Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/2a8b28406a76e11a81aa8614b05d23f2763253d1.roa
File: 2a8b28406a76e11a81aa8614b05d23f2763253d1.roa (raw, json)
Hash identifier: VvJOJzzAWKXah0NmakYz/PV99Vhx94OVRqCbLUZaWFM=
Subject key identifier: A1:03:58:05:E2:D3:9E:B3:3F:DF:66:2F:B8:22:94:AA:12:70:9E:43
Certificate issuer: /CN=0a780aded9dabf63283959a6696312a1fecffbf4
Certificate serial: 0D0227
Authority key identifier: 40:A7:5D:8C:A2:65:BE:0A:A5:BC:89:9D:98:42:5B:F9:69:03:61:68
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a780aded9dabf63283959a6696312a1fecffbf4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/2a8b28406a76e11a81aa8614b05d23f2763253d1.roa
Signing time: Wed 24 Mar 2021 14:45:05 +0000
ROA not before: Wed 24 Mar 2021 14:45:05 +0000
ROA not after: Tue 24 Mar 2026 14:45:05 +0000
asID: 52302
IP address blocks: 186.190.208.0/20 maxlen: 24
2800:5d0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 852519 (0xd0227)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a780aded9dabf63283959a6696312a1fecffbf4
Validity
Not Before: Mar 24 14:45:05 2021 GMT
Not After : Mar 24 14:45:05 2026 GMT
Subject: CN=2a8b28406a76e11a81aa8614b05d23f2763253d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6c:8d:9e:66:d2:07:1d:00:65:1b:79:ed:40:
bf:20:a1:16:06:e4:38:9f:93:0e:6e:70:53:86:5b:
1e:20:0b:9d:e9:f4:94:d5:19:56:6f:3d:f6:64:b3:
75:77:ba:0b:58:e1:70:ca:de:18:bf:a7:22:8c:0a:
a2:00:3f:98:3b:3e:5e:73:9d:37:e5:0f:30:83:a4:
7d:98:6e:97:d1:b9:cd:d9:c5:28:83:4d:4e:f8:93:
f7:cf:fd:67:f6:fc:ba:56:f6:88:8c:53:d1:e2:fc:
b2:05:cb:93:74:d6:7c:20:93:a8:71:6f:b2:d4:2e:
e9:37:46:35:86:65:fb:f3:ce:16:b5:9e:23:c4:f0:
25:bd:d4:ff:d6:92:96:25:0e:4a:c2:c2:fe:20:9f:
6e:75:1a:2e:c8:a3:b5:7a:eb:6a:c5:53:ba:32:71:
45:f8:1d:8a:fc:65:43:5a:93:be:bc:8d:71:1d:62:
59:af:3d:8a:7b:85:e0:b6:69:93:87:ae:2a:b2:b6:
b5:e7:4a:c9:37:36:a8:64:70:0c:f4:39:fd:4e:ad:
49:d4:f4:1e:aa:97:8b:79:ea:26:f8:7a:49:a2:12:
28:f5:0e:e2:e9:ee:9e:01:9a:34:9a:4a:74:ce:fa:
41:df:d4:b2:c1:56:52:ca:08:bb:1c:9e:3b:0f:af:
c0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:03:58:05:E2:D3:9E:B3:3F:DF:66:2F:B8:22:94:AA:12:70:9E:43
X509v3 Authority Key Identifier:
keyid:40:A7:5D:8C:A2:65:BE:0A:A5:BC:89:9D:98:42:5B:F9:69:03:61:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a780aded9dabf63283959a6696312a1fecffbf4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/2a8b28406a76e11a81aa8614b05d23f2763253d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0a48ed73-8607-4ef2-aeb0-73a037c62311/0a780aded9dabf63283959a6696312a1fecffbf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.190.208.0/20
IPv6:
2800:5d0::/32
Signature Algorithm: sha256WithRSAEncryption
25:e4:bf:28:ee:34:83:07:fd:22:92:f7:21:e8:4a:32:38:f7:
c0:fc:87:5a:e6:53:4a:a0:8a:a0:be:f9:38:32:17:10:29:92:
af:1e:17:d7:a4:f5:98:b3:f9:ce:1e:24:03:28:23:56:61:1d:
d1:6e:d1:39:98:6e:8b:88:e0:fa:a8:12:47:5c:a0:d1:bd:d7:
2d:37:21:c0:8b:5d:21:9a:2c:51:ad:22:5a:33:2d:86:f8:03:
e6:22:2c:7a:cc:d7:1f:54:42:89:48:07:fc:5c:de:26:50:9a:
cd:fa:9a:a7:1e:cf:2a:28:d6:3f:9f:1e:59:f7:6c:da:42:5d:
07:40:34:b4:fb:38:fd:64:87:39:8e:a3:37:a2:2d:d8:52:48:
51:72:3c:e5:85:ae:b6:9b:5c:94:1b:6a:e1:9e:3f:6b:53:78:
0d:9b:7a:a2:ee:56:4f:e8:76:89:a5:0b:39:08:e1:e7:2f:91:
7f:2d:3f:14:63:57:b0:fb:df:56:b2:10:fe:77:31:5d:61:9b:
90:83:af:45:f6:f2:e4:a9:48:b6:a7:98:05:a4:ba:28:7a:12:
05:a5:dd:46:3a:8e:f3:af:74:0f:66:8c:2f:7a:6f:a9:b1:7a:
aa:c2:0a:2e:96:0b:a9:09:51:57:c0:bb:b3:af:ab:88:6a:db:
40:e4:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org