Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d196da1b251300264f6496a01896e8d9e4f76795.roa
File: d196da1b251300264f6496a01896e8d9e4f76795.roa (raw, json)
Hash identifier: lmFi/2XyA9v8QFfyqXXFK52fOrKXhKm/MzqOzebnUBU=
Subject key identifier: 1C:1D:0D:FE:9E:EF:F2:36:36:97:B9:3C:02:E9:99:AA:57:91:CE:A8
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 14F498
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d196da1b251300264f6496a01896e8d9e4f76795.roa
Signing time: Thu 27 Jan 2022 09:00:16 +0000
ROA not before: Thu 27 Jan 2022 03:00:00 +0000
ROA not after: Sat 27 Jan 2024 03:00:00 +0000
asID: 207326
IP address blocks: 191.96.53.0/24 maxlen: 24
191.96.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1373336 (0x14f498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Jan 27 03:00:00 2022 GMT
Not After : Jan 27 03:00:00 2024 GMT
Subject: CN=d196da1b251300264f6496a01896e8d9e4f76795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:95:e7:a8:07:21:c9:5e:43:81:68:87:a7:
5d:f0:40:d8:d5:56:89:ee:e5:61:7c:76:97:3c:05:
58:a1:c1:95:60:2d:20:26:28:37:d7:38:d5:85:a7:
c3:e5:31:81:c8:95:0d:c5:66:5c:e3:01:d0:0c:c0:
9d:83:f4:c1:81:07:45:1c:6a:82:38:6c:b3:7b:57:
32:90:ac:2d:c7:ba:f1:e3:63:e6:03:db:4d:24:39:
bd:8b:bf:ce:7a:aa:7a:18:a4:9b:ce:50:90:a6:44:
17:9e:3d:86:81:f0:73:ac:60:f3:e2:e1:f7:44:f5:
76:a4:03:1f:9a:59:be:11:be:bd:d4:2c:01:8c:73:
9d:56:d0:87:2f:3d:9c:e9:cd:95:01:8f:05:01:ad:
7b:5a:1a:0a:b2:c5:ed:bf:ca:fa:2a:7c:3f:21:ea:
3f:4d:aa:5c:55:d8:e1:26:d0:69:b3:67:35:41:1f:
fa:62:7e:03:bf:c7:f1:bd:bf:51:cb:15:8f:92:fd:
a2:40:69:74:7e:94:6a:19:a8:ac:99:8b:42:11:cd:
41:04:2f:85:4d:d5:bc:d9:a2:be:f0:7e:ba:59:8d:
c2:f8:26:29:cc:31:79:88:6f:ff:bb:f1:8a:25:a8:
db:7d:28:42:8c:48:c1:1b:e2:62:5e:79:a4:f4:d8:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1D:0D:FE:9E:EF:F2:36:36:97:B9:3C:02:E9:99:AA:57:91:CE:A8
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d196da1b251300264f6496a01896e8d9e4f76795.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.53.0/24
191.96.55.0/24
Signature Algorithm: sha256WithRSAEncryption
85:a0:4e:a2:e7:e6:03:ec:0b:f1:18:6a:06:c3:4e:40:c9:d3:
e7:bd:34:81:f5:c1:8e:90:a0:26:5c:b4:aa:7d:ee:22:8d:c5:
b2:cf:65:b5:af:b4:62:8b:85:63:3d:49:42:91:11:1c:61:2b:
ff:28:3c:47:13:22:c5:26:1f:80:f9:09:77:fd:54:c6:46:17:
96:07:70:d4:75:48:78:6b:c8:10:0f:e7:bb:28:5f:c2:b8:f8:
7d:a5:32:a7:6b:77:11:9e:7f:c8:74:bc:84:2b:55:17:f2:30:
ec:6c:40:1c:33:08:96:91:a3:7e:8c:2a:5f:c6:68:55:9d:36:
f0:fe:33:30:5e:40:1d:51:d3:eb:f1:42:a2:fa:3f:ef:43:d7:
fc:da:7d:65:4d:84:a5:11:a6:af:2b:0d:1b:32:28:a5:5f:15:
72:f9:cf:ab:19:60:b4:8b:df:ac:b4:18:87:b2:af:45:dc:b6:
34:f0:9c:b9:c4:f5:cf:e7:14:28:fd:6c:91:b1:64:d6:21:a7:
6c:ff:8b:61:c9:13:14:3b:bb:39:35:fd:da:b1:61:91:5e:f0:
44:80:a4:52:16:47:49:f8:80:a7:40:24:c2:bc:86:94:f7:bf:
bc:25:2a:8c:85:b3:75:d8:39:d1:6c:c8:02:59:ab:29:7f:86:
b8:b6:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org