Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66defe58-851b-414c-a41a-db67e8459ca8/cdeddac2e84e76717432af7a9b3c038e2ed99900.roa
File: cdeddac2e84e76717432af7a9b3c038e2ed99900.roa (raw, json)
Hash identifier: 7ZWUfJB13x2yztFaW8By0Rv31q4hm77IifjRcQ5LtpU=
Subject key identifier: 2B:B6:88:6E:84:0E:59:B7:3A:79:2A:0C:01:96:55:3C:38:0D:21:B9
Certificate issuer: /CN=f0347c0fec9316885a81e931cbc3693f0c24169f
Certificate serial: 0E4853
Authority key identifier: 05:F2:81:08:DF:C8:CD:9D:FA:B4:6B:2C:52:4C:AA:F6:DF:C2:9F:F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0347c0fec9316885a81e931cbc3693f0c24169f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/66defe58-851b-414c-a41a-db67e8459ca8/cdeddac2e84e76717432af7a9b3c038e2ed99900.roa
Signing time: Wed 05 Apr 2023 20:21:17 +0000
ROA not before: Tue 04 Apr 2023 20:21:17 +0000
ROA not after: Sat 05 Apr 2025 20:21:17 +0000
asID: 264856
IP address blocks: 190.14.144.0/21 maxlen: 24
179.48.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936019 (0xe4853)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0347c0fec9316885a81e931cbc3693f0c24169f
Validity
Not Before: Apr 4 20:21:17 2023 GMT
Not After : Apr 5 20:21:17 2025 GMT
Subject: CN=cdeddac2e84e76717432af7a9b3c038e2ed99900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:3b:14:72:3d:ac:2d:49:8a:54:69:fc:b0:7e:
3e:66:5d:6d:b6:c1:a1:70:c3:d6:55:a0:91:ba:a3:
22:a5:6e:c0:2d:53:e0:aa:05:f4:de:ba:75:25:fb:
58:52:2f:e5:aa:dc:52:f6:b9:96:a9:e3:2a:f5:93:
1c:54:56:96:ab:6f:a9:c4:52:f1:c5:39:41:cb:be:
20:f9:fd:bf:3e:91:41:90:69:04:0b:e9:ef:19:bd:
5c:cc:46:71:f2:ab:74:69:d7:a8:45:fa:aa:a8:91:
59:68:77:d7:51:45:be:aa:4a:bc:bd:9e:55:bc:da:
06:d6:62:5e:1b:a5:87:37:ad:23:1d:52:b3:ec:e6:
1b:36:7a:f5:66:59:f2:ae:5f:eb:27:9d:db:5c:d2:
20:e9:f8:bc:c3:99:7a:85:95:54:84:e6:65:63:a0:
65:19:f2:b8:56:18:a2:0f:60:59:93:47:8e:70:5d:
6a:38:9f:ce:1a:e5:17:9a:23:55:b1:4e:11:7f:24:
2a:6c:a6:b4:8b:ab:2c:1b:f5:9b:58:06:98:b5:86:
ee:31:8e:a2:a8:9e:fb:f2:3e:dd:5c:bf:f2:f9:e3:
3b:89:20:d2:fc:bf:0a:55:f4:09:e2:b9:a3:ad:4c:
91:8d:e9:11:95:7f:c9:cc:0e:9f:75:0d:0a:3e:96:
c9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B6:88:6E:84:0E:59:B7:3A:79:2A:0C:01:96:55:3C:38:0D:21:B9
X509v3 Authority Key Identifier:
keyid:05:F2:81:08:DF:C8:CD:9D:FA:B4:6B:2C:52:4C:AA:F6:DF:C2:9F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0347c0fec9316885a81e931cbc3693f0c24169f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66defe58-851b-414c-a41a-db67e8459ca8/cdeddac2e84e76717432af7a9b3c038e2ed99900.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/66defe58-851b-414c-a41a-db67e8459ca8/f0347c0fec9316885a81e931cbc3693f0c24169f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.48.252.0/22
190.14.144.0/21
Signature Algorithm: sha256WithRSAEncryption
42:34:f6:74:0e:42:b2:aa:60:fa:99:f2:57:6e:3c:8d:36:8b:
fd:6c:3d:16:bc:20:a3:05:55:e2:b5:7f:38:92:3b:77:9d:f8:
6a:49:9b:e2:5b:64:32:d4:c6:0b:e6:5a:08:c8:93:70:c8:f5:
e3:0f:d7:ff:38:cf:08:b2:9e:73:53:aa:0e:a7:59:17:ac:14:
92:57:88:2f:09:11:1f:ba:85:96:01:fe:6b:1d:8c:81:98:51:
ad:a5:c7:ce:be:88:c2:1d:1f:bf:f1:c5:a7:7d:82:ca:2c:25:
a4:c4:65:84:fc:a5:69:31:a8:1f:4b:a0:5a:10:48:5c:02:b9:
a4:8b:6b:07:fc:d9:21:52:09:3e:f2:68:2f:56:b5:6f:3e:03:
0b:75:c3:39:67:20:bb:4a:ad:fc:5d:f1:2e:1b:d7:99:41:95:
a1:07:4e:8d:6f:38:7d:69:f7:fa:c7:42:27:fb:9b:60:a5:02:
75:f0:a5:07:bf:36:44:3b:98:92:2e:c1:c4:d8:bb:12:3a:ea:
42:2d:f4:99:aa:05:da:cb:60:1f:ce:4c:06:cb:3e:f1:0a:82:
4d:fa:69:69:49:dc:da:e8:7d:86:14:4a:b7:9d:2d:7f:32:b9:
29:cf:b0:b6:da:c2:d9:c7:62:ad:5a:5c:1c:f7:7e:85:27:45:
1c:92:86:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org