Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/6c45d0020a697b2bce18d73049fc73b68429d62e.roa
File: 6c45d0020a697b2bce18d73049fc73b68429d62e.roa (raw, json)
Hash identifier: Cq+3BjKGJFKMYhs7Ji91T90GtncBAM139ou2DvTBU28=
Subject key identifier: 17:FF:87:94:FE:90:5E:12:0D:54:39:DB:85:46:9A:8E:52:2A:70:44
Certificate issuer: /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial: 2803A8
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/6c45d0020a697b2bce18d73049fc73b68429d62e.roa
Signing time: Mon 12 Feb 2024 15:10:16 +0000
ROA not before: Mon 12 Feb 2024 15:09:57 +0000
ROA not after: Mon 12 Feb 2029 15:09:57 +0000
asID: 262191
IP address blocks: 190.242.100.0/24 maxlen: 24
190.242.101.0/24 maxlen: 24
190.242.107.0/24 maxlen: 24
190.242.108.0/24 maxlen: 24
190.242.110.0/24 maxlen: 24
190.242.111.0/24 maxlen: 24
190.242.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2622376 (0x2803a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Validity
Not Before: Feb 12 15:09:57 2024 GMT
Not After : Feb 12 15:09:57 2029 GMT
Subject: CN=6c45d0020a697b2bce18d73049fc73b68429d62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a9:ea:d9:65:2d:3d:ea:d9:05:e3:ad:28:ee:
5f:19:1c:99:af:39:6a:2c:d9:ac:4f:eb:73:8c:66:
84:a8:15:13:89:9f:aa:cb:8a:11:f2:8e:8c:7d:ba:
31:64:41:51:79:8e:20:3b:35:89:f6:4b:9a:23:02:
8e:1a:7e:e3:43:50:bc:b0:f6:b3:79:ed:bd:5e:0e:
62:7d:86:6c:d4:0b:12:a2:1b:1c:8f:f7:85:88:a5:
97:2d:16:a4:33:28:f8:7e:35:4b:21:af:24:44:e7:
a2:5e:9d:89:50:35:7c:19:85:f2:1a:dc:8a:68:e2:
e8:4b:34:16:21:74:3d:ef:ad:2c:23:c7:2d:83:c3:
14:73:bd:88:ec:2f:1a:e9:2b:5f:ba:9b:17:d3:4e:
1f:16:1b:05:e2:44:0d:4c:4f:13:da:14:4e:aa:01:
dd:94:7e:4d:5d:b1:58:13:03:60:5e:56:49:ff:cb:
c2:9c:92:25:cd:9c:9e:a1:5b:cf:ab:99:e5:9f:1d:
77:e3:b4:0c:1a:ac:8a:8e:03:6e:01:a1:e8:99:db:
30:7c:15:e9:d9:17:c5:59:51:f9:6f:91:76:28:64:
9e:b3:1c:59:19:98:4a:e2:88:94:94:89:5d:83:23:
28:03:0e:b6:e1:4c:18:9b:a3:2e:c5:a1:6b:eb:fc:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FF:87:94:FE:90:5E:12:0D:54:39:DB:85:46:9A:8E:52:2A:70:44
X509v3 Authority Key Identifier:
keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/6c45d0020a697b2bce18d73049fc73b68429d62e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.100.0/23
190.242.107.0-190.242.108.255
190.242.110.0/23
190.242.114.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8c:97:f3:e2:d7:bb:a0:41:c2:ba:cc:b3:94:c2:8b:2b:1b:
25:5b:37:25:61:01:66:bf:f8:4d:66:56:5b:b0:cf:17:dc:fa:
cc:21:bc:21:6b:41:b1:8f:bc:21:72:f0:97:3f:3d:5a:10:c5:
ec:97:63:0c:fa:8c:56:26:1a:52:15:ac:3e:cf:9f:71:e0:e2:
66:46:23:04:00:23:12:05:db:dc:27:17:c3:64:0d:94:b8:88:
d6:2a:61:ad:fd:61:90:e6:30:c9:e0:9b:1a:88:9e:7e:9b:c6:
78:5c:4f:05:2a:d3:03:f9:b3:ad:ab:89:12:bb:89:d9:36:9a:
43:4c:a5:08:46:ed:59:88:a3:43:e4:98:24:52:87:4a:51:b2:
5d:41:90:71:0a:ed:02:e6:4a:84:93:d8:28:9f:70:62:d2:c6:
f9:a4:e3:bd:21:99:fb:0d:00:6a:9b:84:b8:9b:d9:81:41:bf:
50:c5:ef:b8:35:0e:b0:fc:89:6b:de:8a:c9:30:d0:ec:ba:98:
79:4d:d6:92:4b:08:f1:d6:e7:1c:8e:f7:b1:ab:a6:6b:76:f9:
9b:f8:64:4c:bd:15:c3:99:96:d7:10:c5:09:a8:2b:53:42:07:
22:2f:16:7e:bb:65:90:9f:30:aa:83:d7:21:0f:a7:db:5e:3d:
74:68:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org