Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/a73cb5aa269274ad96a5ea7281455cf0b404d52e.roa
File: a73cb5aa269274ad96a5ea7281455cf0b404d52e.roa (raw, json)
Hash identifier: 7SqT3DIBLrL7Ajbr5Lj4ngMAuFFp9ugv51qredvwpVg=
Subject key identifier: 38:43:F0:BC:1B:12:47:E9:45:FF:1B:38:DC:AB:E1:3E:D9:99:6C:8D
Certificate issuer: /CN=5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2
Certificate serial: 01ED97
Authority key identifier: 5F:8C:67:63:71:E5:A8:C8:CA:7A:33:15:D7:E9:73:D0:07:D9:8A:AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/a73cb5aa269274ad96a5ea7281455cf0b404d52e.roa
Signing time: Mon 10 Jul 2023 15:19:12 +0000
ROA not before: Sun 09 Jul 2023 15:19:12 +0000
ROA not after: Thu 10 Jul 2025 15:19:12 +0000
asID: 61468
IP address blocks: 190.103.191.0/24 maxlen: 24
2801:18:5800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126359 (0x1ed97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2
Validity
Not Before: Jul 9 15:19:12 2023 GMT
Not After : Jul 10 15:19:12 2025 GMT
Subject: CN=a73cb5aa269274ad96a5ea7281455cf0b404d52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ef:a4:2d:c8:9f:bc:09:75:88:b7:05:38:6b:
a3:21:be:00:cc:23:e7:ff:88:8a:91:31:1f:b4:51:
0a:d5:7b:71:ca:02:61:0b:a7:a7:4f:68:74:af:60:
03:a4:0d:e7:50:08:db:98:3f:ad:91:82:be:7b:58:
f7:a7:fa:57:29:67:18:8b:88:a5:da:7e:ee:6a:c1:
a0:2c:96:ad:1e:a0:d9:d5:27:46:82:26:b8:18:c2:
1f:82:9f:83:10:8b:dd:3b:62:3a:b7:a7:ec:72:bf:
cf:32:ea:ed:78:7d:3f:d4:48:45:cc:36:15:c0:e1:
00:43:59:51:1a:e0:0d:cb:cd:82:0d:1d:a6:40:51:
08:d6:d2:87:80:51:d5:5c:34:80:a1:ac:39:91:33:
60:90:61:1c:65:b4:e5:63:2e:0a:1a:6c:97:e1:6c:
06:d2:c8:87:2e:de:99:6a:85:32:b9:ba:69:58:8c:
f4:71:18:41:0f:fa:d9:4d:d3:40:bb:72:64:e3:c1:
57:04:5b:2d:3a:6a:65:8c:54:ba:65:17:5d:d8:fa:
39:72:11:80:85:32:df:e0:30:39:fd:50:eb:6f:66:
a5:c7:f1:2a:ff:86:23:41:38:9b:16:d4:6e:8a:18:
c5:86:f0:f7:68:41:68:0e:ee:e4:e7:10:1c:15:f3:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:43:F0:BC:1B:12:47:E9:45:FF:1B:38:DC:AB:E1:3E:D9:99:6C:8D
X509v3 Authority Key Identifier:
keyid:5F:8C:67:63:71:E5:A8:C8:CA:7A:33:15:D7:E9:73:D0:07:D9:8A:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/a73cb5aa269274ad96a5ea7281455cf0b404d52e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.103.191.0/24
IPv6:
2801:18:5800::/48
Signature Algorithm: sha256WithRSAEncryption
76:2b:46:5f:6f:cf:85:4a:5f:6c:75:36:11:7d:65:ba:1f:05:
de:ef:34:e8:7b:05:8d:a5:96:72:21:98:26:04:be:40:b0:e0:
d4:35:c8:e4:8e:2f:9a:7e:75:d8:90:42:e6:0f:1d:e2:40:9f:
85:59:c0:7e:89:b4:95:bf:cb:3b:e5:d8:67:47:94:09:e2:93:
fb:22:a3:c5:43:cc:b1:36:df:7b:ae:8d:d0:ff:4e:26:1c:86:
09:ef:a4:cd:d5:d9:0f:f1:88:81:7f:be:a8:9c:2e:e7:fd:5d:
1a:e7:b2:45:3a:88:d9:b9:8b:a5:1e:8e:90:0a:d6:5c:ad:67:
6a:5c:5d:5c:42:2c:e6:61:66:ae:49:58:a5:98:0c:eb:f4:25:
cb:b6:d3:5f:b9:a5:f3:71:4b:6f:67:23:04:0c:9c:51:2e:cb:
8f:61:4a:f9:9e:20:ce:d6:58:0b:b1:d2:fa:7d:20:e7:26:92:
4e:c2:e2:de:a2:77:7a:6f:6b:58:5f:60:f3:05:e5:88:a0:a9:
33:b8:70:5e:fe:ab:6b:69:20:e2:a9:c8:bb:02:dc:91:d0:70:
6d:1b:9c:a1:63:21:6e:32:fe:80:f1:21:67:97:02:64:f5:e8:
a6:b1:c7:8a:ea:d8:38:2a:3a:c4:81:b7:68:0a:ff:72:a5:a9:
20:58:3b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org