Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/60f31f5815f30493627d31a7d858682d9d99daed.roa
File: 60f31f5815f30493627d31a7d858682d9d99daed.roa (raw, json)
Hash identifier: 4Mv36r1wFUe1D5ejYjhAWQJhnEa6VkMwPCm+LDXeN9I=
Subject key identifier: 39:AC:69:70:1F:9A:88:58:1F:80:43:4E:4F:33:CF:19:14:E5:59:27
Certificate issuer: /CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Certificate serial: 277AAC
Authority key identifier: 81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/60f31f5815f30493627d31a7d858682d9d99daed.roa
Signing time: Tue 07 Nov 2023 16:00:47 +0000
ROA not before: Tue 07 Nov 2023 16:00:38 +0000
ROA not after: Tue 07 Nov 2028 16:00:38 +0000
asID: 262932
IP address blocks: 190.114.104.0/21 maxlen: 24
190.114.104.0/21 maxlen: 24
190.114.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2587308 (0x277aac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce
Validity
Not Before: Nov 7 16:00:38 2023 GMT
Not After : Nov 7 16:00:38 2028 GMT
Subject: CN=60f31f5815f30493627d31a7d858682d9d99daed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:3b:77:19:c9:8d:7d:6d:fa:a8:db:4f:d6:
33:ab:25:12:79:4a:81:b2:a0:6b:99:0c:73:a8:e7:
40:44:93:11:8e:41:dd:d8:38:17:5b:bd:05:fd:88:
68:54:5c:3e:5f:14:ed:e5:f2:47:f0:48:2e:8f:95:
6f:58:26:14:46:76:20:2a:fc:66:ef:0b:58:de:58:
19:2d:3f:89:a0:c7:9b:df:c1:a7:e4:07:29:9d:0a:
4f:a1:79:c4:c3:c8:a9:d1:68:9d:95:c8:e1:39:93:
45:ba:e1:c1:07:c4:07:32:59:6d:44:98:ac:8a:cd:
d5:ca:89:dc:ca:ce:83:4e:dc:c2:0b:20:07:1f:1e:
c5:98:55:1d:de:e7:ea:d4:49:84:9f:3a:fc:b5:c5:
82:3e:68:bd:81:20:38:a7:b4:5f:12:79:a1:25:2e:
84:18:ba:60:7a:8d:c0:52:d5:eb:76:75:17:86:8b:
01:fd:8b:0f:3c:80:0d:fd:5d:ad:0a:1c:f8:2a:93:
00:69:07:03:0a:9c:30:fa:af:db:38:78:03:de:57:
21:d7:1f:c0:cd:09:6e:4a:a0:98:41:8a:a2:f6:ab:
75:7b:e4:e1:ef:d9:86:34:c5:20:67:a2:77:40:1c:
72:59:88:38:74:bc:43:b2:75:60:3d:b4:9c:43:92:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AC:69:70:1F:9A:88:58:1F:80:43:4E:4F:33:CF:19:14:E5:59:27
X509v3 Authority Key Identifier:
keyid:81:2B:26:72:FD:7E:1F:C6:DD:07:A5:C3:F7:2C:0A:C0:C8:EB:AC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/60f31f5815f30493627d31a7d858682d9d99daed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/b4e4e225e8b14e2e1c7420fb4cd2fad1a009e2ce.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.114.104.0-190.114.127.255
Signature Algorithm: sha256WithRSAEncryption
73:db:99:64:09:c0:cc:ae:f9:fe:2b:a5:41:4f:21:a7:8e:99:
95:30:64:e3:fa:3e:4d:68:96:78:49:76:1e:60:43:fb:5f:21:
f4:85:32:7f:2e:5a:f5:7a:e7:5f:91:b0:b0:4e:06:76:37:5f:
0a:48:eb:87:c4:2a:9f:4c:b4:ae:9f:45:50:ad:88:ec:a7:c7:
71:3c:05:ce:f9:14:aa:c5:05:a7:ee:e6:37:73:11:e7:c3:9e:
39:bf:66:9c:0d:07:d6:0f:15:1b:b6:83:df:d1:69:c0:a9:b3:
24:c9:d0:a5:01:c7:9f:8c:65:15:b2:dd:80:84:95:b6:43:ad:
d2:06:9d:e7:0c:0b:c8:a1:6d:8a:59:eb:d4:a7:4c:be:9d:49:
8a:57:db:ef:fc:aa:3d:1c:4e:65:2a:d9:f2:a4:2d:39:19:86:
b7:21:d8:73:b8:fb:2c:c1:e4:c6:dc:87:76:cd:c6:78:83:84:
fa:4d:3c:cb:17:20:a1:60:ec:01:37:c5:9d:83:0a:12:34:97:
d5:d5:34:8e:2c:49:5c:4c:52:18:e1:33:be:71:f6:2f:57:f1:
22:f9:8f:64:b2:18:66:9e:77:7d:1a:95:5b:42:17:f1:b6:e1:
ae:ba:68:88:56:ab:c4:3b:d4:12:bb:f4:d0:5e:b8:73:27:c9:
14:20:0d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 15:45:01 2023 by rpki-client on console-ams.rpki-client.org