Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/b582fe0f1da4a8fcad4296e000c18a3c5a68c329.roa
File: b582fe0f1da4a8fcad4296e000c18a3c5a68c329.roa (raw, json)
Hash identifier: zyyRtq1lc5+IHhf5FxTlYJc+XbthjA09Fss4QoOPsvw=
Subject key identifier: 2F:E4:A0:44:AD:2C:C5:1F:05:5C:7D:CC:36:54:E1:7C:FC:D7:66:68
Certificate issuer: /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial: 215653
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/b582fe0f1da4a8fcad4296e000c18a3c5a68c329.roa
Signing time: Thu 01 Jun 2023 15:42:33 +0000
ROA not before: Wed 31 May 2023 15:42:27 +0000
ROA not after: Sun 01 Jun 2025 15:42:27 +0000
asID: 262199
IP address blocks: 190.242.121.0/24 maxlen: 24
190.242.148.0/22 maxlen: 22
190.242.158.0/23 maxlen: 24
190.242.160.0/23 maxlen: 24
190.242.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2184787 (0x215653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Validity
Not Before: May 31 15:42:27 2023 GMT
Not After : Jun 1 15:42:27 2025 GMT
Subject: CN=b582fe0f1da4a8fcad4296e000c18a3c5a68c329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:19:ee:dd:94:9e:3f:5b:17:a8:53:90:0e:d6:
c7:3d:47:75:d0:b0:fa:bc:6a:a0:74:e9:d2:56:19:
db:cc:f5:0c:95:0c:7c:49:01:7f:78:f2:78:7e:48:
ac:a6:2f:c6:3e:8f:66:ee:32:29:85:0a:fa:8a:35:
02:2c:6c:d0:00:a8:94:77:65:9c:b6:b9:15:60:40:
1a:ee:06:b8:35:99:18:46:bf:67:e5:0f:d0:8b:5f:
bc:5c:f2:8d:07:cd:0f:25:c5:a2:f0:02:e6:7b:d9:
6d:e0:5e:5d:14:3e:4a:41:e0:ca:b6:36:02:cd:61:
81:2d:23:67:6f:b5:ed:a0:6a:e4:b8:e9:c9:6a:30:
b6:b9:04:c9:a0:f5:72:82:e5:d1:c3:87:18:2f:a5:
c4:5a:ed:ec:0e:1b:62:fd:76:12:5d:5a:dd:c9:f3:
9e:76:ba:da:8f:5f:81:9a:d8:e8:aa:1f:93:a0:18:
be:ca:fe:28:c3:d6:d2:6f:9e:37:91:f0:ee:64:66:
0f:08:4d:a4:aa:5a:8f:18:09:f0:8a:5d:6c:3b:ce:
b1:4e:02:f8:d3:a6:4f:9f:61:fe:b1:d5:5c:68:87:
09:7c:71:ee:1f:92:cd:8e:ac:00:0b:15:33:00:9f:
96:b7:76:e2:8a:c2:60:72:01:0b:ed:ae:94:7c:87:
dd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E4:A0:44:AD:2C:C5:1F:05:5C:7D:CC:36:54:E1:7C:FC:D7:66:68
X509v3 Authority Key Identifier:
keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/b582fe0f1da4a8fcad4296e000c18a3c5a68c329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.121.0/24
190.242.148.0/22
190.242.158.0-190.242.162.255
Signature Algorithm: sha256WithRSAEncryption
3a:15:30:3d:ff:15:60:7d:f0:92:1e:92:2a:fb:56:6e:2e:e8:
6d:42:79:d1:13:f3:80:a7:43:2c:d6:7c:81:04:f9:f3:9f:d6:
91:34:c8:29:4a:ee:0e:dd:4b:e7:fd:d9:cc:45:06:32:74:90:
bc:9d:dc:d0:b2:a0:2e:b0:d3:26:85:56:f7:d2:fc:97:ac:17:
eb:e6:fb:c3:bc:19:30:08:8d:05:68:b6:b8:eb:ca:ea:74:a1:
70:6a:6f:59:02:55:4f:72:d2:a6:ab:6a:89:ca:e2:55:a6:24:
83:e1:bf:f3:97:e0:b6:7a:75:0a:1f:95:91:c5:5f:d9:5c:91:
60:4b:bd:76:f5:a0:b8:05:23:82:53:30:cc:18:ce:f0:79:ad:
07:e4:61:38:a1:2c:c9:16:5a:29:16:18:af:89:6b:77:35:ac:
d5:81:05:d1:64:3a:3e:53:56:e0:94:6c:06:8d:3b:bf:f9:82:
1b:8b:c9:bd:a2:5c:c8:a6:f7:58:8b:9f:60:05:bd:8a:94:44:
3b:01:27:4f:cd:b7:62:b3:52:4a:a6:46:99:30:70:97:fb:39:
a8:4f:1c:8c:70:53:5e:61:89:46:bc:fa:21:fc:38:c7:bd:86:
3c:e6:6a:49:9c:2d:13:9c:52:2f:38:fd:ff:e4:e0:e4:ca:86:
8f:48:52:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:07:04 2024 by rpki-client on console-fra.rpki-client.org