Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/606dc3544ce42977f50601ffbb0ee72463322abe.roa
File: 606dc3544ce42977f50601ffbb0ee72463322abe.roa (raw, json)
Hash identifier: XB2+OFaH4tN8ASg3Eew7eut+60wUtM6M1/0Aaf9/O20=
Subject key identifier: 5D:42:61:45:EF:3E:08:82:F9:11:18:25:A7:E4:52:80:D0:7F:60:2A
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 223C0F
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/606dc3544ce42977f50601ffbb0ee72463322abe.roa
Signing time: Tue 25 Apr 2023 15:05:30 +0000
ROA not before: Mon 24 Apr 2023 15:04:37 +0000
ROA not after: Fri 25 Apr 2025 15:04:37 +0000
asID: 28079
IP address blocks: 190.5.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2243599 (0x223c0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Apr 24 15:04:37 2023 GMT
Not After : Apr 25 15:04:37 2025 GMT
Subject: CN=606dc3544ce42977f50601ffbb0ee72463322abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:f8:26:9e:ec:00:26:cf:70:4c:ea:3d:7c:
59:64:e9:14:67:7e:4d:ce:c2:5b:39:fb:6b:4c:11:
63:a2:76:bf:bf:ca:d9:56:8d:f9:4c:c9:42:01:5f:
43:63:86:bb:bb:05:d7:54:e0:0b:34:3b:23:2d:e2:
10:db:1d:bc:75:96:48:c8:70:ca:38:cd:a6:c6:69:
aa:64:e7:37:2a:c9:85:2e:e9:d7:6e:db:20:45:45:
ea:be:7f:4c:87:33:3d:09:93:e9:6c:23:2e:38:7a:
b5:52:98:22:a6:ff:f0:a4:80:28:cf:5b:31:c1:5b:
6c:c1:e7:87:cb:24:9e:c0:42:3c:dd:1a:a9:7c:60:
5c:0d:d0:0a:0f:45:fe:6f:c1:6f:8a:58:da:89:83:
05:16:71:86:2b:74:3f:4f:19:05:ca:13:ef:8a:fa:
e6:e4:3c:78:9c:0a:15:82:29:9e:0c:e2:6b:12:45:
2b:4b:b4:00:96:17:8a:05:60:d0:ce:30:28:98:d2:
7a:d4:ba:c3:c1:6e:bc:f7:f5:86:c4:fd:7e:0c:d2:
91:f0:7d:9c:ca:5a:57:fd:89:6f:5b:0c:f9:53:cd:
ee:4c:ba:d4:63:22:e4:6a:c0:c2:7d:b5:06:6d:fd:
18:cb:c5:f9:df:a8:39:0a:7d:86:d0:e3:24:4a:cd:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:42:61:45:EF:3E:08:82:F9:11:18:25:A7:E4:52:80:D0:7F:60:2A
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/606dc3544ce42977f50601ffbb0ee72463322abe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.5.251.0/24
Signature Algorithm: sha256WithRSAEncryption
11:c9:37:a5:06:1e:77:ff:f3:f3:db:ad:f0:24:be:a2:41:47:
00:f5:61:f7:00:2e:68:e5:90:16:48:22:e0:16:f2:61:c1:b3:
93:57:2f:a4:dc:5c:56:10:44:de:f5:2f:fc:5f:36:11:11:be:
78:38:14:9d:bc:83:36:63:86:e6:dc:02:26:7f:e9:85:bd:87:
74:11:de:3b:e5:a8:3b:25:0b:74:f0:67:09:b0:7e:7c:40:d8:
0b:b9:b3:e2:f6:7b:a8:0e:56:82:2a:90:7c:49:7d:aa:e1:3c:
c7:08:67:4b:00:a9:46:97:f9:a3:ee:02:be:c8:19:f1:7e:a7:
d9:a0:ff:a3:3c:bd:68:c0:f7:29:db:c4:5f:4d:3c:bd:3d:82:
50:0b:18:41:ff:95:68:89:87:d3:ab:c0:1d:c8:c6:d0:ec:ba:
dc:94:ac:15:fd:7a:51:0d:58:8e:1f:70:08:e4:1f:01:c7:13:
f5:0b:04:dc:fe:34:98:4e:f6:2a:b0:e4:f0:81:1b:31:d1:f6:
3d:2d:64:82:1a:32:35:0e:32:92:7c:eb:30:86:8b:b6:fe:5f:
b6:b9:0f:57:05:ee:97:53:5e:c0:42:42:81:22:00:49:5e:99:
fb:01:44:5d:6b:bf:29:87:a2:74:c4:61:f6:4a:c2:55:ce:f8:
63:2f:1c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org