f3:9c:41:fb:b9:11:0d:77:f4:53:e2:39:2a:94:7c:
94:44:c7:e8:f3:8b:30:68:5a:b7:70:10:6e:ea:f9:
2c:9d:d8:5c:5c:4f:e8:ad:ed:65:32:ae:62:f5:24:
03:2b:30:84:ac:04:28:1a:17:e8:eb:29:a4:5f:6f:
5f:78:5f:ec:b3:1c:4d:c0:80:d2:2f:b0:da:fc:fd:
ca:61:38:51:89:40:6b:f2:90:08:8a:01:9d:03:28:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:87:CB:7F:1E:C4:55:23:3F:6A:19:94:D0:2A:52:DD:CA:40:DD:78
X509v3 Authority Key Identifier:
keyid:76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/e4b45a821b6b961cb1942ddbe458159eb9a189bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.4.19.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c8:75:e8:2a:88:49:90:c4:74:d9:94:67:06:e8:06:ef:08:
75:cd:98:2a:aa:05:71:61:c1:75:c3:c3:7c:94:6e:48:76:fe:
08:f1:27:58:54:c9:65:37:44:c9:04:01:72:d8:35:61:56:0e:
81:9f:2d:1f:be:45:5d:63:42:31:ba:0c:8d:ef:ea:dd:ed:76:
24:f2:cb:7f:90:cd:39:78:13:80:ca:74:08:07:ad:d8:e3:e3:
3e:c9:02:8b:36:ec:e3:c6:af:02:33:3a:3f:85:ed:b8:3f:20:
79:50:37:85:f9:52:a1:04:26:75:63:e4:d9:0a:f4:ea:1d:60:
ae:d4:9b:3b:dd:d0:69:ad:d6:cd:a8:09:29:bf:57:47:84:66:
8e:45:ff:cf:58:21:49:7b:84:e2:68:8f:08:05:cd:fe:21:b6:
9e:3a:72:fc:9b:67:7d:da:43:d5:60:f0:ca:68:d5:04:4b:42:
a8:eb:c5:3a:84:1b:9c:5d:9f:63:18:d8:9e:9a:84:c4:1f:c8:
98:be:be:6a:1e:05:0f:34:52:69:9f:7f:b0:d4:f9:21:f0:15:
c8:d2:48:e3:85:d4:fa:9e:ae:c5:9e:41:a4:84:72:54:04:bd:
d8:7a:ec:ff:4e:0e:4a:11:36:4a:6e:e1:62:87:db:80:14:8f:
1c:13:48:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:26 2024 by rpki-client on console-ams.rpki-client.org