Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/fbfbf944ba37852d1c0442ee42ae2c17ba46c71d.roa
File: fbfbf944ba37852d1c0442ee42ae2c17ba46c71d.roa (raw, json)
Hash identifier: W+DbHRSfqUgOidnW3laGlg9ZqnfLF5PViV/3pVhVvjE=
Subject key identifier: 23:60:0E:DA:0F:F4:39:4D:41:22:86:3A:F7:24:F6:6B:6E:B8:88:E3
Certificate issuer: /CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Certificate serial: 235C04
Authority key identifier: C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/fbfbf944ba37852d1c0442ee42ae2c17ba46c71d.roa
Signing time: Sat 08 Jul 2023 05:08:03 +0000
ROA not before: Fri 07 Jul 2023 05:08:03 +0000
ROA not after: Tue 08 Jul 2025 05:08:03 +0000
asID: 61461
IP address blocks: 190.124.28.0/23 maxlen: 23
190.124.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317316 (0x235c04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68
Validity
Not Before: Jul 7 05:08:03 2023 GMT
Not After : Jul 8 05:08:03 2025 GMT
Subject: CN=fbfbf944ba37852d1c0442ee42ae2c17ba46c71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:56:06:5c:9e:be:6b:84:62:56:fc:b3:aa:
86:1f:3a:cd:7b:25:94:fc:f8:90:45:f5:c2:31:fd:
c8:fb:00:c5:74:7f:d2:fa:2e:61:73:9e:e2:ce:5c:
c2:bd:1e:76:2d:46:9f:16:bb:6a:3a:02:7b:06:4d:
9a:66:dd:97:25:67:ed:6f:16:7c:46:e2:a3:27:61:
f3:41:ff:e6:b4:1a:9f:fe:91:80:9a:ff:31:53:cf:
e7:f9:41:df:82:81:1e:d8:19:3c:d5:ee:38:c1:30:
79:7d:87:e9:23:bd:b6:2b:c1:89:c5:76:97:95:3f:
93:f1:f3:be:aa:76:a9:aa:fc:fb:f5:74:93:0a:9e:
fc:f0:5e:e2:78:d4:65:c0:a8:e2:ba:3c:56:7a:3f:
1c:c3:52:43:fd:7a:2d:bb:a7:f3:67:3c:2f:76:32:
ce:2a:67:e2:da:e0:4a:53:69:cb:ee:2f:df:12:51:
4e:f2:91:f2:c1:83:e3:94:5d:59:27:90:af:1f:07:
e0:59:05:f9:59:0f:5e:03:4c:55:90:e2:01:ea:be:
95:fe:b5:66:08:81:b6:8b:ea:ee:35:e1:26:fc:03:
a5:19:a7:0d:68:0d:54:ad:9e:e5:5d:f8:42:e2:7f:
27:28:d7:7d:04:c1:a4:e1:db:df:ea:6f:d7:2b:4e:
69:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:60:0E:DA:0F:F4:39:4D:41:22:86:3A:F7:24:F6:6B:6E:B8:88:E3
X509v3 Authority Key Identifier:
keyid:C1:AC:19:8F:3C:C0:07:16:CA:8E:94:87:E8:49:0D:0B:3F:AB:5E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/fbfbf944ba37852d1c0442ee42ae2c17ba46c71d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1e3138a5-ba88-4241-adeb-316a3ca524e5/ab32ef3a89e382ea4ca0e9b0fc6680ac4dd89c68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.28.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:f9:df:47:a9:56:76:ae:2e:42:07:02:58:9e:be:d0:52:ae:
31:a7:44:d1:f3:00:bf:aa:ab:b6:b9:80:92:32:a5:51:23:cf:
aa:4e:71:84:4c:b0:76:18:a9:27:7c:cf:d4:3f:ce:9b:c6:b3:
3a:2d:7b:f5:22:f4:85:fa:ac:1e:f2:95:2c:c8:10:53:91:07:
10:41:8b:4f:5b:a5:3d:97:09:ce:24:97:03:e5:65:89:19:e4:
b9:ed:46:8c:28:eb:e6:40:ce:8d:eb:bc:f4:69:62:bd:50:cb:
bf:80:af:a2:49:fa:31:20:24:e7:9a:59:d4:41:96:ed:83:f3:
83:37:d2:d9:9d:3e:0e:d9:e9:be:c8:72:ac:cf:31:11:dc:20:
fb:79:61:d8:9e:bb:a7:85:b7:73:49:26:b0:bd:bb:f1:1e:52:
9e:d4:e0:5b:bf:f0:b5:d9:d3:fe:43:b9:da:a5:58:a8:b4:26:
3a:64:de:a7:b7:87:af:50:d7:65:81:38:ca:17:c3:aa:99:c0:
89:e1:22:8c:2b:01:f4:53:98:ae:fe:78:b2:09:75:86:ec:b6:
70:e5:01:ab:29:4f:08:8a:37:82:50:c0:0d:3b:db:e7:d0:f9:
b0:f3:d4:28:dc:d9:0e:f3:8b:31:50:16:4d:48:ac:34:cb:b2:
d5:7d:53:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org