Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/259a08c31300afdc967586ef550246e743a07503.roa
File: 259a08c31300afdc967586ef550246e743a07503.roa (raw, json)
Hash identifier: fajwUN0k7OHQAdnwju8Jwh1G4UDJRTNmpowEuXLdROo=
Subject key identifier: B6:C9:EA:2B:25:C1:0F:09:A7:1C:9A:8E:C4:4A:2E:8C:C9:DB:D8:D2
Certificate issuer: /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial: 27D1A4
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/259a08c31300afdc967586ef550246e743a07503.roa
Signing time: Mon 12 Feb 2024 15:09:59 +0000
ROA not before: Mon 12 Feb 2024 15:09:57 +0000
ROA not after: Mon 12 Feb 2029 15:09:57 +0000
asID: 23520
IP address blocks: 190.242.105.0/24 maxlen: 24
190.242.36.0/22 maxlen: 24
190.242.40.0/23 maxlen: 24
190.242.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2609572 (0x27d1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Validity
Not Before: Feb 12 15:09:57 2024 GMT
Not After : Feb 12 15:09:57 2029 GMT
Subject: CN=259a08c31300afdc967586ef550246e743a07503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:ab:d4:4c:99:b5:15:f3:5a:e7:5e:e7:5d:
5f:bf:4e:f9:ed:03:0c:65:f5:e1:7e:e1:2d:bf:18:
95:94:e2:e4:9c:e3:17:80:4a:0a:df:5b:b4:39:12:
01:35:90:30:db:5c:93:62:a1:e1:49:47:8c:d9:a8:
57:89:67:9f:dd:de:20:e8:28:9f:2d:ca:4f:dc:d2:
a0:0e:f4:6f:2a:2e:9a:8e:55:62:2a:7a:5f:78:c5:
60:d8:85:9a:2a:d5:cb:0a:51:4d:f7:31:af:b2:ee:
ad:a4:4d:ef:df:b2:eb:52:27:fc:9d:96:11:5b:82:
f6:e0:88:fd:14:1e:ad:57:5f:f2:40:5c:02:ff:ac:
05:0f:2e:0c:18:08:97:6b:7d:a5:87:9a:28:04:50:
d7:2c:6a:6d:a1:a1:b6:da:3b:ab:2a:28:d1:42:cc:
01:5b:6b:05:07:d1:2f:9b:60:55:0d:51:7f:98:60:
fd:fe:77:22:94:1f:7c:de:9e:70:ec:45:74:e2:27:
31:2f:d8:3d:14:fd:04:fd:78:7c:df:96:1f:cb:c2:
14:32:32:36:6d:f7:d9:b3:4a:cc:15:62:42:55:15:
ab:96:02:9a:ef:4c:8e:25:22:ba:c4:16:24:12:81:
61:14:73:99:7d:7b:7d:4e:82:63:7c:62:e4:c4:73:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C9:EA:2B:25:C1:0F:09:A7:1C:9A:8E:C4:4A:2E:8C:C9:DB:D8:D2
X509v3 Authority Key Identifier:
keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/259a08c31300afdc967586ef550246e743a07503.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.36.0-190.242.41.255
190.242.46.0/23
190.242.105.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ac:f4:76:a0:79:23:bd:e9:e0:17:c7:11:c7:cd:dd:ab:a3:
a4:de:06:64:ab:83:e3:3d:6d:b3:97:24:51:39:8d:5c:00:98:
3b:27:9b:1f:53:21:b7:ec:d5:34:4b:3c:c1:d7:13:51:4f:7c:
93:37:9a:4a:73:7d:5e:6f:ac:64:4a:57:65:50:61:c0:56:08:
9e:ce:9f:f0:76:a0:8e:c2:c0:71:c3:b6:f0:c5:06:75:4f:43:
bb:d9:ce:ab:63:16:3f:aa:70:a9:bc:3b:87:10:12:39:51:d6:
46:b9:31:20:ea:e9:0a:3c:c4:28:51:d7:90:09:3b:24:7c:9d:
6e:aa:32:2d:ea:e0:6d:29:f0:8a:1a:1d:fd:68:c1:d5:4d:84:
a4:5f:d4:19:f1:c3:9c:b2:b1:55:33:70:fb:2b:a0:61:71:6f:
dd:a4:aa:68:7c:04:54:10:55:58:97:24:a5:6a:2f:60:ed:c8:
a2:8b:5e:77:81:57:25:c4:c0:33:75:cf:33:ec:f0:a6:24:bf:
e5:d2:ce:69:71:a9:a1:bb:e7:3c:25:d4:29:70:a9:1b:a4:13:
ae:b6:75:00:50:6d:24:1b:62:f7:e6:05:21:48:5a:2e:8b:3c:
82:4b:c8:f2:da:64:38:de:61:9f:a3:5e:75:67:2e:61:30:b0:
83:e2:26:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org