Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d24106ebb1a85af881ff9ab473851638ffe59aae.roa
File: d24106ebb1a85af881ff9ab473851638ffe59aae.roa (raw, json)
Hash identifier: 0p370P1X4mH3k9fC6w6j/8U123H0SrF9hiv53/1aOck=
Subject key identifier: 9D:E5:BF:12:28:9E:D4:CF:E9:FC:84:A4:EB:CE:03:19:14:DD:22:D8
Certificate issuer: /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial: 2D16BF
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d24106ebb1a85af881ff9ab473851638ffe59aae.roa
Signing time: Sun 17 Mar 2024 18:42:26 +0000
ROA not before: Sun 17 Mar 2024 18:42:19 +0000
ROA not after: Sat 17 Mar 2029 18:42:19 +0000
asID: 26611
IP address blocks: 190.144.128.0/18 maxlen: 24
190.144.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2954943 (0x2d16bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
Validity
Not Before: Mar 17 18:42:19 2024 GMT
Not After : Mar 17 18:42:19 2029 GMT
Subject: CN=d24106ebb1a85af881ff9ab473851638ffe59aae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:dd:38:9b:7c:a7:bd:a3:9f:14:89:ec:5f:
c5:f8:a3:33:89:c5:f9:b6:c4:98:ef:ac:20:1b:4f:
9a:d2:8e:ca:0f:8a:8f:40:f0:df:12:1b:87:f6:0b:
d5:d6:d1:2e:4a:f8:7f:86:78:66:10:0d:69:57:d2:
ca:dd:19:2c:e1:3e:9e:c6:5a:60:0c:1e:b7:6f:3f:
fa:06:b3:d8:9d:3d:4b:b6:06:c5:82:68:7b:d1:78:
f4:e3:3a:20:76:33:89:86:20:98:28:52:eb:a6:5c:
6c:2a:5c:56:56:37:00:0c:c9:e0:60:89:ce:cb:ea:
d3:80:a0:6a:96:e4:d9:1d:14:9f:8e:53:d0:e7:ee:
f1:f8:89:aa:af:82:28:f5:30:46:e0:22:a0:44:23:
7b:50:64:38:99:61:da:8d:ae:5c:48:07:4b:c4:ed:
a4:e0:0e:9c:ad:7e:54:5d:0b:d1:66:16:30:90:d2:
0b:f6:06:12:1b:d9:5f:79:55:17:b4:8e:94:6a:ae:
c9:55:20:da:c2:c5:8e:52:9d:d5:35:10:1d:2b:1e:
85:66:da:22:f5:5d:cb:aa:cd:93:c3:eb:a9:f5:8b:
9c:cf:ef:a8:19:1a:49:31:3f:b9:8f:1e:aa:9b:5f:
67:35:77:e5:c3:fd:f7:4a:67:da:76:57:33:c6:57:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E5:BF:12:28:9E:D4:CF:E9:FC:84:A4:EB:CE:03:19:14:DD:22:D8
X509v3 Authority Key Identifier:
keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d24106ebb1a85af881ff9ab473851638ffe59aae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.144.128.0/18
190.144.196.0/24
Signature Algorithm: sha256WithRSAEncryption
37:1b:f0:83:fa:6e:72:0e:96:a2:21:55:2a:af:ff:d9:c9:cc:
fb:42:70:2f:ca:20:4d:ef:be:25:03:57:a7:50:95:78:9a:94:
0a:23:dd:48:9a:a9:e5:36:a0:7b:62:f8:a9:aa:d2:05:0b:dd:
e9:7a:81:e1:97:7c:ba:b6:5a:fb:82:9e:be:34:ca:2e:e7:e0:
7b:71:d6:4b:6a:4e:95:7a:60:5f:f1:15:7a:23:a9:f8:be:b5:
90:6e:f7:c9:62:6f:96:31:e6:cd:33:92:74:05:e8:ff:17:2b:
ad:d6:56:69:41:1f:db:12:51:52:ae:8d:11:9f:e0:e7:d7:9e:
ac:bd:0a:f5:4d:56:87:c5:aa:fa:cb:97:01:58:c1:93:73:2a:
39:83:1a:79:82:87:83:ff:74:7d:46:a5:dd:23:ee:e8:88:53:
54:16:65:b1:2d:f6:c8:44:d2:f9:04:7f:c8:6c:92:e1:2f:c0:
8f:16:4b:ef:be:32:67:eb:bd:9e:9c:e2:d9:3b:bd:21:0e:4f:
79:dd:ab:1a:c1:26:51:36:4c:0d:2e:8c:c5:7b:40:51:35:67:
1e:c1:3f:70:e2:14:8e:4c:ac:ec:7f:b6:89:d6:0f:e4:a7:8c:
11:fe:46:5c:49:8d:89:e9:46:2b:76:2a:75:98:24:9a:a2:fd:
65:3b:0f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:00 2024 by rpki-client on console-fra.rpki-client.org