Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c5032dac84d5118fd6ea4e6254da1ef2f20bda91.roa
File: c5032dac84d5118fd6ea4e6254da1ef2f20bda91.roa (raw, json)
Hash identifier: zvNGaXw2doRoxrzs0hGYommYviF+M2dg8IuLjhg9Zkk=
Subject key identifier: 2F:B0:DE:CB:C1:3D:B0:57:5E:3F:64:D9:DD:A7:45:FA:D0:D7:E9:38
Certificate issuer: /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial: 19AC9E
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c5032dac84d5118fd6ea4e6254da1ef2f20bda91.roa
Signing time: Wed 08 Jun 2022 16:13:48 +0000
ROA not before: Wed 08 Jun 2022 03:00:00 +0000
ROA not after: Wed 31 Dec 2025 03:00:00 +0000
asID: 20940
IP address blocks: 190.98.153.0/24 maxlen: 24
190.98.160.0/24 maxlen: 24
190.98.161.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1682590 (0x19ac9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Validity
Not Before: Jun 8 03:00:00 2022 GMT
Not After : Dec 31 03:00:00 2025 GMT
Subject: CN=c5032dac84d5118fd6ea4e6254da1ef2f20bda91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:8c:c6:96:fb:d7:6f:fb:33:0b:83:1e:4f:
26:5b:37:f5:05:3e:63:86:10:af:8e:7b:c3:b3:b9:
dd:29:ad:51:b1:6f:9e:ce:94:fd:e3:99:31:e2:99:
c1:f1:c8:4e:63:b0:a4:2a:2b:22:36:8f:e4:53:06:
04:5a:a4:0c:ec:97:49:11:e9:01:09:43:ec:5d:91:
09:81:ad:ed:c0:1e:17:be:04:d2:a8:ad:a6:dc:ea:
9e:87:c4:8a:e8:60:7f:c6:d3:53:40:52:88:13:6e:
3b:c3:2b:d8:6b:ce:a6:97:f0:2c:38:b0:76:fe:2e:
12:5c:16:2c:20:79:b3:6a:83:ce:3c:5b:64:f6:17:
da:8d:4d:9e:2f:b8:a7:5e:d3:2e:4c:0e:2c:d9:9b:
da:e9:93:91:b8:f0:83:b3:4d:a6:64:c7:a2:37:45:
c3:f8:4d:73:49:46:50:79:73:7b:bb:60:9e:ae:2e:
91:3c:d5:d9:1a:9d:06:e4:20:f1:77:e9:8e:0a:7a:
ae:65:0c:15:27:46:0e:9a:16:08:66:d0:a2:ee:4e:
54:61:0f:0a:04:c2:11:ae:c2:93:29:8e:38:ab:3c:
36:6f:1e:5d:bb:4f:df:b6:96:2e:02:d2:93:88:5b:
b0:85:e0:c8:ed:92:69:d7:f8:92:0a:cb:59:1a:06:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B0:DE:CB:C1:3D:B0:57:5E:3F:64:D9:DD:A7:45:FA:D0:D7:E9:38
X509v3 Authority Key Identifier:
keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/c5032dac84d5118fd6ea4e6254da1ef2f20bda91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.98.153.0/24
190.98.160.0/23
Signature Algorithm: sha256WithRSAEncryption
33:1a:4d:81:de:4a:a8:4d:42:ef:e2:05:8b:d6:7e:41:64:59:
71:e2:a9:0d:73:9a:9a:dd:3e:5c:e3:60:09:2a:0c:50:0b:9a:
4e:8b:4c:a3:3f:0a:93:6c:37:91:cf:d6:70:03:6e:26:e3:cf:
f2:15:a0:91:6a:02:07:85:7f:00:20:07:a0:1c:3b:59:f1:84:
cd:21:2c:56:ff:5b:b9:2b:dc:8c:0a:e3:d9:b0:f5:af:03:0e:
25:11:2e:f9:15:9f:bb:c1:ec:06:a3:7e:1d:51:4e:94:8c:aa:
88:c5:0d:99:6f:d0:c7:0a:45:92:dc:9f:cb:8b:68:17:f0:c1:
43:2b:f0:2f:82:9b:e5:22:88:27:09:c4:24:b4:c0:b4:c2:e1:
5d:97:46:84:b5:e6:5b:9e:7c:c5:5b:c3:d5:50:97:43:40:2b:
9f:98:90:bb:63:35:d0:28:e4:aa:fb:ba:07:ae:e1:a0:53:af:
60:19:0f:f9:c6:e7:81:83:37:37:59:49:c6:4b:aa:18:cf:c2:
e9:ba:2c:5c:37:31:6c:9c:78:ee:c3:96:40:d0:95:96:51:92:
1e:34:95:78:43:f2:3e:14:95:2f:4a:38:45:bb:f2:10:9b:8a:
12:07:fb:1c:95:dc:46:be:c0:62:d2:4b:eb:46:be:9b:42:6a:
ff:24:05:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org