Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/c8ec5561fd01599668df1723c2f9cb397e5b353d.roa
File: c8ec5561fd01599668df1723c2f9cb397e5b353d.roa (raw, json)
Hash identifier: eRM0IrrTHDStJG77TnPu8KkGgN6Oadz4q024I8JtIbI=
Subject key identifier: 0C:95:D9:B9:16:75:5D:C6:98:BC:E7:EC:74:52:2D:2C:1D:8C:E1:27
Certificate issuer: /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial: 0D843E
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/c8ec5561fd01599668df1723c2f9cb397e5b353d.roa
Signing time: Wed 24 Mar 2021 14:34:52 +0000
ROA not before: Wed 24 Mar 2021 14:34:51 +0000
ROA not after: Tue 24 Mar 2026 14:34:51 +0000
asID: 23520
IP address blocks: 190.242.36.0/23 maxlen: 24
190.242.38.0/23 maxlen: 24
190.242.40.0/23 maxlen: 24
190.242.46.0/23 maxlen: 24
190.242.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885822 (0xd843e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Validity
Not Before: Mar 24 14:34:51 2021 GMT
Not After : Mar 24 14:34:51 2026 GMT
Subject: CN=c8ec5561fd01599668df1723c2f9cb397e5b353d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:ab:e7:b4:ff:7d:58:db:ec:76:73:58:39:
07:87:c4:6c:d3:36:78:c2:ee:4c:5c:0b:a6:0a:46:
b0:ec:2f:48:6b:69:f3:5c:30:85:aa:d7:ba:5f:48:
8a:c9:32:d7:ad:34:aa:ee:2c:c3:ee:ad:88:96:2b:
c4:72:90:b6:b6:bb:de:6e:c0:4b:c1:cb:86:64:23:
a3:1b:e3:cd:f6:b5:dd:9f:e0:da:66:89:eb:da:f1:
0a:7c:a1:03:4f:8a:bb:ba:63:4c:c1:9e:04:92:fb:
e7:d8:35:6b:83:18:a7:7e:9c:ce:56:e1:c8:50:5c:
fb:b6:1d:b4:61:f4:bd:8d:ca:64:1a:cd:0f:a5:06:
cd:17:79:16:9a:cf:3c:1e:55:6e:57:de:00:d2:6a:
a1:d8:b1:c3:ef:8d:9d:e5:25:19:e0:54:ba:3e:dd:
51:9c:47:1a:93:59:a3:3a:23:41:bf:76:d8:a6:4d:
25:a2:f5:c7:c2:b8:41:f4:4a:ee:11:cb:bf:37:18:
93:7d:9d:37:f8:ba:82:a2:a1:94:7f:1b:7e:a0:2e:
0a:8e:3c:d7:05:6d:05:7b:04:c0:c6:69:19:aa:89:
39:bd:d8:4b:c0:d1:34:56:84:41:d9:14:b9:45:9b:
37:f9:af:22:b0:19:80:01:82:6a:75:94:31:d0:75:
fd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:95:D9:B9:16:75:5D:C6:98:BC:E7:EC:74:52:2D:2C:1D:8C:E1:27
X509v3 Authority Key Identifier:
keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/c8ec5561fd01599668df1723c2f9cb397e5b353d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.36.0-190.242.41.255
190.242.46.0/23
190.242.105.0/24
Signature Algorithm: sha256WithRSAEncryption
21:24:75:ac:8f:52:26:36:de:2e:45:f1:69:7e:8b:c6:ac:f8:
ac:63:ee:be:01:6d:1b:61:96:7e:9a:b5:2e:c1:28:e5:e9:12:
60:7e:fb:60:28:2f:ab:62:87:21:85:95:13:85:68:fa:d8:d9:
4d:7a:75:63:94:27:6c:1a:20:1e:b8:58:1e:28:42:69:ac:22:
75:bf:84:ad:a1:64:af:82:c5:85:16:0a:8a:61:8a:71:3a:b2:
b9:ed:20:6a:e2:91:8e:b3:d9:af:2c:6f:52:23:35:51:9b:e6:
ce:48:b0:05:7b:2f:21:7f:01:cc:8f:5d:dd:da:53:e8:e5:69:
fb:9b:5b:33:13:fd:6c:1c:5c:e1:0b:c6:92:27:65:35:20:09:
b9:04:06:f6:53:07:31:26:a2:85:70:a1:c0:ca:33:e8:c0:46:
83:2b:0c:15:2d:79:ba:25:7a:6c:49:fd:41:e3:85:19:af:a9:
0b:4d:b3:7b:b1:5a:bb:8a:a1:66:80:14:98:ed:bf:90:f1:e2:
1f:45:fa:f5:6b:d6:09:0d:79:cf:ea:2b:be:30:dd:79:ee:a1:
db:b6:94:7b:3d:2d:b3:b6:87:90:c6:50:4f:fe:22:04:72:c9:
52:93:24:4f:45:97:b7:14:4a:d3:84:86:bd:e8:af:f5:4c:f5:
1d:3b:1f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org