Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/eb7c217ec2350024059b390a0567789ec63ad3b8.roa
File: eb7c217ec2350024059b390a0567789ec63ad3b8.roa (raw, json)
Hash identifier: X/7FrO0xZw+dJQTA7D3QDelLVRPsRQiuRflzuIgVK7M=
Subject key identifier: 66:E1:33:7A:D7:9D:7B:A0:9D:86:A2:93:D6:A0:FC:8D:2C:E4:6C:7A
Certificate issuer: /CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Certificate serial: 27FC73
Authority key identifier: BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/eb7c217ec2350024059b390a0567789ec63ad3b8.roa
Signing time: Mon 12 Feb 2024 15:10:13 +0000
ROA not before: Mon 12 Feb 2024 15:09:57 +0000
ROA not after: Mon 12 Feb 2029 15:09:57 +0000
asID: 23520
IP address blocks: 190.242.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2620531 (0x27fc73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7237d32fd35bbf0fdba7734a8368fd9626eca5a
Validity
Not Before: Feb 12 15:09:57 2024 GMT
Not After : Feb 12 15:09:57 2029 GMT
Subject: CN=eb7c217ec2350024059b390a0567789ec63ad3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:ea:74:0f:a2:fe:e4:81:51:73:df:35:86:
4e:9b:bc:76:e7:f0:ec:50:32:8f:5e:f4:0a:1a:7e:
35:75:69:c2:34:69:c5:70:6a:2c:fe:1d:c0:33:9c:
ad:5c:5f:5a:cc:a3:f6:28:7e:e1:19:7e:46:45:33:
18:6e:35:07:aa:81:ea:8b:4c:54:d1:32:a1:5e:41:
18:44:00:a9:f4:de:4b:b6:e5:30:a4:be:1f:aa:ee:
52:bb:1d:85:77:86:7d:50:5d:fb:3a:ed:ae:93:02:
a0:f5:b3:af:f0:c5:63:eb:e7:21:5b:3a:91:f7:7b:
3e:3f:7d:03:bf:71:96:18:05:01:5a:c2:bc:04:ba:
76:b1:5f:79:61:ac:e6:14:5f:4e:2e:af:57:7b:47:
42:47:72:c9:3f:e7:d8:8a:e9:8d:7e:7a:4c:a9:69:
27:78:29:88:13:3f:1a:df:68:0e:b8:a5:48:86:a6:
e9:da:f0:8e:1a:58:bb:f4:db:9d:33:eb:a6:8e:82:
6a:69:e1:ed:1c:a6:7d:85:89:0a:a4:95:67:f6:2f:
01:67:74:b6:29:ac:9a:65:f8:63:a9:82:f3:f2:3d:
d5:fb:f4:97:75:c5:0c:16:50:cf:37:81:91:3b:63:
bb:28:1c:e5:e7:49:e5:1a:22:26:fe:8c:fb:86:03:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E1:33:7A:D7:9D:7B:A0:9D:86:A2:93:D6:A0:FC:8D:2C:E4:6C:7A
X509v3 Authority Key Identifier:
keyid:BE:02:D2:36:F8:B0:06:BA:87:81:2A:20:2E:F5:B7:66:DC:8E:30:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/eb7c217ec2350024059b390a0567789ec63ad3b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/67ed9008-ae34-44be-882f-59381201b1e1/a7237d32fd35bbf0fdba7734a8368fd9626eca5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.242.142.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ad:0c:60:08:b6:69:b4:56:1e:4b:3b:94:ad:da:15:dc:db:
ee:75:a0:67:35:11:cc:0a:e3:71:79:30:a2:b0:a2:47:0e:41:
e4:35:40:6c:38:d4:7e:87:7f:ed:04:60:d4:90:a4:eb:de:f4:
03:93:0e:98:75:25:49:62:3c:ca:35:f5:b1:2f:f5:9d:24:9f:
e4:47:df:ce:f5:79:b8:ec:8b:fb:55:f3:7e:7d:db:b7:5b:18:
df:51:04:09:09:cc:fe:70:2a:f5:25:84:d2:cf:58:3e:d9:0d:
f4:60:3a:79:bf:6f:67:e8:a7:74:cc:c1:26:88:5b:23:1e:7b:
f6:3c:59:ff:bd:74:5e:55:0b:e8:8c:6c:1d:ec:bd:97:e4:24:
ca:5b:e9:a2:b7:85:7f:f0:a6:13:52:49:34:62:3c:24:0f:4f:
41:90:80:6e:fd:ff:67:a0:86:fc:b3:89:e7:d5:f5:a6:86:50:
a5:24:ce:b4:04:52:e6:7f:31:17:be:1b:61:ab:d2:c5:5f:b7:
67:12:c9:10:56:88:7b:25:af:65:7e:14:c2:31:9d:59:40:0a:
bf:96:b9:f8:2a:93:4a:e5:6f:f0:c8:88:b5:0d:e3:d4:e3:06:
b9:36:20:3d:d2:ac:16:81:e8:16:59:b2:59:54:bb:c7:7f:fa:
8e:90:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org