Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/c298d945da51b20c2a90d9e7214bc1f24cf98227.roa
File: c298d945da51b20c2a90d9e7214bc1f24cf98227.roa (raw, json)
Hash identifier: BJh6+DK9OSntj5+FOhOIMZ+JynkIQGmMqO4GSL+gC3M=
Subject key identifier: 25:DB:D2:4E:58:BB:13:8B:D0:45:D6:6E:20:C3:2E:2D:69:28:17:B7
Certificate issuer: /CN=e0570a0eb0a8dba45212b35153e2892214274417
Certificate serial: 25C506
Authority key identifier: C3:12:E4:39:E2:A3:64:74:97:AF:33:7C:A7:F7:D9:54:6B:12:3B:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e0570a0eb0a8dba45212b35153e2892214274417.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/c298d945da51b20c2a90d9e7214bc1f24cf98227.roa
Signing time: Fri 05 Jan 2024 19:32:28 +0000
ROA not before: Fri 05 Jan 2024 19:32:28 +0000
ROA not after: Mon 05 Jan 2026 19:32:28 +0000
asID: 61468
IP address blocks: 192.188.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2475270 (0x25c506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0570a0eb0a8dba45212b35153e2892214274417
Validity
Not Before: Jan 5 19:32:28 2024 GMT
Not After : Jan 5 19:32:28 2026 GMT
Subject: CN=c298d945da51b20c2a90d9e7214bc1f24cf98227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:3f:36:b4:a6:48:2d:a6:94:a1:65:17:82:
b3:2c:2a:de:63:8d:27:7d:27:a7:7d:ac:f8:c8:b3:
c4:2a:e1:16:da:25:3a:6c:4e:f5:4f:e7:49:93:17:
97:fa:cd:65:32:03:a6:ff:64:95:3d:7b:f3:7b:3b:
d2:e3:df:1b:b1:67:a8:42:b9:84:46:cb:61:75:b0:
f8:c5:34:72:e4:3b:39:1b:2f:55:de:00:28:0f:92:
41:06:95:98:17:21:b0:10:83:4a:17:db:91:6b:8f:
b7:68:43:ad:10:17:2f:9a:fe:ed:52:a8:df:ca:86:
db:28:a2:2e:73:46:45:98:e0:20:09:56:d7:da:5b:
c8:77:e2:c7:b6:62:dc:f6:8c:d6:3f:ab:20:3d:2a:
c4:17:af:81:1c:7b:7d:5f:41:f2:76:b4:74:5e:62:
2b:9f:01:ba:83:f5:5d:f7:bb:a2:9c:70:22:d2:b9:
a1:07:dd:34:05:b4:3b:5e:6c:dc:bc:66:ee:f7:fe:
f0:09:10:16:94:62:73:8c:b1:3f:a4:eb:46:1a:2d:
ac:a2:db:1c:cb:8e:b8:03:a5:ca:5a:e4:d3:af:bc:
e5:f1:b3:65:78:87:91:78:1d:88:1c:5b:90:91:93:
06:ba:e1:ee:99:8a:7c:ab:6f:43:fd:37:77:6f:bb:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DB:D2:4E:58:BB:13:8B:D0:45:D6:6E:20:C3:2E:2D:69:28:17:B7
X509v3 Authority Key Identifier:
keyid:C3:12:E4:39:E2:A3:64:74:97:AF:33:7C:A7:F7:D9:54:6B:12:3B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e0570a0eb0a8dba45212b35153e2892214274417.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/c298d945da51b20c2a90d9e7214bc1f24cf98227.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7007363a-0f36-4e30-af88-33daedc235a1/e0570a0eb0a8dba45212b35153e2892214274417.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.196.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e3:1b:cc:36:f9:9a:e2:54:fc:60:04:3c:8a:e9:aa:b8:bb:
07:aa:f4:0b:10:85:17:54:ec:a4:01:41:b8:05:28:d3:c1:40:
c9:fb:df:e0:b0:b0:a5:cd:c1:86:78:e5:0f:27:8d:fa:f8:3a:
d0:6d:32:47:22:ab:b7:1a:2b:6d:f7:b5:6f:96:e7:b9:32:1f:
cf:e4:de:bf:47:36:cb:71:bb:18:09:98:d9:4d:6c:ca:1d:3d:
85:37:41:4e:e2:8d:e5:32:82:f0:f9:ff:3b:d3:ed:5f:de:13:
e6:61:08:6d:ae:9f:04:13:ae:87:de:e6:03:0c:f8:0d:dd:a2:
60:0f:33:9b:13:da:d5:c8:b8:58:dd:20:cf:76:a7:a5:a6:3b:
17:52:49:19:1e:a4:7e:bd:f9:22:1c:51:47:a1:62:c1:0b:5a:
dc:72:d8:de:44:99:05:75:e9:bf:bf:97:a4:cc:f8:5b:1f:35:
5d:c3:18:6b:dd:4a:f5:b1:fb:62:cc:97:0d:73:83:ac:53:89:
b8:a2:03:ff:a5:39:ee:9b:40:b4:ec:4c:f3:a9:6e:f0:ce:91:
d9:9a:96:6e:1b:be:ba:bb:1f:3c:c7:49:11:d3:cd:06:97:29:
0f:33:b8:37:bf:fa:4f:74:60:6d:f6:0d:56:d7:21:58:f3:1d:
f3:be:7b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org