Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/b7109a53dccf3611deb037f13c6f5ef349d7a6a9.roa
File: b7109a53dccf3611deb037f13c6f5ef349d7a6a9.roa (raw, json)
Hash identifier: UHgOdsXChUmRd2/71FkQElXMFieu6skOZN+tIQCns3w=
Subject key identifier: 8B:1D:D7:F7:5E:69:57:22:07:86:99:A8:40:67:6C:0C:C5:0E:14:79
Certificate issuer: /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial: 239DF8
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/b7109a53dccf3611deb037f13c6f5ef349d7a6a9.roa
Signing time: Thu 24 Aug 2023 21:31:35 +0000
ROA not before: Wed 23 Aug 2023 21:31:35 +0000
ROA not after: Sun 24 Aug 2025 21:31:35 +0000
asID: 262191
IP address blocks: 190.242.116.0/24 maxlen: 24
190.242.124.0/24 maxlen: 24
190.242.127.0/24 maxlen: 24
190.242.128.0/24 maxlen: 24
190.242.131.0/24 maxlen: 24
190.242.139.0/24 maxlen: 24
190.242.213.0/24 maxlen: 24
190.242.58.0/24 maxlen: 24
190.242.96.0/24 maxlen: 24
190.242.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2334200 (0x239df8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Validity
Not Before: Aug 23 21:31:35 2023 GMT
Not After : Aug 24 21:31:35 2025 GMT
Subject: CN=b7109a53dccf3611deb037f13c6f5ef349d7a6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:87:b9:f5:76:b3:5f:5e:5a:71:5c:c5:82:6b:
43:ba:81:0d:3c:96:4c:ab:dd:c9:9d:68:02:81:74:
dd:68:a1:82:5d:2f:df:0d:13:fe:b8:12:26:4d:d6:
c3:06:29:3b:eb:24:99:7b:00:f6:8c:d4:42:85:c4:
ea:73:ed:82:4d:c5:cd:81:2a:ba:b7:fb:39:23:9b:
ea:6f:b8:b3:6d:d7:67:a6:bf:e5:96:3b:73:a4:25:
5b:5e:e3:76:0f:b0:1a:dc:cb:dc:63:66:c5:82:90:
42:71:54:cf:18:8b:83:1b:ba:c4:f6:4b:15:e2:36:
d9:ee:b4:a6:34:74:f2:12:cf:c3:e9:de:6f:6d:c5:
49:08:49:fd:f3:77:12:61:c9:05:70:22:04:f0:37:
da:c1:b6:42:16:a2:c6:75:26:2c:4b:98:d1:1f:96:
86:e8:d0:01:24:4e:e0:7c:9b:bc:c4:9b:8f:6a:f1:
43:04:14:f8:6c:48:ee:73:68:7b:5f:a9:e5:f6:2b:
18:8f:6e:e9:50:b6:43:0a:ca:77:09:80:80:ec:66:
96:06:c1:f6:e5:c6:5e:33:b4:bd:8e:15:bf:90:21:
88:be:83:08:84:3d:b9:33:fc:8a:65:7b:04:c1:b4:
49:cc:e6:37:09:9f:d6:b1:81:06:38:3d:c0:78:76:
f4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1D:D7:F7:5E:69:57:22:07:86:99:A8:40:67:6C:0C:C5:0E:14:79
X509v3 Authority Key Identifier:
keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/b7109a53dccf3611deb037f13c6f5ef349d7a6a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.58.0/24
190.242.96.0/24
190.242.99.0/24
190.242.116.0/24
190.242.124.0/24
190.242.127.0-190.242.128.255
190.242.131.0/24
190.242.139.0/24
190.242.213.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ec:b2:c7:43:ad:d5:6c:49:4a:6f:61:cf:71:c1:b7:81:cb:
92:0d:eb:2d:1f:a2:3f:8a:b9:40:e9:77:f1:47:94:2c:6c:8e:
65:61:94:66:b2:51:da:6a:db:12:62:33:64:9d:8b:2c:3f:7a:
7e:6d:70:ef:d8:55:69:ba:eb:66:a9:ef:88:06:17:fa:20:eb:
68:bd:8a:4f:ff:57:0d:ae:77:c8:0c:66:d7:bc:ad:04:96:25:
6f:6c:0e:52:3f:36:85:d2:63:e7:10:a3:ca:18:8b:68:07:ee:
23:9d:f9:2e:e3:95:a6:6b:3c:e3:3f:7b:2c:94:6d:73:0a:a6:
d0:c4:b5:41:82:ea:d4:7f:03:91:91:f0:25:a8:15:8f:3d:f8:
01:ac:9d:56:bd:8a:73:b4:7a:5c:07:0e:a0:ba:6f:f3:28:ba:
b3:c7:4e:fc:64:42:8e:19:e0:ce:e0:08:d8:bc:3b:b6:c0:eb:
f7:58:f1:f0:11:22:5f:a4:b8:33:6a:26:50:67:d5:91:d8:a5:
ff:f4:9e:99:6c:cc:a5:65:5f:40:7e:e5:68:11:a0:e5:a4:a4:
44:76:27:ec:51:3c:6c:b0:65:8c:1e:2c:dd:69:73:65:20:0b:
6b:7c:e9:64:a2:ee:10:cd:d3:fa:58:5d:a3:30:5b:83:cb:9a:
05:73:ec:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:24:42 2024 by rpki-client on console-ams.rpki-client.org