Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/e0c535ce50ef4677837d1acef1b10d36020d49ea.roa
File: e0c535ce50ef4677837d1acef1b10d36020d49ea.roa (raw, json)
Hash identifier: E4FfdWreZjIg1BMB1nzy+0B4BsWz+NIfzbTKZiEy65s=
Subject key identifier: 34:11:BE:2C:BC:D3:3C:0E:70:74:4A:67:06:95:63:9A:51:E4:D7:9C
Certificate issuer: /CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Certificate serial: 21457D
Authority key identifier: CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/e0c535ce50ef4677837d1acef1b10d36020d49ea.roa
Signing time: Thu 01 Jun 2023 15:42:28 +0000
ROA not before: Wed 31 May 2023 15:42:27 +0000
ROA not after: Sun 01 Jun 2025 15:42:27 +0000
asID: 23520
IP address blocks: 190.242.105.0/24 maxlen: 24
190.242.36.0/22 maxlen: 24
190.242.40.0/23 maxlen: 24
190.242.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2180477 (0x21457d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61dee5b94933b1c10377fd86ec970d3b4117ae3d
Validity
Not Before: May 31 15:42:27 2023 GMT
Not After : Jun 1 15:42:27 2025 GMT
Subject: CN=e0c535ce50ef4677837d1acef1b10d36020d49ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e6:6e:65:7b:97:ce:d5:da:d7:80:f5:65:61:
cf:8c:76:24:a4:5e:ac:f6:48:46:6a:a0:32:5d:54:
4b:5f:74:10:fb:8f:de:c7:51:2e:c4:d8:6c:a5:84:
ae:bf:9e:1a:e5:7c:b6:0f:7e:2d:3d:e6:1b:0c:35:
72:39:83:07:86:b5:3b:34:ee:95:43:cf:a3:29:78:
19:0a:22:6f:cd:b5:fa:4f:1a:11:f5:87:77:2b:76:
01:4a:ba:98:30:47:a6:ea:c8:f6:8a:4a:d1:d6:48:
34:f0:71:d9:a8:31:ef:7a:e2:5a:c2:c6:68:69:ed:
b1:84:20:4f:b9:e6:e7:fa:65:6e:d1:dd:62:c3:ea:
59:48:fe:6c:82:2c:24:38:87:9a:4f:ea:b5:55:03:
57:64:7d:47:75:e1:63:38:9a:5e:dd:2c:42:4c:40:
a2:72:d5:d2:01:dc:77:10:66:05:b5:ff:42:65:99:
6b:c9:ad:fe:78:de:dc:bf:45:e8:3c:9d:d4:87:d7:
69:de:46:84:47:42:4b:87:ec:43:f5:e3:6b:1e:74:
36:8a:c8:19:53:60:92:9d:40:4c:3f:d6:b0:2b:ac:
dd:eb:6f:e0:50:8f:77:85:98:6c:bd:58:01:78:49:
75:f8:06:a5:10:05:03:03:52:94:0b:dd:1f:46:6c:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:11:BE:2C:BC:D3:3C:0E:70:74:4A:67:06:95:63:9A:51:E4:D7:9C
X509v3 Authority Key Identifier:
keyid:CC:E9:F3:9E:8F:65:08:D4:CB:E1:EE:25:A5:CB:1C:73:05:6D:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61dee5b94933b1c10377fd86ec970d3b4117ae3d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/e0c535ce50ef4677837d1acef1b10d36020d49ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/61dee5b94933b1c10377fd86ec970d3b4117ae3d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.36.0-190.242.41.255
190.242.46.0/23
190.242.105.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:0e:db:a5:75:0d:1a:1f:9c:95:4c:86:60:22:c5:35:c9:48:
a2:0e:cf:09:28:22:e1:68:03:74:e6:6f:46:a4:23:72:83:e9:
8d:d6:c7:5c:25:c0:ea:bd:99:ba:4e:5e:28:d5:2d:99:96:98:
83:f6:eb:cd:3a:e7:82:07:54:4d:45:ac:9c:55:75:7f:c7:1a:
05:b7:dd:63:1a:95:cd:62:a0:2e:e8:de:4d:40:9e:eb:40:15:
84:c0:b3:ab:54:73:dd:94:8a:80:57:60:a6:13:b9:a3:af:cd:
0c:24:b8:f3:4a:c5:a3:4e:75:40:52:ee:69:cc:3b:2b:10:c7:
2e:0b:31:3d:c8:1f:2c:1b:7f:9a:c7:8d:fa:57:ff:59:90:fb:
31:00:ee:f2:26:eb:ff:a0:2a:7d:ce:08:23:51:45:35:92:b6:
21:1c:81:76:2f:8c:3f:c7:7c:5a:9d:dc:32:2f:56:1e:42:d7:
e8:12:6a:5a:1d:0b:53:26:19:ad:4c:02:b8:16:ac:80:ee:22:
0f:28:71:77:55:7a:70:67:af:d6:d7:f0:e3:33:55:b3:61:a8:
ea:0b:ef:aa:2b:b6:ec:bc:34:73:56:fd:a8:4e:1e:24:76:f0:
16:92:05:00:a5:bb:a9:59:ce:ca:86:6a:ca:5e:ed:6b:2d:48:
ab:f3:89:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org