Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/8c0281cf9148085a24b49c5031ef55b93cfc94e6.roa
File: 8c0281cf9148085a24b49c5031ef55b93cfc94e6.roa (raw, json)
Hash identifier: nlmFLaVFXN+GJ4bpZKp+YlKREBLPxQsngP8YzXCYATY=
Subject key identifier: 3D:A1:5D:38:93:E0:33:CA:F1:C8:7C:51:28:CE:16:36:D5:00:A7:A9
Certificate issuer: /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial: 0D7E53
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/8c0281cf9148085a24b49c5031ef55b93cfc94e6.roa
Signing time: Wed 24 Mar 2021 14:34:52 +0000
ROA not before: Wed 24 Mar 2021 14:34:51 +0000
ROA not after: Tue 24 Mar 2026 14:34:51 +0000
asID: 26426
IP address blocks: 190.242.8.0/24 maxlen: 24
190.242.13.0/24 maxlen: 24
190.242.21.0/24 maxlen: 24
190.242.68.0/23 maxlen: 24
190.242.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 884307 (0xd7e53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Validity
Not Before: Mar 24 14:34:51 2021 GMT
Not After : Mar 24 14:34:51 2026 GMT
Subject: CN=8c0281cf9148085a24b49c5031ef55b93cfc94e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:ba:27:da:e6:c8:7c:39:f4:5a:fe:9a:53:
e6:12:5f:17:74:7d:9d:d3:2d:18:e6:e3:55:da:a1:
c7:ca:41:44:ff:1d:70:84:d5:91:60:e3:9a:d7:ea:
42:84:a8:8d:34:22:6e:63:8c:26:fa:18:df:de:64:
b0:65:f3:b0:31:e2:c1:0f:b7:ed:b7:b4:79:f8:74:
6b:d2:ce:72:22:d2:69:07:16:ff:75:5f:2b:77:6b:
d4:57:76:51:f2:76:b0:4a:6a:71:b3:4e:f8:50:66:
e7:b3:f8:3d:bc:46:f0:1a:5f:b6:39:a8:ee:15:ce:
85:e0:c0:70:1f:fe:85:78:77:d8:92:b8:23:f5:86:
5d:db:0e:37:3f:65:cc:3d:df:4b:7a:44:fd:8e:0b:
0a:c3:f6:8c:5c:02:fb:e0:f0:d6:4c:14:fc:c1:c9:
a2:8b:9f:e0:d5:a1:52:87:94:df:0a:f9:47:74:e7:
78:c3:85:53:70:10:47:92:66:85:39:6d:c8:a8:0c:
f1:82:ae:4c:f9:20:91:c7:8b:bc:1c:9c:00:b7:62:
9a:46:3a:19:ab:f9:dc:d1:c5:fa:18:f2:80:c4:68:
be:29:ec:c7:38:5b:67:4a:d7:da:8b:f7:3d:18:00:
e8:20:66:be:9d:9a:fa:07:8c:53:b3:2d:aa:47:4e:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A1:5D:38:93:E0:33:CA:F1:C8:7C:51:28:CE:16:36:D5:00:A7:A9
X509v3 Authority Key Identifier:
keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/8c0281cf9148085a24b49c5031ef55b93cfc94e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.8.0/24
190.242.13.0/24
190.242.21.0/24
190.242.68.0-190.242.70.255
Signature Algorithm: sha256WithRSAEncryption
18:a7:be:0a:bd:06:e5:36:b9:16:bb:b3:10:97:8d:ec:58:ea:
f0:92:ff:a2:88:e9:5a:d9:6f:74:b4:09:36:b8:ce:d6:5d:c3:
bd:b8:65:94:c6:1c:a6:2a:1d:7c:1b:47:c9:9e:e2:c3:ba:86:
14:dd:a1:7f:86:6d:6d:7f:61:76:67:e5:de:f9:15:70:dc:3b:
9d:7d:48:3d:58:c4:79:5d:d2:32:9c:94:b1:ce:6d:17:e2:94:
f6:c8:b4:66:ed:83:11:41:78:29:cc:44:8f:52:c7:33:52:08:
c7:f6:1f:df:ea:04:c6:4c:e3:c6:79:6a:af:8d:eb:94:8d:5b:
49:9e:e7:17:d5:cb:cc:3c:85:83:5d:9e:4a:ab:8e:65:d2:48:
4c:f6:69:7a:b7:82:2e:55:8d:90:3e:92:3d:06:cd:22:a1:50:
cc:85:59:d5:81:cb:e4:3d:8c:7c:26:cc:c7:14:e8:e7:7b:fd:
4e:bf:32:25:5d:b2:fb:e9:ae:3a:30:50:7e:ef:d8:fb:24:42:
60:f5:79:18:9a:c1:51:f1:cb:78:05:58:77:6d:01:bf:f2:55:
5b:73:c7:1a:a4:67:fa:bb:d7:79:7f:99:93:46:86:c9:e5:8b:
d3:10:4a:7c:38:17:02:b0:1d:0e:8a:8e:ae:fb:cd:fd:48:41:
20:41:9d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org