Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/cfca0c7571854fe3c5b996b964d1510a7f54a576.roa
File: cfca0c7571854fe3c5b996b964d1510a7f54a576.roa (raw, json)
Hash identifier: zNpElbYJVr9ALw+OvGSlNOSAjW10YarNDOfIw564BDU=
Subject key identifier: 9B:E7:49:09:3D:CA:97:7C:43:BA:6A:B6:6B:B2:2B:8E:E3:39:1B:D2
Certificate issuer: /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial: 28F6AD
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/cfca0c7571854fe3c5b996b964d1510a7f54a576.roa
Signing time: Wed 13 Mar 2024 21:45:22 +0000
ROA not before: Wed 13 Mar 2024 21:45:22 +0000
ROA not after: Fri 13 Mar 2026 21:45:22 +0000
asID: 23520
IP address blocks: 190.242.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2684589 (0x28f6ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Validity
Not Before: Mar 13 21:45:22 2024 GMT
Not After : Mar 13 21:45:22 2026 GMT
Subject: CN=cfca0c7571854fe3c5b996b964d1510a7f54a576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:df:fd:eb:14:e8:bb:aa:37:f6:ed:58:15:85:
ef:a4:e4:c0:b8:a7:d2:39:c7:da:d7:d8:d4:03:c4:
fe:ce:08:01:a3:ee:05:20:ff:47:86:9d:36:8c:27:
5b:5f:fe:22:ec:4c:b5:71:42:55:d7:28:59:28:43:
29:f3:98:e0:8c:e7:29:2e:84:ed:81:a6:1f:57:f9:
3c:5a:67:0b:3e:bb:51:58:c5:7f:72:22:2d:c2:e4:
9d:f1:aa:58:6d:63:30:32:9e:d1:20:4d:92:68:ba:
9f:c0:85:b0:07:7b:c7:9a:60:8c:ce:f7:a0:77:79:
58:29:4b:cc:be:5a:ae:86:b8:fc:79:3a:08:b4:36:
73:8c:35:a4:84:8d:b9:73:00:9c:d8:81:ed:c4:98:
d2:f0:95:7a:01:4c:82:3f:c0:da:2d:f1:1c:81:9c:
a8:b7:ad:a6:53:49:8f:e6:87:6e:7c:44:0d:71:f0:
5c:d9:91:76:50:8f:05:66:46:28:26:48:17:f8:af:
69:bf:08:ae:8f:34:7a:0f:19:ae:a4:02:46:52:80:
f6:3f:f1:60:aa:e3:e1:d3:8b:86:5d:93:8d:36:d9:
08:cb:72:4d:bf:f9:a9:e2:7a:08:f7:0a:43:a7:c6:
cd:10:9f:f1:c8:09:90:36:75:dc:3c:53:82:ba:2c:
8f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E7:49:09:3D:CA:97:7C:43:BA:6A:B6:6B:B2:2B:8E:E3:39:1B:D2
X509v3 Authority Key Identifier:
keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/cfca0c7571854fe3c5b996b964d1510a7f54a576.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.163.0/24
Signature Algorithm: sha256WithRSAEncryption
26:47:54:d4:ed:73:15:7f:c8:44:ce:78:4f:8d:d2:48:f8:52:
36:f4:91:c2:c0:1e:a0:a8:d1:a4:84:4b:bf:ed:19:e2:b0:f3:
18:10:6b:cd:36:31:be:6d:f4:27:be:ed:cb:ff:b7:80:9d:4d:
9c:f3:a9:fa:bf:76:b6:e6:05:ae:1b:f0:dc:c3:d7:ac:45:a6:
4a:a8:99:a5:88:59:6b:a1:46:ce:88:59:ee:84:5b:b9:bc:83:
88:33:47:79:d0:96:0d:ce:1d:40:16:b2:3a:d7:d8:e6:af:5b:
9f:b0:08:ff:9e:16:c3:8f:be:e1:e8:d0:d5:00:98:0a:74:64:
cf:9f:02:b0:ef:f8:2a:a7:bd:2a:2c:9b:a8:6e:f8:2d:9b:0f:
47:a6:c8:50:14:3e:91:be:26:f0:2f:0a:72:a5:da:00:be:76:
fb:ce:47:55:95:1e:c2:24:64:78:76:f8:00:cd:3b:25:da:4d:
7e:09:60:61:a3:83:53:74:13:ed:2e:d5:94:a6:c2:bf:c3:ea:
4e:9b:46:75:55:80:7f:2f:51:ad:28:d2:68:0b:ea:fa:60:61:
18:54:1d:2b:7b:9e:9e:6e:b7:59:82:64:ec:90:94:20:ed:0f:
fd:3f:0c:ff:09:39:64:01:4c:8f:73:fe:8e:c2:77:e0:25:6f:
30:9e:89:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org