Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/f3122b8c32b19baa89e979313291f726c8be7af2.roa
File: f3122b8c32b19baa89e979313291f726c8be7af2.roa (raw, json)
Hash identifier: HUeOflAU9LTtU+QqH+BmifaW/QfA/bVrFZ0xsAzqUpo=
Subject key identifier: D5:90:9B:3E:24:38:32:6C:9E:79:C9:8F:7D:EB:5A:A4:2D:F5:E2:12
Certificate issuer: /CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Certificate serial: 26D4F1
Authority key identifier: 2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/f3122b8c32b19baa89e979313291f726c8be7af2.roa
Signing time: Sun 04 Feb 2024 09:47:08 +0000
ROA not before: Sun 04 Feb 2024 09:47:08 +0000
ROA not after: Wed 04 Feb 2026 09:47:08 +0000
asID: 23520
IP address blocks: 190.71.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2544881 (0x26d4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
Validity
Not Before: Feb 4 09:47:08 2024 GMT
Not After : Feb 4 09:47:08 2026 GMT
Subject: CN=f3122b8c32b19baa89e979313291f726c8be7af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:20:69:0b:47:c5:8d:97:1f:4a:43:5d:87:
90:84:5f:43:98:42:54:ef:94:e5:98:8b:ee:69:5b:
fc:76:2b:82:b8:72:72:28:7f:97:b2:7f:fb:b2:90:
34:7c:a0:97:2f:a9:b6:2c:4a:df:2e:e3:fa:5e:40:
65:b4:9c:53:8b:e2:c3:79:5c:b4:eb:3a:02:01:9a:
d9:ef:b7:ec:7c:73:94:33:3a:4d:71:04:9c:f0:58:
76:74:e4:fb:85:ad:a8:cd:70:d4:ae:b3:02:7f:ff:
d2:53:f3:fe:45:b7:92:69:b0:6c:d7:85:ea:46:54:
8f:74:3d:c1:81:71:ce:e0:4b:fd:be:78:87:f4:88:
9a:26:0e:62:8c:46:e5:62:26:65:4e:29:17:d2:fa:
23:97:ae:fd:90:48:09:92:2f:ac:5f:a8:d1:34:0f:
14:af:79:5c:f5:4e:22:66:f2:8e:a5:63:fb:d0:51:
93:83:91:05:98:27:ac:86:eb:39:59:fa:da:ce:d3:
a6:70:92:73:e3:bc:dc:db:d3:08:e0:2c:b7:e5:94:
48:20:1a:6b:3b:7a:6e:52:b1:7d:52:2f:2d:30:84:
4d:e5:7d:81:b8:e3:b4:b1:a7:cc:57:be:da:40:ec:
7c:b6:6f:a5:3b:e8:74:0f:59:bc:b7:91:84:dc:94:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:90:9B:3E:24:38:32:6C:9E:79:C9:8F:7D:EB:5A:A4:2D:F5:E2:12
X509v3 Authority Key Identifier:
keyid:2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/f3122b8c32b19baa89e979313291f726c8be7af2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/1159fdc4276fa3bfc64df717e4ca0a75249cf188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.71.85.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8c:74:78:9c:a5:35:0d:16:df:15:da:d0:61:f0:ae:d5:66:
cf:e4:14:99:2e:ac:2c:bc:0c:49:b1:61:7a:05:db:04:5f:43:
8d:0c:4a:5c:be:dd:0a:bc:f3:17:df:9f:33:4e:fa:f5:fa:1e:
f6:56:c3:7e:04:36:df:44:a0:a7:c0:c4:bc:b1:6a:ed:e3:14:
0e:45:9b:56:c1:67:51:72:e6:be:fe:b6:df:06:ea:12:af:8a:
28:0b:a2:f6:2d:75:d9:51:52:4d:fd:2b:c5:4d:55:90:66:83:
fd:64:0b:c8:69:d0:e2:74:38:00:17:c4:24:18:c5:e7:8f:4f:
65:e6:aa:d0:33:12:e9:a4:15:86:62:a7:20:4c:3e:ab:5d:c3:
71:51:e9:1c:52:fe:ea:ff:bd:a4:c4:78:36:4c:ee:42:49:2f:
d8:54:fc:b4:0a:e9:df:ec:09:54:ef:c1:1e:dd:a3:ca:a8:ab:
69:a2:4e:b1:a0:d0:cf:5d:e0:93:da:6a:17:7b:b7:44:ff:c5:
81:ea:9b:17:60:18:58:98:09:56:f6:a6:74:89:b0:09:6d:56:
c3:b2:2d:3f:cd:ec:f7:00:05:7b:72:3b:ae:6c:31:17:db:f7:
59:5b:52:c0:1f:19:f2:0e:93:71:7e:48:99:a3:0c:2f:57:ad:
26:62:5d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org