Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/824f4560877841188fc1b50bad24973042a35295.roa
File: 824f4560877841188fc1b50bad24973042a35295.roa (raw, json)
Hash identifier: 3QQI+GPaHG1tkMxTsVSkNORW3EpWfTX9urGnSQfho1I=
Subject key identifier: 4E:3B:E9:D7:6B:6A:4F:22:3E:88:D3:5D:61:CE:E7:58:5A:3C:8D:60
Certificate issuer: /CN=42b08b0342f4f7f7c4e44054026d23d7568373f6
Certificate serial: 138969
Authority key identifier: 1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b08b0342f4f7f7c4e44054026d23d7568373f6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/824f4560877841188fc1b50bad24973042a35295.roa
Signing time: Wed 07 Jun 2023 16:11:50 +0000
ROA not before: Tue 06 Jun 2023 16:11:50 +0000
ROA not after: Sat 07 Jun 2025 16:11:50 +0000
asID: 270110
IP address blocks: 189.85.100.0/22 maxlen: 24
2806:3b1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1280361 (0x138969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b08b0342f4f7f7c4e44054026d23d7568373f6
Validity
Not Before: Jun 6 16:11:50 2023 GMT
Not After : Jun 7 16:11:50 2025 GMT
Subject: CN=824f4560877841188fc1b50bad24973042a35295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ea:0f:10:ab:32:21:ce:a4:9d:7b:01:ff:7a:
7b:cf:c1:e6:93:92:20:e9:0b:9c:32:a3:83:80:07:
98:42:b5:fb:10:f2:fa:77:94:e8:02:85:fa:0f:75:
04:e5:af:88:20:63:64:17:74:59:22:4d:01:17:3e:
02:57:58:ad:c6:1e:9c:14:b3:d7:97:19:20:c4:72:
86:8c:d2:b3:a9:08:2d:80:fb:40:ef:77:3e:14:b1:
ea:43:2d:ae:0a:41:6a:9c:20:de:39:cb:5d:51:55:
77:12:ea:e2:6e:19:e9:18:c7:7d:e0:73:d8:cc:a8:
4f:e0:85:cf:98:b7:0e:be:a1:45:32:c4:b2:59:70:
ca:6e:eb:58:f3:ad:50:c5:00:c0:4a:a7:a5:5e:66:
75:f9:0a:79:2c:77:a2:93:31:6b:87:ea:4b:4b:64:
73:0e:98:ed:77:99:45:7f:71:ce:7e:94:52:f5:b6:
cf:c8:89:2d:50:86:c7:3c:78:1a:31:19:53:19:6b:
10:b5:23:b2:5e:6f:dd:24:ed:35:6e:3f:f4:a8:ed:
f9:8d:e7:8a:dc:d4:88:8c:54:52:26:1c:81:da:5a:
13:47:9a:db:d2:a7:40:83:29:ed:99:06:21:1c:b9:
13:88:49:d1:d6:1c:24:cb:a7:ee:82:71:ec:14:a4:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3B:E9:D7:6B:6A:4F:22:3E:88:D3:5D:61:CE:E7:58:5A:3C:8D:60
X509v3 Authority Key Identifier:
keyid:1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b08b0342f4f7f7c4e44054026d23d7568373f6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/824f4560877841188fc1b50bad24973042a35295.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/42b08b0342f4f7f7c4e44054026d23d7568373f6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.85.100.0/22
IPv6:
2806:3b1::/32
Signature Algorithm: sha256WithRSAEncryption
2e:30:e1:3e:72:ca:9e:9f:9c:fe:e5:44:42:d5:1a:83:cf:ba:
05:88:98:79:f2:97:83:c0:0f:51:3a:3b:b6:7d:51:13:c9:9d:
ee:38:72:48:84:08:84:db:60:d7:00:84:a4:82:cb:76:7d:b3:
b7:37:a2:8a:b0:0f:01:18:71:21:94:1d:3b:e0:e9:48:25:e7:
dd:04:12:3c:dc:37:27:ef:f5:3a:6f:f5:05:a9:7c:f1:e6:85:
95:74:f1:3e:00:c9:f1:87:bf:34:ab:3e:94:14:ef:53:81:23:
93:57:d8:06:44:d4:bd:ba:f7:98:df:ad:f3:a3:63:33:91:7e:
b9:40:68:07:0d:89:cc:a7:af:0a:2b:05:cf:b3:e9:98:65:16:
b8:4e:6d:2f:0d:f7:56:88:18:47:88:3c:d9:57:d8:d6:2d:a6:
3f:b9:97:cf:5a:a9:1f:92:e5:ac:07:63:f7:40:c5:a4:58:f4:
f7:f0:df:16:17:13:af:fc:1b:8e:74:c5:c9:20:d3:a9:ae:e7:
b1:17:1f:24:10:41:31:57:f6:f2:eb:8c:ff:26:9c:f4:e0:76:
9a:ae:55:f9:ad:54:f1:72:e2:f6:9c:2e:2e:0c:d3:8e:23:2b:
59:53:03:d3:84:1b:96:57:66:0c:5f:b2:61:41:45:36:a3:2d:
4c:fd:82:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org