Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e66332905c7c1049798c53cbe1d684305912846f.roa
File: e66332905c7c1049798c53cbe1d684305912846f.roa (raw, json)
Hash identifier: OJEykU2y6k5S9w9ntthKEtql28PtfwdeVrUtwGx2eGY=
Subject key identifier: 03:C8:93:08:B3:98:AF:22:82:4A:F1:AE:36:DB:1D:73:8E:F8:BD:78
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 12053B
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e66332905c7c1049798c53cbe1d684305912846f.roa
Signing time: Wed 29 Nov 2023 15:02:13 +0000
ROA not before: Wed 29 Nov 2023 15:02:12 +0000
ROA not after: Sat 29 Nov 2025 15:02:12 +0000
asID: 267786
IP address blocks: 186.38.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1180987 (0x12053b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 29 15:02:12 2023 GMT
Not After : Nov 29 15:02:12 2025 GMT
Subject: CN=e66332905c7c1049798c53cbe1d684305912846f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:eb:f6:4f:b5:87:28:b1:b4:fc:3c:fe:07:
f0:cc:44:23:f7:38:a8:95:35:11:9b:1d:82:7b:be:
fa:49:8e:35:1f:9d:6c:65:b8:e8:bf:c9:c1:87:2d:
d4:21:38:0e:28:c7:b9:68:4d:0a:11:9c:6b:cc:51:
78:fe:2e:b0:2d:6d:7a:ea:4f:52:ab:83:51:ea:b4:
60:ab:88:24:57:c5:48:a9:c2:76:cb:c7:b4:bc:cd:
3e:c4:9f:25:1f:4c:44:dd:e9:8a:d5:89:ab:8c:94:
1f:86:8c:42:a0:9b:7a:00:5f:a1:df:a1:38:fa:f5:
3a:3a:e9:fc:de:6a:be:d3:e6:0b:c6:b8:25:27:9f:
52:0c:35:c7:86:ba:2d:01:60:ae:43:ed:e4:60:0c:
20:0d:78:bf:ad:d9:0e:39:82:4b:20:0d:c5:b4:2b:
ce:4a:4f:3b:b1:2f:c0:73:df:79:4d:e5:98:22:90:
24:9f:e5:c0:78:4f:58:b5:2f:bd:56:97:a7:ba:26:
6a:19:27:4e:5c:ac:03:08:17:d6:c7:84:65:f8:cb:
03:17:66:88:cb:e1:c8:2f:21:3d:28:bc:7f:75:c9:
ab:2d:03:34:ff:34:a6:2c:5e:70:d0:71:da:b9:4f:
43:39:78:10:36:d2:00:c7:3e:74:e2:1c:2e:a7:d0:
f9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C8:93:08:B3:98:AF:22:82:4A:F1:AE:36:DB:1D:73:8E:F8:BD:78
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e66332905c7c1049798c53cbe1d684305912846f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.38.99.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6e:17:b0:70:83:69:91:71:44:0e:e3:e0:e5:b5:7a:46:a3:
7c:3a:05:d3:c1:95:c7:bc:99:bf:f0:0f:5a:44:64:5b:91:2f:
2f:a9:a1:f1:82:a7:13:ad:1e:a8:98:88:26:14:e6:0c:1a:18:
ee:2e:6a:36:48:4a:a2:dc:7a:69:22:83:d2:20:8d:5b:47:6e:
fd:05:e2:1b:80:bb:0b:af:da:20:36:e7:08:62:ff:e9:3a:90:
4d:a0:ee:86:df:e8:c3:7c:f1:3a:46:e6:f4:09:db:02:c6:de:
7a:1a:63:d6:7c:2f:1f:ec:13:19:c8:b8:df:52:eb:c6:45:e4:
c3:b7:58:b1:d7:90:8e:42:9e:b5:00:eb:e4:4c:3a:2f:aa:14:
37:db:9f:b4:f3:03:01:85:1b:e5:c0:a3:8a:f0:1c:ec:34:c7:
e6:1d:e1:ac:bd:26:54:ca:fa:33:c0:3c:a5:fa:59:ce:04:31:
91:f7:00:71:73:33:f9:2b:96:57:9c:ec:c2:32:a1:a5:09:a9:
07:d4:ff:74:8e:07:ae:1b:58:dc:fe:66:96:37:c5:e0:b0:fb:
e5:54:4b:b1:cd:ab:79:4b:4f:1a:ce:2f:0c:72:49:79:2a:5a:
a1:2f:93:47:4b:44:3b:e3:78:f7:e9:46:68:46:2f:b4:48:6c:
d1:89:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org