Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/0108ef76a7dc9854b6ee85ef74db33a83e57bb0f.roa
File: 0108ef76a7dc9854b6ee85ef74db33a83e57bb0f.roa (raw, json)
Hash identifier: HNRT9o0R8TSPxyvBr22ttlsPhYkhIyRU/OprSIaPJ94=
Subject key identifier: 4A:F7:FD:F5:12:59:2D:AD:9C:7C:2D:6D:90:2A:F8:5A:D1:F2:3C:0F
Certificate issuer: /CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
Certificate serial: 26E872
Authority key identifier: 44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/0108ef76a7dc9854b6ee85ef74db33a83e57bb0f.roa
Signing time: Thu 18 Jan 2024 12:32:03 +0000
ROA not before: Thu 18 Jan 2024 12:32:03 +0000
ROA not after: Sun 18 Jan 2026 12:32:03 +0000
asID: 60022
IP address blocks: 190.121.242.0/23 maxlen: 24
190.121.248.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2549874 (0x26e872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
Validity
Not Before: Jan 18 12:32:03 2024 GMT
Not After : Jan 18 12:32:03 2026 GMT
Subject: CN=0108ef76a7dc9854b6ee85ef74db33a83e57bb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:1b:ae:d8:a8:ea:01:43:f0:59:6c:38:e3:
fe:71:c2:c4:b5:91:86:81:66:a7:4b:79:9c:5f:c4:
22:05:85:1a:44:7e:cc:d0:3a:c4:94:7d:1e:f4:c9:
03:51:79:7a:64:74:db:ce:ac:03:df:fd:41:3d:c0:
dd:c1:cc:13:ec:01:02:12:04:3d:fa:52:85:c2:94:
04:10:c9:37:a7:e4:27:b2:13:f5:3b:89:17:c7:80:
a1:2b:ca:52:57:bd:df:95:56:df:d5:60:6c:a3:8f:
b9:47:a6:32:eb:12:0c:82:fc:a4:e5:4a:52:5f:10:
c9:61:09:cd:0f:a9:d3:a9:4d:9b:92:0d:52:22:ce:
a1:be:30:92:16:29:34:02:2c:26:e7:1c:03:6b:fc:
e1:d4:77:29:fe:d3:a0:8b:99:fe:23:80:aa:95:04:
b8:2f:b1:16:d7:65:8c:bf:cd:bd:7d:97:a5:39:c3:
bc:1d:70:4e:1c:25:c2:23:f5:5c:e8:ed:cd:9e:2b:
2e:bb:b4:74:3f:8d:20:dd:64:03:f1:93:3f:c6:c8:
ab:31:0b:67:b4:e1:e9:c1:71:5c:38:ca:a0:02:84:
af:d6:0f:27:3b:b3:c9:4b:d3:26:d3:be:31:f3:23:
3d:70:c5:26:65:49:d6:bf:50:eb:10:18:74:84:ad:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F7:FD:F5:12:59:2D:AD:9C:7C:2D:6D:90:2A:F8:5A:D1:F2:3C:0F
X509v3 Authority Key Identifier:
keyid:44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/0108ef76a7dc9854b6ee85ef74db33a83e57bb0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/fcc25171c7921fdcd117ca7096ecea5ba6358873.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.121.242.0/23
190.121.248.0/21
Signature Algorithm: sha256WithRSAEncryption
58:63:fa:17:07:8c:cc:3f:69:94:e5:d7:86:40:5a:5a:04:44:
11:e0:f5:73:c8:36:9b:94:2b:82:bf:82:ea:87:43:19:ff:1c:
d9:fb:97:84:30:89:6b:b5:0e:d5:53:bc:b2:bb:d1:eb:b2:a1:
23:ae:d3:5a:56:c2:b5:8b:b8:be:d3:f7:35:ba:14:e8:29:71:
38:bb:e5:61:1e:0e:a7:4d:f0:d6:d9:7e:35:f7:c7:ee:35:6f:
5e:d3:3e:96:b8:f2:a8:b3:f7:31:90:8b:40:39:23:c9:f0:91:
c4:f6:79:48:cf:bc:31:76:0a:8e:0a:07:bd:51:ee:f4:69:96:
d9:d6:48:01:79:1e:c2:72:33:20:c9:a8:59:af:cd:a8:de:85:
03:ee:ad:f8:7b:d4:4e:15:20:73:96:2b:e3:a8:23:56:97:95:
bb:0a:98:51:9e:6a:44:cb:0a:56:9a:6b:cf:60:cb:28:4a:46:
05:1f:5b:ae:c8:48:7f:eb:7c:58:e0:6b:50:fe:12:5b:47:e0:
ca:2c:68:c0:95:36:37:16:d2:95:0e:cd:de:86:7e:f7:87:f0:
31:6e:c6:61:b3:46:ac:91:4e:bb:55:f4:de:d2:ec:65:08:17:
23:b1:39:3d:20:0b:bb:57:9a:f0:f4:59:e2:04:29:dd:6d:72:
f4:b8:a9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org