Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/be9ad909cdb7342c1eaa28ecefbe6ce69f187cf6.roa
File: be9ad909cdb7342c1eaa28ecefbe6ce69f187cf6.roa (raw, json)
Hash identifier: dqYEk2WpST+wQrSB0haWxqVJVSFvdpWeTMjjGqhGpQs=
Subject key identifier: 9C:68:83:2C:F7:90:46:A2:2F:0A:C5:40:49:8B:50:5C:9F:06:21:F5
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 2A04DB
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/be9ad909cdb7342c1eaa28ecefbe6ce69f187cf6.roa
Signing time: Thu 30 Nov 2023 15:34:09 +0000
ROA not before: Thu 30 Nov 2023 15:34:09 +0000
ROA not after: Sun 30 Nov 2025 15:34:09 +0000
asID: 14080
IP address blocks: 186.146.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2753755 (0x2a04db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Nov 30 15:34:09 2023 GMT
Not After : Nov 30 15:34:09 2025 GMT
Subject: CN=be9ad909cdb7342c1eaa28ecefbe6ce69f187cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bc:ca:66:9b:f9:cd:b0:aa:03:d6:ec:c8:44:
54:e8:ed:81:27:16:69:11:e1:d6:ff:54:79:52:f6:
3e:16:9f:c3:08:cb:45:61:b5:77:72:0a:33:b1:5c:
a3:e5:0f:44:f3:70:00:41:f5:70:e4:73:a1:01:4a:
c0:f0:67:d0:2a:a7:0b:b0:b7:93:46:05:b1:08:16:
74:3e:6e:8f:a0:5f:ef:a3:18:5c:1d:e2:02:06:da:
e9:da:84:70:0b:fd:c3:2d:59:87:74:f9:41:f1:71:
84:a8:10:6b:67:18:68:d7:44:2f:e1:94:8b:17:83:
88:aa:9a:e6:bc:31:44:9d:71:dc:c7:8e:b3:51:8a:
8b:35:09:79:a1:72:f9:ba:e8:ca:e5:6c:23:e8:98:
f7:14:87:74:87:1b:08:ef:ba:ba:63:25:6c:9c:e4:
dc:1d:2e:fe:78:fa:87:79:1f:ca:2b:89:9d:f4:cc:
27:c3:ca:aa:a7:09:99:b6:1e:50:90:d7:a9:fc:54:
99:a5:77:c0:25:6e:4a:0d:b5:05:f8:5c:16:16:4b:
e5:5f:99:3f:77:f0:9e:49:ea:e6:cc:90:0b:2f:c7:
12:21:f2:50:72:75:02:49:8a:ce:8f:fc:2e:8a:97:
79:4f:05:9d:62:eb:d9:6e:2c:7d:43:ea:25:66:7d:
9e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:68:83:2C:F7:90:46:A2:2F:0A:C5:40:49:8B:50:5C:9F:06:21:F5
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/be9ad909cdb7342c1eaa28ecefbe6ce69f187cf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.146.248.0/24
Signature Algorithm: sha256WithRSAEncryption
87:51:ce:3f:bc:fc:3d:82:dd:46:cb:6a:9a:4c:b4:fd:52:41:
44:3b:93:93:43:aa:37:1e:a4:d0:3a:3c:83:67:15:bb:cf:19:
14:c5:71:b1:10:e1:37:6b:a1:68:c0:dd:e6:d8:f2:04:74:59:
06:de:d9:f9:1e:47:c4:0c:a1:3c:4e:2f:6c:a7:6d:8b:59:38:
14:d0:e6:92:31:34:af:91:24:fc:81:4b:20:8a:67:5c:7e:97:
5c:cc:c5:8e:a7:93:1b:6c:40:c9:b2:54:2e:d6:71:5f:a1:79:
0f:63:19:da:c5:8b:e1:db:86:4f:16:43:05:b7:31:e5:96:a6:
f4:91:8f:cb:ff:36:e9:80:41:e7:28:c5:6b:9b:ac:0f:76:9b:
5c:99:20:66:b4:54:f8:b3:02:60:52:b7:d3:45:a3:4e:0f:76:
8c:90:30:1f:db:19:aa:4c:c7:f7:83:b6:cf:c6:67:88:3d:52:
17:56:6d:50:85:25:8b:18:09:d4:90:ed:fd:e8:ed:5c:19:dc:
6c:28:fa:5a:65:9f:5a:49:d8:9a:ab:e4:5b:2f:37:6c:b1:62:
8c:a0:ee:39:5f:3e:d7:b0:b1:06:72:c5:3d:ce:b5:d7:47:cc:
d7:b9:80:5f:86:a2:38:31:cb:bc:a2:f3:24:49:c8:27:a7:00:
af:b1:b9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org