Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/bf835e15a7129be65ba12ea5be56f502dd5ab03b.roa
File: bf835e15a7129be65ba12ea5be56f502dd5ab03b.roa (raw, json)
Hash identifier: Xnn+bzonxbPIld4PEXb4LazaPno4KE3lKa2Cfi8KKus=
Subject key identifier: A4:C6:11:68:40:31:26:E5:46:6E:0D:C2:27:D1:D3:45:7D:34:74:81
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 24D5FE
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/bf835e15a7129be65ba12ea5be56f502dd5ab03b.roa
Signing time: Fri 21 Jul 2023 20:56:01 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 262187
IP address blocks: 190.216.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414078 (0x24d5fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=bf835e15a7129be65ba12ea5be56f502dd5ab03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:03:42:09:54:53:48:23:40:1e:4d:8b:f1:
69:6e:d0:7e:07:90:3b:f4:ed:a6:37:17:cb:3c:6b:
42:bb:ac:e3:66:d6:d6:c4:b5:9f:60:5c:f3:87:7b:
bc:70:d5:93:b7:b7:75:a9:14:b6:40:ee:c2:a4:22:
53:86:5d:a0:81:c7:7d:98:c0:ff:32:f8:d3:58:10:
7c:46:98:b7:46:ef:6a:3f:96:ed:a9:91:a7:3d:c7:
cd:78:f4:1d:c5:97:f1:f1:c9:9b:5d:bc:18:c4:e5:
36:6d:5c:d7:49:05:ea:ce:91:6e:8b:91:1e:20:41:
3a:62:e5:1d:11:64:db:61:39:93:b6:ab:dd:ce:b0:
cf:73:1e:da:e8:bb:f3:56:46:92:69:68:de:6a:e6:
78:b0:bb:c3:a6:fb:40:7e:4c:f0:3e:02:ea:cd:a9:
1e:96:7f:35:0b:79:7f:6e:36:86:35:77:b7:0a:77:
03:65:c8:28:34:b0:78:42:c4:a9:e5:b4:f6:ea:a2:
7b:23:b7:a0:1d:41:77:64:6c:cc:85:70:96:5f:8d:
a6:1e:d1:8c:2c:0f:44:cb:76:29:c0:3b:c8:ee:59:
13:6c:ff:cc:19:2f:2a:63:51:92:95:1b:24:93:f7:
90:e2:2f:91:bf:33:d0:81:1c:5a:8c:51:83:23:2c:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C6:11:68:40:31:26:E5:46:6E:0D:C2:27:D1:D3:45:7D:34:74:81
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/bf835e15a7129be65ba12ea5be56f502dd5ab03b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.216.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:de:f3:33:1c:ea:74:7d:dd:db:4b:76:14:22:b5:c1:49:4e:
87:9d:83:b7:b9:53:a4:af:92:b0:c0:4d:ea:e5:8a:e4:51:b7:
d2:f7:cf:fa:55:9e:a6:e9:7c:9f:11:1a:1c:5b:25:b2:c8:75:
97:1d:73:0d:45:c1:ae:a6:f7:09:d5:32:f0:0e:64:7a:89:fd:
6a:bb:21:b1:81:0f:59:39:65:ee:72:39:3a:cd:fd:9f:2b:d4:
da:b2:93:85:99:e1:55:e1:c5:30:38:0b:41:22:70:9c:e4:0b:
4e:8d:c8:25:f5:54:00:0b:88:4f:34:93:2f:d3:03:db:9b:90:
a0:d4:79:ef:03:e7:20:59:d6:78:14:e4:2f:f3:b5:ad:c7:1f:
d6:79:01:64:2b:5a:50:ed:10:54:25:2d:73:65:da:0f:38:2b:
33:e1:c2:9a:f8:3c:0a:9e:e9:25:55:cf:8c:30:c8:47:c5:0a:
1f:cd:de:9d:c4:c6:17:e5:65:5a:b9:3a:ff:47:3e:b2:39:81:
ed:bb:5a:fd:87:24:37:0f:56:71:48:b8:d3:9a:36:39:bc:9b:
e4:36:5e:9c:60:aa:11:6f:d6:03:96:c4:30:53:9f:cb:c2:69:
e3:39:5b:0e:84:47:50:7f:56:69:f2:4d:40:68:6a:5c:9b:9d:
90:3e:5f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org