Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/1ad6f17e9e51bf26be4ee59afb7b46339a2fd430.roa
File: 1ad6f17e9e51bf26be4ee59afb7b46339a2fd430.roa (raw, json)
Hash identifier: I2BypINqHz+7tv4IWVUMgCBzavHPHYpq+gweFcEkJrY=
Subject key identifier: 01:61:D8:1F:EB:AE:FD:BE:D5:74:54:CC:42:B0:49:6B:17:EE:DD:B0
Certificate issuer: /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial: 2290BB
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/1ad6f17e9e51bf26be4ee59afb7b46339a2fd430.roa
Signing time: Thu 22 Jun 2023 18:16:22 +0000
ROA not before: Wed 21 Jun 2023 18:16:00 +0000
ROA not after: Sun 22 Jun 2025 18:16:00 +0000
asID: 28035
IP address blocks: 190.210.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2265275 (0x2290bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Validity
Not Before: Jun 21 18:16:00 2023 GMT
Not After : Jun 22 18:16:00 2025 GMT
Subject: CN=1ad6f17e9e51bf26be4ee59afb7b46339a2fd430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1d:16:99:03:6b:28:f3:32:29:02:81:99:39:
be:2f:06:0c:3e:e2:76:2f:06:91:a6:1d:8d:6b:5d:
ef:dc:e0:3b:ff:70:85:79:4d:31:c8:3f:0d:2b:7a:
ed:2b:36:b0:9e:3c:a7:6e:ba:93:fe:72:08:7d:fd:
1e:8f:27:ba:39:7d:b7:45:f5:34:8b:1c:2f:1c:b5:
85:a3:d3:e0:22:7a:7d:59:b9:01:0c:db:18:0f:52:
63:58:8e:f3:27:b7:b9:4a:72:f3:cb:64:f3:15:5f:
ab:33:25:54:f0:6e:9b:1c:82:2f:1b:ac:3b:46:bb:
37:f2:75:dd:8d:ec:68:1c:1e:8c:f6:9a:3c:76:d8:
b3:77:f4:7a:3d:c5:9d:2d:cb:71:26:2d:7a:c7:99:
92:52:d5:16:48:a9:85:55:d3:a8:94:27:a1:ce:d7:
68:23:b9:7f:b2:e5:b8:e8:b6:da:b1:a1:ec:db:4a:
6c:b9:cd:b8:a4:e4:4a:30:35:a2:13:28:53:d2:94:
8e:1a:e6:61:01:88:d9:11:92:7d:e7:40:64:e1:85:
ee:3e:77:b3:b7:c6:9f:4b:d1:26:c1:51:59:0d:6a:
f9:c7:39:0a:d1:1e:55:74:8e:a5:ad:d1:b0:8b:88:
72:5c:0f:bd:7a:2e:f1:92:f5:21:2b:36:d0:a9:6e:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:D8:1F:EB:AE:FD:BE:D5:74:54:CC:42:B0:49:6B:17:EE:DD:B0
X509v3 Authority Key Identifier:
keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/1ad6f17e9e51bf26be4ee59afb7b46339a2fd430.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.210.54.0/24
Signature Algorithm: sha256WithRSAEncryption
50:fb:e6:2d:43:53:9c:33:e7:76:a9:80:2f:6f:17:f3:81:de:
e0:ce:65:d3:89:db:59:8f:43:c1:a0:f5:d5:c2:cc:1c:6b:9a:
18:50:4a:0e:f3:08:8f:4c:7f:55:11:5e:d6:28:d9:97:6f:a8:
74:b8:7d:29:88:81:55:e4:9a:d9:21:31:c4:e7:ec:66:1e:d7:
63:40:5f:8a:86:8c:49:d3:06:ca:f5:8d:24:ab:b0:0c:a6:86:
76:1e:b0:21:e4:7b:15:20:25:73:a4:69:75:ab:7f:1c:ea:9d:
a6:05:31:02:e8:00:b1:92:f2:c5:ac:5d:2c:75:fa:03:fa:e8:
ad:00:49:8c:17:70:46:9d:51:b3:5c:99:41:b5:78:fd:fe:02:
e9:54:71:8c:ab:7c:02:cd:85:10:23:c3:8d:ab:2a:a0:ff:45:
d7:c1:08:81:fd:58:5d:41:ba:1a:a0:ef:f7:8d:42:33:e4:0a:
60:8d:cc:c5:82:72:ac:8c:6c:e1:c6:2a:24:ba:56:4d:21:8c:
74:0e:11:80:18:ac:96:4b:8e:f7:6d:90:0f:87:e0:f6:e6:ee:
9a:40:69:ac:31:22:44:a7:07:5c:22:ea:09:c3:3d:9b:78:af:
43:91:df:9f:ed:65:b5:7f:81:43:33:2b:05:62:a0:13:bd:29:
6b:82:89:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org