Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a8e3526737b0c2259eac010e77d6ed9587cab13a.roa
File: a8e3526737b0c2259eac010e77d6ed9587cab13a.roa (raw, json)
Hash identifier: txc4FH+cL7GJPZvsl+mAdyu3UDMZcpgSbYtFjrGqL0E=
Subject key identifier: DE:A0:FC:D9:A9:72:EC:A0:FA:31:70:AD:39:FA:5E:AE:E7:AB:96:27
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 247B4C
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a8e3526737b0c2259eac010e77d6ed9587cab13a.roa
Signing time: Fri 21 Jul 2023 20:55:27 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 32590
IP address blocks: 190.217.33.0/24 maxlen: 24
190.216.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390860 (0x247b4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=a8e3526737b0c2259eac010e77d6ed9587cab13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:86:bb:84:d0:37:c6:6f:de:9e:75:36:54:
7f:0d:0f:ab:56:72:73:45:90:23:29:6c:28:86:a3:
c2:37:0c:8b:d5:d7:77:9c:68:82:af:f0:c0:6c:8a:
52:0d:5f:16:60:af:a9:b4:df:0c:fd:fb:ee:ec:04:
9b:2c:0e:09:4c:22:5a:98:61:2f:74:8c:b9:c2:30:
1e:0d:d0:75:77:01:96:04:8e:fd:ad:e8:2b:27:d6:
1f:78:0a:70:22:b7:3e:3c:82:a9:70:e9:cd:67:05:
11:ff:ee:f7:7d:ee:e5:9b:f6:8c:27:dc:3a:ab:3d:
c0:fd:46:16:89:1c:6e:e8:12:36:4b:ec:c7:93:d5:
29:6e:8a:28:f1:c8:21:00:f0:be:26:7d:ef:1a:00:
8e:24:67:85:89:8a:5c:ec:60:58:84:b6:bb:14:f3:
25:65:85:8d:a4:7d:09:a0:1f:70:f5:47:3d:71:9e:
8b:d9:78:47:ab:e2:10:e6:4c:09:a1:c5:a6:47:06:
7f:32:3d:07:9f:5e:ec:18:a1:42:56:0c:35:5f:54:
cc:e0:83:62:93:b9:74:08:2f:7c:b3:a1:12:83:f3:
5e:89:c9:9d:bd:1d:b8:18:1c:7f:f3:36:36:cf:6e:
0d:3b:6e:df:f7:e0:d2:b7:97:63:c7:67:c8:e3:f0:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:FC:D9:A9:72:EC:A0:FA:31:70:AD:39:FA:5E:AE:E7:AB:96:27
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a8e3526737b0c2259eac010e77d6ed9587cab13a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.216.121.0/24
190.217.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:69:fe:4c:7a:ac:e5:e6:a7:db:74:9e:5f:cc:37:d3:d0:a7:
b2:f5:b7:61:13:33:c2:2a:ac:a2:97:56:7e:02:a1:3c:cb:57:
e7:be:fd:47:a8:5c:c6:cd:9b:d9:26:2c:28:02:01:84:57:94:
50:11:3a:2b:75:ed:0c:db:ab:f8:5d:e7:ee:5d:e2:fd:bb:24:
25:9a:a2:6a:5d:7f:6b:47:3b:1d:72:52:16:03:18:7f:82:a2:
c9:c0:54:d4:96:5e:e6:93:d5:c7:2a:e5:e8:69:b7:11:64:33:
88:00:1b:f2:59:3b:c9:43:69:29:48:45:36:c7:f5:2c:52:66:
18:c6:02:b2:e2:07:48:9d:fb:4e:b3:e6:62:24:f4:a2:15:10:
b5:e9:67:fd:b9:43:20:a0:44:c7:07:b4:b0:53:67:35:b8:98:
5a:fc:1b:42:8f:2e:67:72:58:73:20:59:da:cc:5e:d9:79:6f:
93:9b:95:1f:2b:dd:0f:bf:d7:4d:72:6d:8c:36:c6:7f:33:23:
99:e7:3a:37:5f:52:fd:a4:e3:a4:f9:06:98:ab:92:a7:3b:6f:
46:e0:26:91:0e:16:86:e3:db:3c:43:b7:5a:19:8e:5b:89:d0:
8c:57:a8:7e:44:af:6c:3f:42:ec:a0:22:94:9d:03:3d:5a:3d:
46:d3:d0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org