Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/1912d2bc8dea4bb0c662a4f16dff2469c2601a96.roa
File: 1912d2bc8dea4bb0c662a4f16dff2469c2601a96.roa (raw, json)
Hash identifier: GLR+nYFTbbgENc2LhiE+FcW4IMrxBpckkH+e0bmQj2o=
Subject key identifier: 6D:93:08:31:70:D1:C2:89:BC:1E:91:3F:E9:41:2E:93:37:77:20:3F
Certificate issuer: /CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Certificate serial: 04CECD
Authority key identifier: 86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/1912d2bc8dea4bb0c662a4f16dff2469c2601a96.roa
Signing time: Wed 15 Jun 2022 22:21:58 +0000
ROA not before: Thu 05 May 2022 03:00:00 +0000
ROA not after: Wed 05 May 2027 03:00:00 +0000
asID: 272086
IP address blocks: 189.85.41.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315085 (0x4cecd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
Validity
Not Before: May 5 03:00:00 2022 GMT
Not After : May 5 03:00:00 2027 GMT
Subject: CN=1912d2bc8dea4bb0c662a4f16dff2469c2601a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4a:c6:3b:60:4e:7c:cb:8a:3e:8c:95:f6:16:
bc:82:aa:5e:0b:e3:c0:64:d9:a5:c6:11:49:3a:75:
08:69:c4:f2:bc:9c:b6:5f:62:72:80:5e:44:e9:71:
5e:53:7c:d9:0c:da:27:fd:81:fb:c5:b5:6a:c8:09:
97:d6:c4:3d:79:9c:97:55:45:e2:0d:50:35:a9:f0:
b1:87:c4:94:48:04:28:ed:3a:c4:c1:5d:20:12:bc:
e1:aa:2c:8a:30:42:20:75:70:f2:d0:bd:99:b9:0d:
8f:ab:7b:3f:ed:7b:4d:fe:5f:71:a2:48:4e:8e:3d:
ea:a3:1e:c7:20:98:2c:f8:43:27:f4:25:28:ac:8c:
ed:60:2a:82:19:b3:20:be:c3:7a:db:c1:7a:1b:2d:
1a:19:cf:d4:28:bb:0f:5c:60:1f:ce:21:3a:e3:5c:
37:88:63:0c:d5:2c:34:d2:75:5b:bb:05:fd:9e:39:
d5:e4:a9:f5:ca:ac:50:22:a4:71:30:d2:fe:94:6f:
ea:c9:62:88:31:94:8a:bb:49:fc:f8:dc:ad:a7:18:
bf:5c:54:ca:d6:f1:cb:7a:7f:ba:9c:f1:de:0e:b7:
54:5e:68:5c:7b:68:61:57:31:fb:ec:38:40:d6:5a:
11:31:4a:30:0c:90:67:2f:31:9d:a1:e9:ae:cb:de:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:93:08:31:70:D1:C2:89:BC:1E:91:3F:E9:41:2E:93:37:77:20:3F
X509v3 Authority Key Identifier:
keyid:86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/1912d2bc8dea4bb0c662a4f16dff2469c2601a96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.85.41.0/24
Signature Algorithm: sha256WithRSAEncryption
97:07:1f:77:0b:4f:7f:5d:bc:99:01:55:3b:9f:39:9c:64:da:
2e:e7:d8:76:39:42:10:d5:db:91:8d:be:4e:91:a0:52:11:a8:
e7:9f:0a:dd:e6:7d:80:a1:58:4f:8b:8b:03:15:d3:5b:ac:3e:
53:3b:31:9b:0a:3b:06:e2:9c:13:75:36:81:14:44:d1:4e:80:
9a:83:c9:fc:25:e2:d8:c8:8d:a1:48:28:23:d9:44:9c:dc:05:
ad:24:87:b9:ae:bb:89:98:bf:79:37:d8:dc:4e:11:dc:41:09:
ca:14:4a:67:fd:ff:13:4e:50:26:66:da:d2:fe:9d:db:45:93:
3d:40:b8:5a:c0:a0:73:ff:98:e5:2a:49:c6:cb:9a:11:e1:27:
db:22:82:b2:96:a2:f0:d3:66:2f:b1:d1:50:65:a2:ab:c0:0e:
32:d3:9e:94:93:d3:7e:cc:71:d8:0f:b4:ab:30:7f:f3:48:a4:
db:cb:8a:eb:f2:dc:4a:9a:20:34:46:30:3c:c7:0a:b2:25:81:
60:13:51:cc:c8:26:d4:bb:1b:57:eb:56:ad:a4:38:5e:0e:ab:
84:2a:2f:82:17:53:fa:38:0e:e6:9c:37:b1:2d:e5:e4:57:3a:
b4:ab:15:57:72:a4:47:f3:f1:ba:71:cc:b9:ee:a8:b9:88:77:
26:60:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org