Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/04606374628bef466fab3f43518d85f2e65efdc2.roa
File: 04606374628bef466fab3f43518d85f2e65efdc2.roa (raw, json)
Hash identifier: cfFx98Z8L8AR+xsIhYxQ7+XqPoUWpUZfF00aDJq6Njo=
Subject key identifier: 0E:BC:CE:16:E6:6F:D5:A2:25:79:8B:2D:C2:CF:BC:46:84:12:2A:86
Certificate issuer: /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial: 0D7D3A
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/04606374628bef466fab3f43518d85f2e65efdc2.roa
Signing time: Sun 14 May 2023 16:26:53 +0000
ROA not before: Sat 13 May 2023 16:26:53 +0000
ROA not after: Wed 14 May 2025 16:26:53 +0000
asID: 272086
IP address blocks: 189.85.40.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884026 (0xd7d3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Validity
Not Before: May 13 16:26:53 2023 GMT
Not After : May 14 16:26:53 2025 GMT
Subject: CN=04606374628bef466fab3f43518d85f2e65efdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:07:1b:c2:56:fa:c5:1b:b4:1e:6f:6e:91:
f8:9d:8a:dd:fb:c8:29:3d:30:f3:e0:fd:ba:f7:cf:
1a:53:a8:ce:f8:2c:bc:4c:d3:66:ad:12:83:3b:db:
a8:f6:14:7a:5e:71:86:db:77:1b:52:06:cc:c9:cf:
c1:7c:6d:b5:e7:92:00:29:51:68:c2:c4:64:a2:d0:
3f:2a:73:db:0d:d2:aa:bc:89:1e:6e:d9:47:ec:93:
82:d2:9c:e4:87:86:d3:f1:15:5f:8e:84:4d:c5:a5:
f3:26:1d:c8:00:b2:4f:89:cb:9e:fd:99:e7:b5:e1:
4b:2a:9d:35:7a:8c:c5:00:17:56:5a:51:6c:8c:d3:
5b:63:db:82:00:0e:fa:6a:3d:55:b5:5b:31:0d:d1:
c4:b2:72:c7:09:e0:88:a5:d5:be:a5:47:37:32:44:
a9:2a:85:9e:34:6c:1b:77:69:bb:5c:bc:dd:51:86:
eb:0c:b0:94:9a:49:29:ea:3d:e1:e6:a3:82:aa:b1:
c0:b0:ec:cf:f3:fa:37:47:e3:b2:3b:61:67:50:ef:
41:af:94:70:d1:a3:63:6b:b1:db:8b:cf:52:38:8a:
6f:4e:5d:b8:b4:20:ba:23:ed:82:9b:ec:ae:ce:df:
30:44:c1:15:06:dd:d1:cc:8b:d1:fc:7a:45:90:9f:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BC:CE:16:E6:6F:D5:A2:25:79:8B:2D:C2:CF:BC:46:84:12:2A:86
X509v3 Authority Key Identifier:
keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/04606374628bef466fab3f43518d85f2e65efdc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.85.40.0/22
Signature Algorithm: sha256WithRSAEncryption
48:75:55:5e:dc:46:a5:e4:4f:f2:98:b7:95:8f:5d:51:02:0d:
62:0d:1f:f9:4c:32:0d:00:65:b2:4e:64:5a:96:c0:64:15:ae:
e9:1e:89:38:e7:40:c4:91:59:f6:8b:ad:46:74:93:96:ee:97:
7c:93:b8:bc:20:6b:da:e7:de:59:80:7b:73:17:1c:8a:d2:34:
