Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/1b0ed102c5510aaa80efcbb661d1243487ee333a.roa
File: 1b0ed102c5510aaa80efcbb661d1243487ee333a.roa (raw, json)
Hash identifier: LsNzDIpveSyXWOHZ3+Vu6ukDUzDoT1R9jBhiEgGSiVI=
Subject key identifier: 64:E9:C3:79:79:33:7F:73:D8:5D:9F:7D:E8:86:C2:AD:E5:16:70:11
Certificate issuer: /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial: 215D2B
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/1b0ed102c5510aaa80efcbb661d1243487ee333a.roa
Signing time: Thu 01 Jun 2023 15:42:35 +0000
ROA not before: Wed 31 May 2023 15:42:27 +0000
ROA not after: Sun 01 Jun 2025 15:42:27 +0000
asID: 26426
IP address blocks: 190.242.8.0/24 maxlen: 24
190.242.13.0/24 maxlen: 24
190.242.21.0/24 maxlen: 24
190.242.68.0/23 maxlen: 24
190.242.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2186539 (0x215d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Validity
Not Before: May 31 15:42:27 2023 GMT
Not After : Jun 1 15:42:27 2025 GMT
Subject: CN=1b0ed102c5510aaa80efcbb661d1243487ee333a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:7d:2a:07:60:52:9e:30:a1:e6:02:df:f1:
dc:2d:e6:83:60:9c:65:c6:34:7d:33:87:6d:35:eb:
4d:14:cf:fb:bc:ea:b4:6e:d0:b3:97:36:33:de:d3:
9c:3a:12:39:94:7b:29:46:be:bc:03:37:f5:c3:d6:
c9:89:51:6b:1b:99:b9:85:ec:46:99:aa:f7:56:45:
b9:19:ad:57:29:f4:01:ab:82:1c:c7:ba:ee:30:b0:
4c:01:b7:c9:56:64:5d:13:12:df:73:86:ec:ed:d9:
16:ec:52:7e:07:c0:07:de:54:34:41:1b:9b:1e:d7:
e3:df:26:52:f5:5f:64:df:49:dc:23:a7:b9:42:b3:
0b:01:83:02:a2:5d:96:f8:ac:c5:8d:80:df:d8:dd:
2f:c3:c6:d7:f6:5a:d0:08:c4:fb:b0:5a:89:42:01:
ee:cc:39:ad:b1:12:1d:19:ca:87:54:12:c8:9b:bc:
a8:ed:e1:82:1f:dd:39:63:3a:53:de:3e:fc:2d:a6:
60:80:a9:9c:ab:e0:1e:4a:cf:06:af:e1:ca:3e:be:
0e:b0:34:dd:d5:e4:87:7e:cb:5d:7f:e6:25:32:ec:
ae:65:5b:90:4a:48:d8:e5:c1:4b:a1:dd:74:69:30:
03:00:33:a7:a1:d7:7b:04:bf:17:41:9d:45:46:dc:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E9:C3:79:79:33:7F:73:D8:5D:9F:7D:E8:86:C2:AD:E5:16:70:11
X509v3 Authority Key Identifier:
keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/1b0ed102c5510aaa80efcbb661d1243487ee333a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.8.0/24
190.242.13.0/24
190.242.21.0/24
190.242.68.0-190.242.70.255
Signature Algorithm: sha256WithRSAEncryption
4a:84:27:12:43:be:42:5b:a3:2c:82:5d:38:7b:76:bc:39:62:
26:b8:26:cc:3e:a5:68:0d:d2:09:18:07:ce:49:63:9c:cb:6c:
f3:2a:23:a7:47:b6:72:1c:64:76:75:82:97:48:a4:bd:38:78:
d2:e2:60:34:83:b8:b2:3f:de:c6:9c:15:9a:d4:52:bc:d0:52:
8a:3c:fd:3a:5a:5b:34:4a:96:d5:30:4d:ab:3a:35:39:cd:ba:
a2:3a:79:2c:2c:81:ad:53:e0:1b:66:84:54:68:04:f0:77:12:
5b:8c:e6:40:ab:db:8c:cd:bc:a4:5c:78:1b:ed:35:b3:be:f5:
0e:7c:3c:f4:3a:6a:61:d0:95:b5:51:d6:2b:4e:76:13:53:33:
d6:45:7f:4b:23:5d:a9:8f:e1:99:52:16:28:28:9d:0d:27:f7:
62:56:8a:b7:75:a9:96:e6:f1:61:a0:1d:d6:48:d0:9e:e2:94:
c1:63:0c:e5:8c:bb:0c:4e:9c:bb:7e:c0:df:c3:6b:91:76:71:
17:14:16:e1:f6:69:9d:03:63:73:2d:73:df:9d:7b:0e:cf:b0:
f3:cf:22:e9:32:3d:8e:c7:38:e8:a5:48:18:83:34:c9:ee:3a:
70:92:6f:7a:23:5c:3d:a9:66:60:7d:25:97:1b:c4:48:36:41:
a8:7b:c1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:07:04 2024 by rpki-client on console-fra.rpki-client.org