Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ff068ac6a78dc2d164a760432b6d5f66568ad558.roa
File: ff068ac6a78dc2d164a760432b6d5f66568ad558.roa (raw, json)
Hash identifier: u2/FdAMgDmEBLmrVd51hoEfwyhdrsfgp2ZY808Az6/g=
Subject key identifier: 47:EC:83:25:67:95:A1:4B:A0:79:B1:CE:38:4A:72:99:61:7D:7D:45
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 119F4E
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ff068ac6a78dc2d164a760432b6d5f66568ad558.roa
Signing time: Mon 27 Nov 2023 19:51:42 +0000
ROA not before: Mon 27 Nov 2023 19:51:40 +0000
ROA not after: Thu 27 Nov 2025 19:51:40 +0000
asID: 11311
IP address blocks: 186.61.176.0/20 maxlen: 20
190.50.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154894 (0x119f4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 27 19:51:40 2023 GMT
Not After : Nov 27 19:51:40 2025 GMT
Subject: CN=ff068ac6a78dc2d164a760432b6d5f66568ad558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:0b:cc:c6:7f:51:53:b2:63:d0:b1:5d:fc:
7d:4e:b1:c9:9e:00:ce:50:2f:a0:b8:e4:dd:12:36:
4d:0d:7b:89:01:f1:5a:2e:3c:5f:3f:24:5c:89:a6:
82:5b:54:63:cf:ef:8b:e4:36:f8:5d:d2:09:e5:74:
97:47:d6:53:63:66:da:4b:88:18:69:d1:5b:dc:7e:
e7:fc:b6:20:a1:40:e4:cc:d7:04:61:83:6b:96:2c:
c5:d1:9d:1f:a3:23:e0:bf:45:c3:cf:7b:87:12:1d:
b9:7b:25:c8:5c:b4:8c:83:5b:ab:2e:61:04:ca:a9:
4f:ac:fd:c7:d9:50:6a:2b:fc:3c:50:68:42:d8:f0:
3f:61:ca:b6:f0:d6:19:c1:72:f9:fd:9a:3c:50:c2:
7d:7c:26:51:db:87:0d:e1:78:50:8b:23:7a:c4:30:
a3:70:13:3b:9b:02:13:b2:54:17:13:ac:e0:a1:54:
26:25:ad:d8:a8:f5:3f:d9:a3:45:c6:d4:36:f0:3f:
d5:0a:f8:96:c8:ed:68:7d:a8:c1:d4:54:d6:f8:88:
57:4a:eb:c4:a1:c6:e4:42:70:c2:36:25:90:41:31:
96:18:ca:59:eb:23:c7:51:d7:e3:c8:ca:38:bb:4d:
47:f1:86:cb:2c:20:1b:40:95:1e:48:80:48:5e:20:
12:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EC:83:25:67:95:A1:4B:A0:79:B1:CE:38:4A:72:99:61:7D:7D:45
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ff068ac6a78dc2d164a760432b6d5f66568ad558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.61.176.0/20
190.50.176.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:a1:18:ea:2b:c4:6e:35:f9:86:04:ee:7a:16:90:18:c5:81:
4d:1e:29:12:da:11:ad:f4:27:46:b5:ba:e2:5d:86:67:1d:13:
bf:cd:23:57:1e:e6:b5:1a:26:b1:29:bb:b1:22:72:8a:54:d8:
08:9f:13:27:6d:87:e3:a9:36:10:c5:2a:bb:35:1c:d2:af:09:
f5:d7:c1:bd:cf:a9:05:7b:c1:52:03:40:b9:7e:1f:22:85:8e:
62:f3:d8:be:5d:96:43:4e:17:e6:e1:fc:8d:5b:78:a2:32:f3:
0e:28:7b:43:98:0e:8a:d3:e7:bd:f2:75:2b:f8:27:50:c9:07:
87:70:c1:f0:f8:64:a8:1e:be:4a:1e:36:0b:bb:12:5a:4b:f7:
64:99:37:1b:39:04:e8:51:fb:a1:b9:52:fd:99:52:29:87:ce:
73:b3:71:82:ae:8d:2a:e9:bb:92:d1:08:5c:0a:eb:ff:4c:15:
53:77:22:25:73:71:bf:8c:a4:de:fa:48:b4:4a:7d:60:24:fe:
1c:e9:cf:97:62:8a:d8:e6:42:f3:a5:85:bc:f5:6e:a6:de:20:
d7:13:f2:58:83:32:91:6b:88:a7:1b:d6:02:b7:59:92:ac:fb:
94:d0:32:d6:dd:02:ba:c5:fd:29:d2:33:b1:55:27:72:82:b8:
a0:fb:20:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org