Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/968a2ffd8ee6f8428e8fcba01116db2d78dc260c.roa
File: 968a2ffd8ee6f8428e8fcba01116db2d78dc260c.roa (raw, json)
Hash identifier: dk1Jp5qaWaR+tV0fpqnnDML5GN3G3Tg8OIpcItV/KRk=
Subject key identifier: E4:44:4D:A8:C8:7E:45:F8:D3:7D:3A:20:5D:65:01:72:55:F2:4E:7F
Certificate issuer: /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial: 24F20F
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/968a2ffd8ee6f8428e8fcba01116db2d78dc260c.roa
Signing time: Tue 17 Oct 2023 21:02:17 +0000
ROA not before: Mon 16 Oct 2023 21:02:16 +0000
ROA not after: Fri 17 Oct 2025 21:02:16 +0000
asID: 26617
IP address blocks: 186.189.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2421263 (0x24f20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Validity
Not Before: Oct 16 21:02:16 2023 GMT
Not After : Oct 17 21:02:16 2025 GMT
Subject: CN=968a2ffd8ee6f8428e8fcba01116db2d78dc260c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:31:08:26:84:42:0b:9f:a9:82:9a:1e:4e:
78:31:3e:ad:0d:72:6b:ad:3e:99:3b:eb:ad:89:b5:
30:b7:9f:b3:1f:db:29:93:14:26:ca:00:1c:cb:4d:
f8:c9:9a:90:85:4b:f7:bc:d5:e4:a8:06:cf:b4:a0:
28:c0:12:cb:e4:bb:b7:5d:60:f0:d8:83:eb:c1:8f:
45:80:c1:38:86:f0:32:5d:10:fe:4a:05:cc:ea:73:
67:81:43:4a:73:ac:cf:88:6d:af:3a:3b:83:83:f5:
f6:eb:cc:c1:b7:aa:97:0e:e8:b6:80:3a:30:0e:b4:
d3:2a:0f:02:ce:a2:1f:ee:55:45:86:a2:bf:32:d3:
b3:41:b5:52:fd:1c:9d:e3:04:e1:c4:5b:dd:93:3f:
b2:bd:d9:16:51:2d:5e:05:01:7c:d7:63:06:56:bc:
c6:62:2e:f6:f5:48:e5:e1:ad:a7:04:e7:db:d7:ef:
1c:09:57:1f:47:20:90:4a:41:18:19:1e:22:18:6a:
29:12:2d:a7:a3:97:f8:95:07:18:dc:a3:1a:4d:0a:
29:18:9a:f8:d6:b8:4b:3b:57:e5:30:66:0b:6e:0a:
1c:9e:37:95:1c:e9:6c:fc:1a:5b:3a:fa:bd:7b:43:
75:ac:4e:c7:12:15:0b:87:40:ba:5c:3e:41:66:30:
9c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:44:4D:A8:C8:7E:45:F8:D3:7D:3A:20:5D:65:01:72:55:F2:4E:7F
X509v3 Authority Key Identifier:
keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/968a2ffd8ee6f8428e8fcba01116db2d78dc260c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.189.215.0/24
Signature Algorithm: sha256WithRSAEncryption
84:2c:41:31:8b:92:a3:ba:d6:aa:e7:27:3a:6d:b1:27:0f:85:
05:01:0e:b4:bc:4d:3e:d0:6b:48:45:1d:7f:a1:39:79:69:06:
22:83:4b:29:e5:86:43:05:5b:cf:9c:73:12:2a:2e:4f:ec:8f:
cc:ed:a6:3c:b1:04:c9:dd:9f:d5:d6:ba:13:b1:e6:68:ca:cf:
06:c5:7f:34:1e:f6:03:98:db:1f:e6:7a:75:03:bf:68:4b:2a:
1d:ea:26:68:fd:f2:5e:63:72:50:09:71:ad:60:b9:07:7f:95:
a2:c8:fa:fa:ec:54:8c:c2:02:3f:60:f9:06:01:ef:2b:70:57:
6a:16:d5:39:a0:f4:b5:9e:0e:57:7f:e3:dd:2c:87:29:fe:16:
80:e7:da:f2:7f:f0:ba:84:0d:4b:4e:23:6c:44:a3:1d:12:3d:
ad:31:56:9c:b0:a6:fe:cd:ec:2f:b8:2f:71:98:90:9e:94:c1:
f8:41:10:9a:97:3b:8e:27:ef:dd:24:ef:a4:1b:5f:57:5e:46:
51:38:6e:2d:9f:36:f4:ee:cb:c7:7c:43:45:e6:33:3a:37:83:
ad:d9:30:f4:af:1c:f2:fb:88:5a:3b:2c:c8:8f:23:95:4d:2b:
b9:86:fb:b8:de:c6:90:51:cb:2c:c7:69:e1:ce:1e:0d:96:c8:
da:ee:5f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org