Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/0654fc2a824684568926379fe7dfde474ed5a954.roa
File: 0654fc2a824684568926379fe7dfde474ed5a954.roa (raw, json)
Hash identifier: Mk1ywBmKh41+vpC9n6SShLprtF+TGoBnmM349bUrfwQ=
Subject key identifier: 8B:09:9E:C3:1F:59:21:3F:90:7A:C7:05:B5:F9:29:2A:F5:13:D5:34
Certificate issuer: /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial: 039638
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/0654fc2a824684568926379fe7dfde474ed5a954.roa
Signing time: Wed 04 May 2022 17:35:54 +0000
ROA not before: Wed 04 May 2022 03:00:00 +0000
ROA not after: Tue 04 May 2027 03:00:00 +0000
asID: 262186
IP address blocks: 189.85.40.0/22 maxlen: 32
2803:21e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235064 (0x39638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Validity
Not Before: May 4 03:00:00 2022 GMT
Not After : May 4 03:00:00 2027 GMT
Subject: CN=0654fc2a824684568926379fe7dfde474ed5a954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:35:aa:98:e0:35:26:58:59:5a:73:9e:b0:
14:64:ea:30:b8:ac:3b:9a:30:a3:04:6c:d0:ae:24:
39:2a:22:b9:9b:69:e1:80:a4:85:96:e8:50:b1:c0:
54:e0:ef:ec:52:3a:5e:a3:4b:88:02:cc:35:4b:a8:
6f:48:d1:0f:cc:5a:09:5c:28:a9:f6:cd:f0:16:25:
c4:a8:8c:99:ef:2c:3b:29:5c:11:99:38:58:f3:26:
ca:28:30:be:47:e4:42:28:94:df:92:42:23:e2:a9:
fa:9c:64:58:2e:bc:60:d8:ac:68:17:3e:f8:05:61:
d3:3f:d4:ab:c4:69:23:bc:ff:e0:17:42:20:80:4c:
41:cb:c4:6c:bd:38:d1:f0:1b:71:5b:2f:3f:8b:b8:
8e:76:51:c5:1e:5e:28:f0:33:b5:3a:95:44:1c:fe:
35:62:91:90:85:af:90:52:cb:94:92:12:07:6d:b3:
7b:e5:11:c5:7a:46:a5:c7:ad:48:3e:44:20:5f:cf:
8d:a7:e8:a4:77:0c:3d:01:ca:24:c2:41:a8:78:49:
40:09:3e:a5:7d:d3:00:87:b5:39:01:72:39:d1:4b:
88:32:5a:55:1f:8e:7e:80:58:2e:36:d5:9a:6f:d4:
10:04:d7:73:9e:37:37:76:bc:b4:0c:90:d5:ec:10:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:09:9E:C3:1F:59:21:3F:90:7A:C7:05:B5:F9:29:2A:F5:13:D5:34
X509v3 Authority Key Identifier:
keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/0654fc2a824684568926379fe7dfde474ed5a954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.85.40.0/22
IPv6:
2803:21e0::/32
Signature Algorithm: sha256WithRSAEncryption
3b:17:63:a8:3b:f2:18:80:6c:64:e9:ff:1d:3a:96:a6:ec:b5:
45:10:88:9f:e6:06:20:93:80:84:ef:30:c5:59:d4:10:d4:43:
21:bb:22:17:bb:bc:98:dd:72:ca:fc:53:e2:b1:eb:3e:90:28:
8b:79:f9:e4:10:9b:c2:b8:82:0f:27:e8:a4:d3:30:05:2c:28:
c6:b7:d2:fe:3e:9c:40:30:0d:59:95:91:39:59:51:2b:40:f0:
94:b4:0e:09:9d:3e:cb:82:50:34:ac:05:93:c9:97:92:99:48:
4b:b9:b5:90:ee:ba:92:95:e9:55:32:7f:ca:b6:d8:1b:2a:9c:
8f:7f:95:c6:7e:e2:fd:34:d9:a6:16:fb:c3:93:92:a3:51:44:
51:e0:d4:25:b2:45:59:9c:3e:6b:31:0e:ad:f1:ab:cb:5c:c1:
2f:fc:27:9d:bf:80:7f:f1:f7:5c:54:79:09:a0:9b:0e:46:9c:
94:b3:e9:b4:87:f1:9c:7e:f8:7b:a7:81:54:c3:93:70:17:54:
11:a1:c2:ca:05:9e:7f:d7:a0:bd:08:d0:5a:f2:7f:b3:22:74:
86:54:ec:39:44:c6:5b:e6:af:79:d7:93:6e:5d:3e:d1:95:2b:
82:77:85:6f:f8:60:b1:d5:12:6a:d9:28:c0:14:52:47:c8:c9:
b0:d7:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org