Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5df2acc4-b1e1-4fbf-94c8-3a75486868f1/f35f808801b52dde1ebc0210f121f4a15c6927be.roa
File: f35f808801b52dde1ebc0210f121f4a15c6927be.roa (raw, json)
Hash identifier: bPSUIgU9tvUTu0V67T7QntoWDFXRdaBc+ufcQ7/kVes=
Subject key identifier: D0:F0:FD:F5:B2:B7:FB:1F:15:E8:96:BA:E2:36:61:23:ED:D0:00:0A
Certificate issuer: /CN=f390ecae345fdc054388454e8ce484c4f24dda45
Certificate serial: 03CF
Authority key identifier: EE:2B:54:6E:F0:CF:49:A9:A4:3A:C8:56:46:4E:A5:FF:59:BF:B5:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f390ecae345fdc054388454e8ce484c4f24dda45.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5df2acc4-b1e1-4fbf-94c8-3a75486868f1/f35f808801b52dde1ebc0210f121f4a15c6927be.roa
Signing time: Thu 29 Feb 2024 13:54:03 +0000
ROA not before: Thu 29 Feb 2024 13:54:02 +0000
ROA not after: Sat 28 Feb 2026 13:54:02 +0000
asID: 263223
IP address blocks: 190.122.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 975 (0x3cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f390ecae345fdc054388454e8ce484c4f24dda45
Validity
Not Before: Feb 29 13:54:02 2024 GMT
Not After : Feb 28 13:54:02 2026 GMT
Subject: CN=f35f808801b52dde1ebc0210f121f4a15c6927be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:69:6e:53:36:93:b8:c7:f4:fa:d4:5e:d2:
17:e0:d1:66:ea:9c:be:f7:9d:1b:0e:ec:e1:36:72:
7d:64:b3:a5:01:eb:0a:13:63:87:da:e1:aa:66:cc:
7c:62:34:2c:37:a6:5e:05:68:91:50:9a:9f:08:de:
84:78:7a:84:df:c3:27:71:88:dd:7c:93:e9:4d:8b:
ca:0e:f4:c6:34:91:02:0f:4d:3f:f0:e1:44:c6:70:
b1:f8:65:aa:ef:8e:ed:af:ea:28:48:33:c2:a1:ee:
81:d0:bb:62:d2:23:1c:98:c9:9e:02:a5:57:ae:eb:
1f:0a:0a:5e:82:bb:69:6a:b8:76:11:3a:11:cf:05:
a4:53:da:8e:8a:b1:4e:23:cc:da:5a:ee:3a:96:c3:
89:93:cf:8b:24:11:a3:ab:38:1c:21:11:47:8a:66:
3b:50:ed:d1:f8:c1:a4:b6:59:1a:16:39:d6:0f:56:
c8:4b:9d:d3:9b:0c:db:b8:79:a2:d8:dd:91:92:94:
f6:b4:b2:51:e8:93:a7:07:f7:98:13:6a:f2:d5:b0:
0f:7c:05:de:53:c9:10:9f:a9:db:8a:e2:49:ca:73:
19:10:f4:3e:98:88:bc:e7:69:e2:02:3c:12:9a:c3:
42:d2:31:51:13:a4:1c:48:a3:e7:83:67:48:f9:48:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F0:FD:F5:B2:B7:FB:1F:15:E8:96:BA:E2:36:61:23:ED:D0:00:0A
X509v3 Authority Key Identifier:
keyid:EE:2B:54:6E:F0:CF:49:A9:A4:3A:C8:56:46:4E:A5:FF:59:BF:B5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f390ecae345fdc054388454e8ce484c4f24dda45.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5df2acc4-b1e1-4fbf-94c8-3a75486868f1/f35f808801b52dde1ebc0210f121f4a15c6927be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5df2acc4-b1e1-4fbf-94c8-3a75486868f1/f390ecae345fdc054388454e8ce484c4f24dda45.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.122.216.0/21
Signature Algorithm: sha256WithRSAEncryption
70:d5:1f:4c:ec:35:c3:0f:dd:74:f3:35:94:02:56:d4:f1:eb:
46:15:44:35:bc:84:78:81:eb:e4:04:46:b1:30:47:08:c9:b3:
01:df:48:17:c7:67:84:0a:3a:29:52:e0:4a:5e:7b:d0:6e:ec:
ec:75:03:86:80:71:61:89:48:d8:9b:be:85:15:07:d8:75:09:
90:b7:98:96:fd:71:2a:22:7f:e7:44:44:35:a7:b7:7c:66:74:
c5:c0:69:dd:38:37:13:fb:4a:d0:a5:d5:3e:7c:b5:03:d2:33:
93:bc:cc:89:21:36:e9:57:8c:13:79:b8:7a:90:9f:e2:4a:0c:
f7:97:8f:46:56:00:b9:97:d6:cd:b1:c4:27:ad:01:14:53:04:
4e:30:79:3c:1f:3a:d9:6c:87:b6:2f:c0:e9:75:68:d2:7b:92:
1a:df:5a:de:90:2a:2e:ea:a0:04:a5:13:af:50:4f:a9:8e:98:
e3:4a:19:9a:85:ac:0d:19:f2:ba:e9:1c:fc:fb:2b:af:3d:42:
59:8d:5c:12:ac:5a:58:96:2f:7c:73:bf:d0:08:63:ab:9d:f6:
f0:13:d8:0e:12:fd:f8:c8:5e:0e:dc:aa:b9:b5:56:60:61:bb:
f2:6f:02:61:e8:65:19:5c:48:2e:b1:72:d1:80:9f:c1:e0:4f:
a9:68:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org