Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/20afc8d4e3f010903932f8f74e087e2d71714e1b.roa
File: 20afc8d4e3f010903932f8f74e087e2d71714e1b.roa (raw, json)
Hash identifier: ZKvA8RN/JMNecxlicBVE+KfIuL0njSqiaNGcB9fwcTQ=
Subject key identifier: 62:C6:03:44:E2:7C:BC:8C:51:37:13:E7:35:89:9D:90:62:75:27:5F
Certificate issuer: /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial: 24D98E
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/20afc8d4e3f010903932f8f74e087e2d71714e1b.roa
Signing time: Wed 11 Oct 2023 20:35:27 +0000
ROA not before: Tue 10 Oct 2023 20:35:26 +0000
ROA not after: Sat 11 Oct 2025 20:35:26 +0000
asID: 262202
IP address blocks: 186.159.218.0/23 maxlen: 24
186.15.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414990 (0x24d98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Validity
Not Before: Oct 10 20:35:26 2023 GMT
Not After : Oct 11 20:35:26 2025 GMT
Subject: CN=20afc8d4e3f010903932f8f74e087e2d71714e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d2:8f:86:c2:ad:a2:d5:00:f5:b1:ba:89:36:
a1:42:22:a5:b0:d9:51:cb:6a:b6:70:f5:b8:9f:c8:
4f:9f:5a:bb:2e:45:5b:ac:aa:c4:19:0e:bb:2e:3b:
63:0e:58:33:55:b6:f2:25:f4:a8:e3:bd:f5:f3:04:
9c:74:9c:35:ac:1c:ba:3d:b8:3e:2e:50:13:04:7c:
cd:17:cf:6c:93:e1:e7:1d:8a:18:8d:bd:ff:b9:e1:
df:22:a3:24:cd:11:b6:71:d4:27:42:32:91:d0:4c:
84:cb:04:14:ab:d9:52:97:4f:b5:b8:2b:aa:2c:70:
93:71:ba:cb:b8:a8:7a:a8:cd:8a:46:e6:4f:2f:e2:
45:dd:ff:48:17:84:17:fc:cf:8e:9d:f5:ac:b3:ea:
95:1a:ef:cb:65:a6:44:b4:be:90:35:90:39:c0:14:
e8:07:49:ac:f2:b5:ad:54:3c:51:79:cc:a1:ff:9d:
47:9e:b0:a6:5f:ad:f4:d1:5e:a5:25:b5:1c:12:6d:
41:dd:d6:61:5b:28:38:79:73:3f:e8:68:b2:2e:26:
79:12:48:a8:d7:7c:31:b0:12:66:17:a4:08:c6:88:
b1:9d:b1:a6:16:f5:0e:34:31:8e:2a:67:1a:1f:3b:
38:3f:63:56:9f:7b:b0:20:d5:88:ae:8c:1e:b6:3a:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C6:03:44:E2:7C:BC:8C:51:37:13:E7:35:89:9D:90:62:75:27:5F
X509v3 Authority Key Identifier:
keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/20afc8d4e3f010903932f8f74e087e2d71714e1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.15.184.0/21
186.159.218.0/23
Signature Algorithm: sha256WithRSAEncryption
85:6a:83:c4:0f:9b:fc:99:20:a2:44:a9:9f:a6:09:41:b3:e6:
f5:dc:d6:0c:4f:a3:0a:c8:c0:05:c8:a1:44:c4:fe:63:9c:b8:
02:82:67:43:4b:08:d1:dd:ae:b8:68:da:0c:c3:a8:2c:83:c1:
7f:5c:bf:ad:e0:49:e4:e4:ca:3f:a8:1c:d6:a3:8c:bb:91:c5:
66:1a:0a:7e:f8:d9:fd:e6:b5:c0:6c:d1:b1:97:ca:36:bd:69:
b4:05:e6:81:df:18:0f:32:ea:05:97:f0:f1:b1:12:a6:5b:b2:
9c:79:9a:8e:5f:7c:14:df:60:42:f7:9f:13:49:ec:76:26:d8:
d1:43:1f:b3:3b:f5:2d:2a:b0:e4:2b:92:92:83:35:cf:7f:f2:
5e:50:9c:a1:43:d3:a0:52:16:6c:6c:ee:5a:94:50:28:0f:67:
22:cc:ab:43:0e:5c:f3:d3:d5:78:b1:d4:86:33:60:13:98:7f:
c8:e2:8b:b1:03:18:e6:d2:a8:71:8c:c6:af:2e:40:c0:29:3e:
d6:a1:da:32:85:18:76:19:83:1c:6d:36:aa:25:dc:e2:ce:48:
f0:23:c5:24:b2:25:04:6d:e3:a8:53:bf:bb:f1:b3:bd:be:fb:
a1:95:fe:76:32:74:d1:5c:e9:d5:38:27:b4:e9:f7:f3:12:fa:
97:8a:ec:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org