47:65:cc:57:1c:4d:cc:7c:07:0f:4c:13:68:64:09:27:09:7f:
db:3d:78:4f:67:83:7b:cd:ee:77:f3:a2:05:4d:fa:cf:ee:e1:
a2:ac:da:1f:76:e2:77:af:4a:33:d1:2a:23:9c:15:41:bf:94:
38:b6:58:28:c0:3c:d4:2f:61:09:70:e0:31:1b:21:d4:a7:67:
35:4a:e8:88:e3:88:ea:ac:44:66:58:90:b0:6b:eb:dd:05:d7:
48:f4:b8:ad:3e:78:38:2b:79:34:2e:48:63:d0:42:a5:56:91:
8c:50:31:6f:b1:c7:ae:6c:93:10:b5:df:dd:8f:8f:01:ed:9a:
a4:02:5d:5f:7c:be:43:0e:21:5f:b6:7d:48:20:53:1b:7d:22:
94:d9:ec:f3:8d:d3:3a:e4:94:00:13:90:37:cd:6a:f9:86:81:
a3:9f:21:c1:d2:87:99:de:da:13:30:8c:df:22:d0:38:57:79:
5a:e7:3a:a7
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDX06MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGM1
ZWY4NjEyNGEzOGYzZmM0NmU4NWU1MWUwMTQxMWRiMzdmZGIyMDQwHhcNMjMwNTEz
MTYyNjUzWhcNMjUwNTE0MTYyNjUzWjAzMTEwLwYDVQQDEygwNDYwNjM3NDYyOGJl
ZjQ2NmZhYjNmNDM1MThkODVmMmU2NWVmZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAt3YHG8JW+sUbtB5vbpH4nYrd+8gpPTDz4P26988aU6jO+Cy8
TNNmrRKDO9uo9hR6XnGG23cbUgbMyc/BfG2155IAKVFowsRkotA/KnPbDdKqvIke
btlH7JOC0pzkh4bT8RVfjoRNxaXzJh3IALJPicue/ZnnteFLKp01eozFABdWWlFs
jNNbY9uCAA76aj1VtVsxDdHEsnLHCeCIpdW+pUc3MkSpKoWeNGwbd2m7XLzdUYbr
DLCUmkkp6j3h5qOCqrHAsOzP8/o3R+OyO2FnUO9Br5Rw0aNja7Hbi89SOIpvTl24
tCC6I+2Cm+yuzt8wRMEVBt3RzIvR/HpFkJ/NlQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFA68zhbmb9WiJXmLLcLPvEaEEiqGMB8GA1UdIwQYMBaAFIZWaXKATb3tFH/z
oDjCtpWtwshrMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzVlZjg2
MTI0YTM4ZjNmYzQ2ZTg1ZTUxZTAxNDExZGIzN2ZkYjIwNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTkxYzAxZmUtNWUwMi00MjgwLWIyYzMtZTNiZTFm
MjBjMDZkLzA0NjA2Mzc0NjI4YmVmNDY2ZmFiM2Y0MzUxOGQ4NWYyZTY1ZWZkYzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOTFjMDFmZS01ZTAyLTQyODAtYjJjMy1lM2Jl
MWYyMGMwNmQvYzVlZjg2MTI0YTM4ZjNmYzQ2ZTg1ZTUxZTAxNDExZGIzN2ZkYjIw
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAr1VKDANBgkqhkiG9w0BAQsFAAOCAQEASHVVXtxGpeRP8pi3
lY9dUQINYg0f+UwyDQBlsk5kWpbAZBWu6R6JOOdAxJFZ9outRnSTlu6XfJO4vCBr
2ufeWYB7cxccitI0R2XMVxxNzHwHD0wTaGQJJwl/2z14T2eDe83ud/OiBU36z+7h
oqzaH3bid69KM9EqI5wVQb+UOLZYKMA81C9hCXDgMRsh1KdnNUroiOOI6qxEZliQ
sGvr3QXXSPS4rT54OCt5NC5IY9BCpVaRjFAxb7HHrmyTELXf3Y+PAe2apAJdX3y+
Qw4hX7Z9SCBTG30ilNns843TOuSUABOQN81q+YaBo58hwdKHmd7aEzCM3yLQOFd5
Wuc6pw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org