Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/bf13e811511c2bdd788abf9542aa41a141244f69.roa
File: bf13e811511c2bdd788abf9542aa41a141244f69.roa (raw, json)
Hash identifier: ikpfXiBpZEHf97bCPNRUnKdO6cgB2/b983mRSOCoX6g=
Subject key identifier: 70:F7:61:FA:7E:EB:C2:16:96:CB:61:13:E6:5D:91:07:E2:FE:6D:D6
Certificate issuer: /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial: 215056
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/bf13e811511c2bdd788abf9542aa41a141244f69.roa
Signing time: Thu 01 Jun 2023 15:42:32 +0000
ROA not before: Wed 31 May 2023 15:42:27 +0000
ROA not after: Sun 01 Jun 2025 15:42:27 +0000
asID: 26611
IP address blocks: 190.242.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2183254 (0x215056)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Validity
Not Before: May 31 15:42:27 2023 GMT
Not After : Jun 1 15:42:27 2025 GMT
Subject: CN=bf13e811511c2bdd788abf9542aa41a141244f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:d1:4b:97:84:ae:0a:a5:14:d5:8f:5f:2a:
01:91:70:ef:fa:67:a2:73:52:8d:f6:28:f3:77:4c:
25:11:ba:a6:1d:9b:45:d3:0b:dc:a6:48:69:cd:62:
2d:33:6c:ec:13:61:2f:36:99:7e:46:56:8e:b4:5b:
a3:66:ca:23:94:4f:74:9f:8a:7a:4f:83:9b:34:15:
7b:b7:3c:f5:9d:f1:39:0a:61:5c:75:b7:92:12:80:
af:e3:43:ff:85:06:0f:ca:44:f0:d2:a8:51:4b:4d:
9d:21:ec:6f:32:c5:59:36:ac:c8:b1:48:3e:69:e2:
17:e9:18:62:4a:f3:54:bf:2a:76:8c:e3:6e:09:a2:
e5:b2:10:1c:6b:4d:53:11:b7:cb:f3:fc:b4:3a:c2:
88:ea:ab:8b:98:ee:6f:a0:cb:2a:e1:22:18:80:c9:
f2:6d:1c:1b:12:0d:8e:bf:05:78:7e:ee:de:5f:ab:
2c:3e:ce:13:a4:0d:c3:7b:40:9f:10:72:64:8c:be:
d6:0b:d2:98:ae:76:60:86:a4:06:76:74:42:17:a8:
70:e2:6b:3f:ab:ef:ec:a0:14:76:c5:7d:87:96:b8:
c0:1d:cb:3f:42:34:05:3a:c0:6d:3d:c5:9b:e1:10:
5a:09:34:98:fa:4b:88:85:53:63:43:66:ee:2f:16:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F7:61:FA:7E:EB:C2:16:96:CB:61:13:E6:5D:91:07:E2:FE:6D:D6
X509v3 Authority Key Identifier:
keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/bf13e811511c2bdd788abf9542aa41a141244f69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.72.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:66:d4:19:9d:d7:9f:be:51:28:e4:20:e4:a5:d3:ee:c0:e9:
9f:db:6c:ab:66:f4:94:15:f7:ca:2d:0a:1c:88:99:31:1d:a6:
c8:e9:db:0b:f7:7a:db:b1:4c:d0:8f:e4:29:a7:c9:10:32:50:
7c:ab:d3:dd:d7:37:94:c0:3d:75:b3:1a:f7:42:64:71:62:e6:
4f:6d:c3:2c:2c:10:ce:c5:e9:e6:4c:1d:64:92:a1:9b:76:72:
37:4f:77:4e:7b:01:22:67:a9:d9:79:1e:03:7d:b1:7c:39:7f:
dd:2d:e8:3b:8a:94:7f:1e:d2:4a:55:6f:75:ab:1c:e8:f3:e9:
98:5b:26:22:b8:23:f0:f9:99:ae:69:33:00:a6:6f:98:41:99:
67:d3:d0:e5:7c:ce:dc:31:39:45:71:01:54:30:9c:42:a0:e8:
b2:ab:12:6a:44:9e:fd:1f:bc:42:d1:37:bd:b7:f4:e1:f5:0e:
b3:a0:36:6c:e6:47:bd:ba:52:a9:cc:75:a0:03:93:24:07:b7:
59:a4:06:27:1e:ed:87:6f:33:13:02:39:7f:17:4b:57:4c:f4:
d3:5d:16:48:a4:3a:e1:c4:ee:af:f0:f7:dc:19:c7:f8:49:8a:
2d:fe:61:24:d5:04:e1:f3:fb:51:cf:84:ae:89:9e:65:e4:8d:
0b:b3:53:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 18:24:42 2024 by rpki-client on console-ams.rpki-client.org