Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/207ad937e160ceaf1d91b2bbe642abee7f136dee.roa
File: 207ad937e160ceaf1d91b2bbe642abee7f136dee.roa (raw, json)
Hash identifier: usTyWsDsYYyl5YfcPdUyrqZaL28WChNGTbLrN4dqZik=
Subject key identifier: F7:A3:43:71:D7:18:5A:CF:96:BE:15:FA:EB:47:60:91:A8:83:6F:F4
Certificate issuer: /CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
Certificate serial: 26E4E2
Authority key identifier: 44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/207ad937e160ceaf1d91b2bbe642abee7f136dee.roa
Signing time: Thu 18 Jan 2024 12:32:02 +0000
ROA not before: Thu 18 Jan 2024 12:32:02 +0000
ROA not after: Sun 18 Jan 2026 12:32:02 +0000
asID: 60022
IP address blocks: 190.121.240.0/23 maxlen: 24
190.121.244.0/22 maxlen: 24
2803:1100::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2548962 (0x26e4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
Validity
Not Before: Jan 18 12:32:02 2024 GMT
Not After : Jan 18 12:32:02 2026 GMT
Subject: CN=207ad937e160ceaf1d91b2bbe642abee7f136dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:99:7d:22:42:d9:ff:b7:1d:22:4c:ee:7a:
cd:a8:96:a9:c5:ab:74:6a:16:de:e0:39:6b:2c:be:
79:5d:4e:87:da:c9:23:77:db:a5:95:b7:e1:a0:52:
70:4c:e8:2f:98:9e:fa:bc:f2:23:25:65:92:16:99:
a2:49:c0:70:19:2e:ee:81:8b:5a:8e:6b:aa:d1:ac:
b1:df:4a:01:51:63:2b:10:91:6d:ef:21:ce:19:1d:
58:12:11:4a:d5:f3:24:b7:c1:f2:2a:72:84:d8:83:
e2:da:6f:d5:45:60:d4:bf:53:ab:f0:36:9a:8d:e9:
05:4d:ff:2c:4a:6d:75:51:9b:2c:99:eb:01:4b:24:
6f:0b:0a:c4:37:f6:50:85:43:2e:41:c8:be:2a:07:
9a:b9:2c:f0:2f:c4:05:f0:79:37:a9:0b:35:da:43:
97:6c:10:5b:55:95:1f:47:01:65:a7:4d:2d:57:63:
f4:d9:56:49:bc:3a:19:9c:f2:38:49:72:8e:b0:6d:
86:3a:51:81:54:31:85:c4:99:66:da:28:bf:7c:da:
96:0d:44:7d:1f:7c:c6:0d:41:07:d6:ff:93:89:e4:
8c:32:99:bc:83:1c:12:2d:86:ee:51:d5:12:e2:30:
14:63:ec:0f:24:89:57:23:cc:9d:ea:7a:36:98:39:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A3:43:71:D7:18:5A:CF:96:BE:15:FA:EB:47:60:91:A8:83:6F:F4
X509v3 Authority Key Identifier:
keyid:44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/207ad937e160ceaf1d91b2bbe642abee7f136dee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/fcc25171c7921fdcd117ca7096ecea5ba6358873.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.121.240.0/23
190.121.244.0/22
IPv6:
2803:1100::/32
Signature Algorithm: sha256WithRSAEncryption
8e:b4:cb:4f:d4:0e:da:33:72:cc:2b:1e:7b:d3:f1:b9:42:3f:
52:d6:c6:74:b0:be:9a:02:d2:ec:a0:2d:3d:35:cd:a8:5a:75:
dc:81:21:df:8e:75:4f:fb:23:88:51:f1:0b:a3:ee:3b:30:e1:
ba:ea:26:73:d5:14:fb:91:ff:85:8b:4f:b9:bf:23:fd:19:bf:
8a:dd:d1:97:cd:98:5b:1b:5f:49:1b:5b:a0:ac:66:a6:4c:60:
71:fa:c8:a4:ce:9b:10:e6:30:18:b1:af:5c:ec:ee:97:60:31:
6c:3f:32:4e:02:b9:6f:1d:eb:ef:c8:f5:a2:00:53:95:99:75:
ff:00:22:7b:97:0b:9a:4d:2d:68:e1:1c:9a:2c:0c:d7:13:6a:
31:c1:b4:de:63:e4:3b:4d:c5:ba:74:12:e5:91:ce:ae:28:0e:
78:20:ce:e8:71:77:12:63:33:4a:29:ee:61:5f:f8:44:b7:ce:
dc:eb:99:e4:b3:be:ca:56:e3:73:b8:cc:60:01:3e:17:5e:42:
61:42:f4:9e:0a:43:86:95:a6:b1:28:df:39:d9:56:95:20:b6:
b0:c2:fa:c3:7d:9d:a8:4d:13:98:5f:08:5e:49:5b:f0:e2:0a:
03:34:51:a0:ea:88:e9:73:90:f5:79:7c:9c:5e:42:2d:e6:fc:
48:f6:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org