Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/78b2f03a6f41c59ed0c42cd4be7ab06209f36d39.roa
File: 78b2f03a6f41c59ed0c42cd4be7ab06209f36d39.roa (raw, json)
Hash identifier: tGsVYo+4uv7NOvJxeT9CWgFZB+BfTmeaYufoYLJJQqI=
Subject key identifier: 4A:8B:03:77:0F:3F:96:D2:07:F3:ED:BA:94:8A:10:BE:A8:80:DA:18
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 126BBF
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/78b2f03a6f41c59ed0c42cd4be7ab06209f36d39.roa
Signing time: Wed 29 Nov 2023 21:10:59 +0000
ROA not before: Wed 29 Nov 2023 21:10:59 +0000
ROA not after: Sat 29 Nov 2025 21:10:59 +0000
asID: 264830
IP address blocks: 186.56.71.0/24 maxlen: 24
186.56.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1207231 (0x126bbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 29 21:10:59 2023 GMT
Not After : Nov 29 21:10:59 2025 GMT
Subject: CN=78b2f03a6f41c59ed0c42cd4be7ab06209f36d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:45:18:71:ff:36:2b:10:17:4d:f1:66:bc:
15:79:59:8a:15:7c:bd:2a:a1:24:00:80:e2:75:39:
75:05:86:1e:6d:c5:c3:bb:64:ef:24:c7:eb:a8:d7:
40:a7:48:35:ac:b4:67:dc:45:39:ba:06:ba:06:31:
99:10:5f:28:af:c8:74:f5:6b:e2:d7:89:0e:7e:74:
70:71:07:2b:6c:ec:31:60:2b:07:a7:dd:f7:a5:be:
98:13:da:76:80:5e:ad:25:8d:e2:80:f0:c3:93:fe:
9a:ef:15:5d:e7:0c:10:6a:e2:e0:fd:73:64:2a:37:
f0:0d:73:30:c2:dd:92:9f:e3:b5:ce:85:dd:44:1f:
d7:72:25:95:80:4a:b0:b4:2d:2d:a6:7f:38:2b:e3:
fb:b4:76:a3:81:25:1d:09:39:22:1b:c9:48:e1:56:
a8:10:a2:b1:e2:cf:b5:e2:cd:22:51:47:ac:e3:f4:
ea:59:ff:10:38:fd:49:a8:0c:68:5a:53:91:de:e7:
3d:b3:a8:e7:d0:8d:26:eb:36:27:31:a7:0f:a8:c9:
0f:ad:1f:8f:c3:8d:e7:92:74:f1:16:7a:c4:40:7a:
d3:46:49:23:37:a4:72:5b:b5:36:73:94:93:c1:3f:
3d:f7:ac:cb:99:b8:25:e9:56:38:a8:fe:c3:ba:87:
92:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8B:03:77:0F:3F:96:D2:07:F3:ED:BA:94:8A:10:BE:A8:80:DA:18
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/78b2f03a6f41c59ed0c42cd4be7ab06209f36d39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.56.71.0-186.56.72.255
Signature Algorithm: sha256WithRSAEncryption
0a:0a:8b:9c:4f:33:d8:5d:fc:99:90:9f:fa:a1:61:dc:f0:ac:
29:c8:ab:b2:4a:3a:2f:c0:31:43:45:4f:a9:9d:93:1c:38:4b:
a5:e7:87:10:3e:63:e6:70:19:68:d6:50:f3:28:a2:54:0d:d5:
fa:40:65:15:5b:64:1a:2b:13:02:7f:51:11:02:07:76:ee:36:
86:11:f4:4d:d7:a8:c9:84:99:e8:d5:07:86:3a:7d:72:a8:fc:
ff:a1:66:28:eb:da:0d:33:9e:d2:b3:c4:45:c0:81:e5:66:fe:
7e:20:bd:4c:9a:33:ad:0b:61:cd:c1:2a:a9:6e:4f:15:bb:13:
a0:fe:9f:f1:bc:45:3c:1a:a2:75:e0:e4:27:b3:bf:b5:ac:1c:
b5:f4:0f:c5:e1:0b:4a:20:57:74:29:8b:70:03:c0:47:e5:ed:
84:58:14:b3:c8:6b:c5:22:c8:bb:b4:aa:c2:14:12:85:3a:26:
05:47:3d:90:96:d5:2c:5e:13:cf:9c:db:c7:21:b1:2e:21:ca:
a1:86:07:ec:3d:a6:ec:66:a9:5d:50:c4:68:4c:0a:c0:05:05:
a9:3e:b6:dd:13:da:c0:a5:64:2b:f0:d6:41:df:0e:ba:ba:0b:
82:1b:47:9b:7b:62:59:5c:c7:5f:6a:9a:ff:16:26:49:0e:a1:
76:6d:04:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org