Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b51197c40c2db6f894856712b3ba452715518e37.roa
File: b51197c40c2db6f894856712b3ba452715518e37.roa (raw, json)
Hash identifier: MQhOu29kcxtK7J8fk2lZ1grMjiY1Ibuh8KlV/9BG0vo=
Subject key identifier: AA:D8:3F:FC:47:3E:A4:2C:A2:0D:BB:9B:F4:9A:63:0A:4B:BF:B7:B5
Certificate issuer: /CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Certificate serial: 194BC7
Authority key identifier: F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b51197c40c2db6f894856712b3ba452715518e37.roa
Signing time: Fri 01 Mar 2024 13:07:40 +0000
ROA not before: Fri 01 Mar 2024 13:07:40 +0000
ROA not after: Sun 01 Mar 2026 13:07:40 +0000
asID: 271773
IP address blocks: 190.13.195.0/24 maxlen: 24
190.13.192.0/24 maxlen: 24
190.13.193.0/24 maxlen: 24
190.13.194.0/24 maxlen: 24
190.13.196.0/24 maxlen: 24
190.13.197.0/24 maxlen: 24
190.13.198.0/24 maxlen: 24
190.13.199.0/24 maxlen: 24
190.13.200.0/24 maxlen: 24
190.13.201.0/24 maxlen: 24
190.13.202.0/24 maxlen: 24
190.13.203.0/24 maxlen: 24
190.13.204.0/24 maxlen: 24
190.13.205.0/24 maxlen: 24
190.13.206.0/24 maxlen: 24
190.13.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1657799 (0x194bc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Validity
Not Before: Mar 1 13:07:40 2024 GMT
Not After : Mar 1 13:07:40 2026 GMT
Subject: CN=b51197c40c2db6f894856712b3ba452715518e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:7e:44:e5:aa:1a:99:b0:f8:fa:93:db:88:
48:4c:0d:1d:27:c5:90:87:1a:64:45:d6:e1:30:b4:
b2:6b:d4:ac:69:87:78:56:b1:43:bf:98:97:1c:bc:
f8:82:c8:91:8c:68:d5:dc:12:3b:bd:68:f7:de:6d:
66:7d:3c:92:5a:dd:a9:32:9a:4f:46:57:fa:dd:15:
df:94:2c:6b:bd:2b:36:c8:01:49:b3:e0:40:83:aa:
f4:36:3b:8d:fc:a7:44:cc:35:ab:8e:88:ae:58:6f:
28:cf:d5:ed:f2:77:89:1d:43:b0:72:84:31:47:4f:
1e:69:e0:f2:fb:eb:82:35:e6:71:a5:99:c8:3d:04:
45:57:5a:c6:36:b4:83:0b:01:5c:59:8e:0c:38:cb:
4f:f3:6c:07:a9:e8:27:b8:fc:32:51:51:bb:2e:0c:
02:97:3e:af:2b:ae:82:72:02:38:db:ef:18:c6:9e:
1b:21:35:01:c8:5b:96:c9:a5:58:70:36:74:28:83:
61:a5:f6:05:de:57:74:07:26:9d:98:93:44:6f:5d:
5e:0e:5a:c4:60:9e:f7:86:04:cb:0c:c8:b6:00:7a:
25:f1:2f:0f:2d:40:d3:51:3c:d6:4d:1a:16:ed:66:
c5:8e:0f:e0:54:c6:6a:81:10:0a:3d:37:1f:ec:8a:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D8:3F:FC:47:3E:A4:2C:A2:0D:BB:9B:F4:9A:63:0A:4B:BF:B7:B5
X509v3 Authority Key Identifier:
keyid:F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b51197c40c2db6f894856712b3ba452715518e37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.13.192.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:f3:25:40:0b:71:71:22:c5:18:7e:a6:e1:f8:4c:79:71:61:
06:a2:a3:c6:49:24:74:a3:fc:0b:7b:05:c1:bb:bb:b2:83:97:
c6:d9:ce:0f:03:0b:cc:10:eb:8b:85:a1:87:bf:97:ac:16:b0:
e2:fd:89:23:c7:42:db:33:71:ad:46:18:d1:a7:5a:35:cb:30:
0c:19:05:df:80:e9:76:8a:88:7e:f7:8f:79:a0:a8:b0:8a:80:
d2:be:56:32:39:6d:8d:32:a3:85:56:3a:54:e4:12:ff:a4:70:
f6:d2:b0:e4:26:7d:2a:06:1e:24:98:c9:40:30:e0:34:55:da:
0e:aa:5f:42:e6:d4:c7:19:96:48:6b:1e:8e:79:b1:88:6c:63:
24:69:ff:fa:f3:a3:35:3f:8a:b4:78:8c:16:f8:ba:e9:ca:bf:
cb:b2:b0:63:cc:27:29:a7:30:d0:10:1a:ae:7c:43:72:28:3c:
86:2f:1e:94:85:ca:8e:6f:07:10:a8:61:29:2c:ec:d7:54:ad:
a2:4d:10:e5:dc:57:f7:e1:f7:b2:4a:e2:32:23:8b:88:d3:6d:
ff:40:7a:4b:30:74:c4:66:06:a0:f3:a5:6d:c4:d6:4d:c2:25:
cd:93:fc:dd:f9:45:4b:6c:ac:4b:d1:8c:bb:66:d7:be:17:7e:
51:71:28:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org