Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/70b061e50b4e37fd4791c78c78bc214021cb7583.roa
File: 70b061e50b4e37fd4791c78c78bc214021cb7583.roa (raw, json)
Hash identifier: ZKkMe/BtCaqndP22RbdRLbu9pMvaFABoBj85dCpzjuE=
Subject key identifier: B9:63:0C:23:FB:FD:15:CF:A0:CA:A5:B9:FD:DB:88:AF:D6:CE:E0:CF
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 2445C2
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/70b061e50b4e37fd4791c78c78bc214021cb7583.roa
Signing time: Thu 20 Apr 2023 03:24:51 +0000
ROA not before: Wed 19 Apr 2023 03:24:51 +0000
ROA not after: Sun 20 Apr 2025 03:24:51 +0000
asID: 14080
IP address blocks: 190.158.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2377154 (0x2445c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Apr 19 03:24:51 2023 GMT
Not After : Apr 20 03:24:51 2025 GMT
Subject: CN=70b061e50b4e37fd4791c78c78bc214021cb7583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:7c:69:d3:76:7a:64:8a:15:4f:20:43:41:
19:90:91:f7:49:f6:a4:99:a7:97:bb:af:eb:a8:64:
47:27:6f:b0:6c:a5:90:d4:84:59:9a:eb:a7:5a:11:
32:06:7d:71:52:01:13:f7:66:17:4c:67:20:0a:58:
62:a4:43:4e:47:65:46:11:70:c5:30:28:a9:f0:f0:
49:19:4e:d1:39:98:a5:37:9c:3d:08:a1:2e:53:cf:
8d:e9:a0:41:3c:50:95:ed:b9:98:4b:6a:91:f9:c9:
41:7f:2d:56:ee:f5:61:1e:61:8f:6e:f0:d3:62:9f:
45:76:29:03:1b:71:6a:04:e5:66:9e:d5:b0:e4:1e:
78:15:a4:2d:15:d4:2d:e1:bb:10:91:d2:5b:4f:ad:
31:8d:e6:9a:fe:e3:e5:f1:17:da:07:38:0a:f2:f6:
c2:da:9d:38:6f:16:fb:43:fd:ad:11:99:20:33:fa:
67:16:28:26:87:72:08:b2:15:d8:c8:3f:ae:98:8f:
ea:39:fa:d8:7d:fc:18:af:62:2e:51:6a:4f:9e:9d:
1b:38:a8:bb:21:72:70:20:26:21:6a:63:c9:30:d1:
40:7f:72:c9:33:70:57:26:92:5b:e6:70:92:9e:d5:
d5:aa:a3:10:34:af:68:17:60:69:66:1f:93:28:2f:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:63:0C:23:FB:FD:15:CF:A0:CA:A5:B9:FD:DB:88:AF:D6:CE:E0:CF
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/70b061e50b4e37fd4791c78c78bc214021cb7583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.158.135.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e2:49:ec:19:05:0c:49:07:48:e0:e5:cb:c4:1e:75:fb:51:
cf:c5:a6:b8:c6:fd:d3:7f:55:f5:09:41:18:27:fa:ea:fe:e0:
70:29:21:91:b6:14:5c:81:3e:8a:fb:0d:32:41:b7:76:8d:74:
c2:e3:c0:3b:30:92:48:f6:aa:1d:5e:97:3b:5a:12:82:da:21:
34:31:10:ab:fd:d4:d7:01:2a:00:9a:36:4b:ae:86:8b:b4:0b:
65:65:10:5d:3c:82:08:0e:2f:53:6e:c5:2e:bd:72:ec:30:06:
84:3c:15:ce:65:ec:0c:06:77:e1:5d:6f:78:c6:94:7f:ea:7d:
54:64:17:3a:89:ab:c2:3a:f0:56:8e:5f:aa:b3:80:34:36:8a:
71:ce:33:33:0c:ad:7b:e6:15:0b:6a:6e:51:37:77:75:62:33:
7a:22:0b:25:da:3a:14:52:14:8e:e1:71:08:b6:28:e7:b9:79:
c8:11:5d:4b:70:3c:ff:35:fd:2e:eb:53:43:bf:f8:92:42:5f:
b1:1b:16:de:a2:43:9d:10:91:10:3c:f9:d3:d3:cb:cd:82:45:
72:f6:73:97:d0:78:66:63:53:8f:93:38:29:ab:aa:11:27:fc:
1e:f1:21:3f:e4:f7:7d:7e:74:a5:36:79:16:02:67:a9:c9:79:
bd:0b:bf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org