Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/028a024239063776fd279a355deac4328cda3ca7.roa
File: 028a024239063776fd279a355deac4328cda3ca7.roa (raw, json)
Hash identifier: YBlXp5CIa6ubljCGwrOTXiSyK98K/ZY/kXS4yegUeAM=
Subject key identifier: 04:FE:78:93:66:8C:B6:3C:96:C5:E1:6B:18:96:B5:13:E5:DC:15:50
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 11F3D3
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/028a024239063776fd279a355deac4328cda3ca7.roa
Signing time: Wed 29 Nov 2023 14:55:02 +0000
ROA not before: Wed 29 Nov 2023 14:55:02 +0000
ROA not after: Sat 29 Nov 2025 14:55:02 +0000
asID: 262231
IP address blocks: 186.38.37.0/24 maxlen: 24
186.38.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1176531 (0x11f3d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 29 14:55:02 2023 GMT
Not After : Nov 29 14:55:02 2025 GMT
Subject: CN=028a024239063776fd279a355deac4328cda3ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:a8:c5:f6:13:ff:ed:d0:c8:a8:5e:f5:43:
65:c2:65:90:d5:5b:92:1f:6b:4b:53:1b:c6:8c:a7:
ed:8d:b7:31:61:89:94:66:45:c8:80:b7:b8:e1:62:
bf:d0:f3:4e:ad:18:01:b9:44:84:4e:8e:d8:25:0e:
b6:34:d1:f5:bd:e8:0a:3b:b2:0c:19:a7:18:b1:83:
7c:00:4d:57:be:c5:e1:4d:09:b3:d0:f9:e1:22:20:
45:5a:e6:e0:c4:6d:1e:2d:80:24:ab:22:59:02:95:
51:f7:16:c7:85:b2:16:8e:35:0b:c6:54:2e:40:02:
d6:be:10:c0:76:20:fe:92:dd:c1:92:e0:36:f3:87:
cd:72:b3:8f:8a:c5:db:ee:5e:c4:67:f9:ce:ef:75:
87:70:2c:21:86:02:18:6e:aa:51:40:36:48:1e:f2:
8b:5a:35:38:48:16:e4:f3:45:50:3c:e0:96:b2:85:
78:ea:a8:bd:27:98:82:ba:9c:04:9b:a0:2a:0d:28:
19:11:20:3e:77:87:9f:b0:13:24:18:ae:5f:a5:94:
a2:ac:a2:a8:08:7d:25:23:9b:de:c5:7f:a6:e1:d1:
ae:1b:a0:46:83:03:bb:7d:b6:0b:de:db:8a:1f:a0:
f9:4a:a9:2d:dc:1a:e7:65:ee:45:98:58:44:c9:c5:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FE:78:93:66:8C:B6:3C:96:C5:E1:6B:18:96:B5:13:E5:DC:15:50
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/028a024239063776fd279a355deac4328cda3ca7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.38.37.0/24
186.38.105.0/24
Signature Algorithm: sha256WithRSAEncryption
72:52:bc:d9:78:64:21:0e:bd:a9:f9:ee:60:ba:87:99:1c:8a:
75:c2:fb:5a:7e:a4:61:3f:c5:c0:9c:f6:00:ec:16:eb:f2:29:
62:d7:78:09:2a:c0:2d:01:7d:5f:d1:41:79:58:37:f6:29:b1:
54:db:42:a2:e6:58:2b:43:1f:f7:53:ff:98:16:13:f3:85:60:
c5:b1:6f:f4:7c:40:92:8e:41:61:b1:3a:3c:f7:d3:eb:6a:a0:
18:49:c7:35:eb:22:c3:8e:9a:71:de:87:02:5e:e6:ee:23:37:
2e:88:a6:2e:40:de:0c:64:d5:86:77:6c:31:b6:42:19:87:ef:
0b:99:79:38:f2:b0:ef:15:84:7d:92:52:31:77:5e:63:a8:81:
c7:85:e5:bd:99:ec:de:54:91:d6:d7:92:7a:65:70:7c:2c:24:
fd:cc:53:76:b3:11:74:d1:2a:01:75:7a:f5:61:56:ba:c4:bd:
90:ca:35:d7:eb:75:6d:d1:df:77:41:5e:88:7a:49:13:a7:19:
d0:66:39:93:16:be:87:b4:07:4a:18:a3:cf:fd:83:26:53:c5:
50:d2:a9:2f:3c:ec:ca:6e:c2:d3:74:de:b4:ad:8e:2b:3c:69:
5d:5d:ef:85:e1:84:e5:61:e4:bd:02:38:ad:78:63:fd:9b:cc:
f4:03:5d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org