Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/511b0c65d58e49486627e95b0a2785f5d128bedc.roa
File: 511b0c65d58e49486627e95b0a2785f5d128bedc.roa (raw, json)
Hash identifier: OZBb89WgdEL0XE5Chn1+ItPfF31P+6IAf0bIHkEHRh4=
Subject key identifier: F6:43:E7:CB:CE:12:4F:7D:F5:42:16:A1:B1:AA:52:C9:E8:8E:FF:CE
Certificate issuer: /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial: 2288E8
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/511b0c65d58e49486627e95b0a2785f5d128bedc.roa
Signing time: Thu 22 Jun 2023 18:16:00 +0000
ROA not before: Wed 21 Jun 2023 18:16:00 +0000
ROA not after: Sun 22 Jun 2025 18:16:00 +0000
asID: 23456
IP address blocks: 200.68.114.0/24 maxlen: 24
190.210.206.0/24 maxlen: 24
190.2.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2263272 (0x2288e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Validity
Not Before: Jun 21 18:16:00 2023 GMT
Not After : Jun 22 18:16:00 2025 GMT
Subject: CN=511b0c65d58e49486627e95b0a2785f5d128bedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:43:c1:f5:e9:05:f7:8f:ad:06:cd:01:6b:ae:
11:43:50:26:e1:1d:9b:38:9e:19:7d:26:ac:23:a1:
e8:2d:a9:32:e6:7d:2a:8d:34:34:b7:1c:b9:0a:c3:
4b:94:c5:ba:52:f8:6c:89:1b:96:77:aa:10:53:ab:
dd:c4:78:25:fb:71:71:54:56:5c:99:4f:2a:5e:9f:
56:5f:91:9e:5f:5c:85:bc:9c:26:b0:16:02:34:59:
77:44:f9:e1:f0:ea:52:50:50:54:c3:1f:84:18:27:
fd:52:c5:ce:d6:9e:60:01:c9:59:1f:f7:e1:d8:32:
b0:26:fd:08:ce:61:25:48:ba:e5:a0:73:0f:13:ab:
7e:d8:f3:af:77:5d:67:b9:da:f6:e4:a4:ff:f1:b9:
d3:6b:7c:4c:53:5e:48:81:42:ca:4e:51:32:9c:e2:
68:f9:ec:df:6a:80:45:ec:e0:61:c8:e7:7d:46:23:
b1:ef:31:99:f4:c9:37:35:6d:14:07:64:06:24:3f:
12:6e:44:46:28:f9:72:84:6e:e4:d0:eb:8c:80:fd:
31:46:28:ec:f1:39:8e:3b:95:74:19:d0:b0:c6:d3:
1f:53:c8:be:55:1a:35:8c:11:87:4d:68:3e:dd:9b:
6a:0f:7a:ab:5e:b3:a5:6a:dd:7a:ad:b9:74:e0:7c:
1a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:43:E7:CB:CE:12:4F:7D:F5:42:16:A1:B1:AA:52:C9:E8:8E:FF:CE
X509v3 Authority Key Identifier:
keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/511b0c65d58e49486627e95b0a2785f5d128bedc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.2.17.0/24
190.210.206.0/24
200.68.114.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ac:77:27:e7:9e:aa:48:4c:e4:a8:4a:52:20:27:52:15:6e:
a9:cb:f9:f3:8e:49:b9:6d:da:42:71:0d:3d:bc:d4:ec:1f:c6:
c4:53:9b:4d:c2:42:ea:b9:1f:ac:4d:1a:d9:2b:8a:bf:e0:0d:
3d:c6:59:5a:64:e3:99:40:52:fd:e8:7a:3a:b9:62:46:a8:a8:
30:71:76:00:8e:cd:96:b8:f6:dd:27:5a:0b:7a:7d:85:10:97:
e9:56:c4:98:8b:cd:4e:bc:f9:b8:44:74:03:d7:89:4c:ae:9a:
de:99:04:1f:ba:7c:fe:8b:9e:18:35:75:d1:9c:b6:ea:08:83:
e7:8b:98:1f:34:68:d1:03:d4:dd:08:93:61:77:49:3e:2b:a3:
74:c4:a7:bf:ea:5d:ee:b4:1c:f2:9d:de:a0:89:0e:75:e3:27:
02:dc:f8:db:e6:cf:2b:07:c8:8e:86:ed:8a:ce:88:c4:18:68:
af:a8:32:15:d1:6d:28:4d:57:7e:f1:a5:19:ae:59:ee:d6:a9:
0b:80:a8:1a:48:19:1a:2f:6a:95:9f:2e:20:4f:a5:18:38:b1:
fd:83:9d:ec:b4:f0:67:b3:56:6b:57:0d:76:51:2b:d0:98:79:
72:02:38:03:a7:50:f9:aa:c3:73:63:41:4e:6c:49:35:43:c2:
34:c0:42:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org