Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/3491aeb221b4154e2a05ffe85a6df1c102ef4a97.roa
File: 3491aeb221b4154e2a05ffe85a6df1c102ef4a97.roa (raw, json)
Hash identifier: +uFgTJImt59aXI0AKMyQsOKjrz81QUlw0AZVKJmGj/k=
Subject key identifier: D5:9E:DC:9B:DF:0A:D6:E3:39:C5:E0:FB:D0:CF:43:E6:7B:2A:54:14
Certificate issuer: /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial: 2292BC
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/3491aeb221b4154e2a05ffe85a6df1c102ef4a97.roa
Signing time: Thu 22 Jun 2023 18:16:23 +0000
ROA not before: Wed 21 Jun 2023 18:16:00 +0000
ROA not after: Sun 22 Jun 2025 18:16:00 +0000
asID: 1000
IP address blocks: 190.210.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2265788 (0x2292bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Validity
Not Before: Jun 21 18:16:00 2023 GMT
Not After : Jun 22 18:16:00 2025 GMT
Subject: CN=3491aeb221b4154e2a05ffe85a6df1c102ef4a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:ef:bf:82:55:e6:de:b1:c5:91:c3:cd:c1:
65:5e:99:d3:0a:8a:0f:05:40:8f:c9:07:52:51:b7:
9a:a9:77:6d:d8:94:47:4c:19:0c:46:0f:fa:56:d9:
4a:c6:0e:d2:fd:7c:ce:b5:29:be:41:6c:76:ba:12:
70:c3:56:58:92:04:03:0f:0d:ea:c6:87:94:de:de:
11:a9:a5:bd:3e:4f:eb:c2:ee:e3:a5:51:a1:5a:ed:
eb:f8:7b:9a:e3:11:65:9f:9e:a6:9a:f1:ee:d5:50:
11:a8:49:e4:0b:de:26:4a:ea:d0:42:c0:f8:38:03:
97:39:c8:8b:cf:af:5c:56:10:2f:f3:db:20:f4:d0:
3e:e5:a3:df:c3:c0:9b:17:a1:f9:6e:8d:14:f2:43:
92:93:48:92:ba:33:3c:19:cf:7d:46:ca:ab:3c:d1:
2f:03:b6:5c:c0:b1:16:49:e0:58:0c:2e:d3:b3:55:
a8:bd:ec:1d:19:04:2a:24:c4:3e:b5:25:00:d1:b0:
1d:4a:ca:b3:24:91:18:be:5f:a9:6e:a6:3c:c3:b6:
6b:50:6d:7c:9b:fe:45:c1:b3:cb:1e:cf:62:11:08:
a3:1b:cd:86:58:44:bf:3a:6e:24:d7:cb:fc:b2:f8:
bb:3d:02:15:90:e3:a1:be:a4:8e:9e:46:d9:50:c7:
4e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9E:DC:9B:DF:0A:D6:E3:39:C5:E0:FB:D0:CF:43:E6:7B:2A:54:14
X509v3 Authority Key Identifier:
keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/3491aeb221b4154e2a05ffe85a6df1c102ef4a97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.210.210.0/23
Signature Algorithm: sha256WithRSAEncryption
51:ac:0b:3c:18:20:a6:2d:cb:1b:71:5d:06:66:02:24:c7:0f:
c2:ff:df:89:da:a1:49:a7:d3:2c:d4:ac:61:76:e6:b7:c4:46:
c1:64:29:b4:25:d1:21:10:87:6a:cf:7f:d9:69:ba:7c:0c:0b:
85:fa:d8:f2:76:26:78:12:af:28:b7:85:f2:7c:18:ce:8b:8d:
05:ca:45:fb:3a:ea:28:50:05:4c:3a:7d:2f:d3:1c:33:55:69:
0a:fc:c0:67:6f:99:28:1b:9e:06:03:b5:c9:94:b7:27:ad:e2:
f2:c6:fa:33:87:1a:c9:66:b6:4c:49:00:90:87:a3:55:39:df:
84:d4:e7:4c:c1:80:a6:6c:7a:22:91:ae:60:98:a6:5d:8b:d9:
ab:5a:1c:28:a0:a9:b5:e9:96:c4:f3:97:45:d5:ca:84:8c:f6:
ca:0e:4b:90:7e:c9:08:4e:f1:5b:19:6a:01:ba:4d:e6:7e:88:
b7:0f:88:7e:e8:84:82:fd:c7:9b:3e:b7:2e:6e:52:63:24:ed:
b6:6c:b1:ea:de:26:50:ab:e4:0a:f2:ad:08:6f:55:fc:79:51:
97:53:f4:6f:46:8d:bc:70:31:5d:94:32:52:bc:0e:ef:6e:57:
33:3f:44:8f:0b:c0:ef:e7:ef:66:55:56:05:8d:9c:cc:54:29:
e1:a9:c5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org