Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS21578.roa
File: AS21578.roa (raw, json)
Hash identifier: ZIhuq49rsXerAm2Bj3uvDnQXMlXpwRmFJC1W0XIzpeM=
Subject key identifier: 38:3D:76:BB:7B:05:2F:56:48:61:6D:08:2D:F6:9A:F5:0B:16:3D:18
Certificate issuer: /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial: 66B2BFB548BF2DBA6350FFFB5DD4086476F88717
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS21578.roa
Signing time: Tue 04 Feb 2025 18:19:58 +0000
ROA not before: Tue 04 Feb 2025 18:14:58 +0000
ROA not after: Tue 03 Feb 2026 18:19:58 +0000
asID: 21578
IP address blocks: 190.68.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b2:bf:b5:48:bf:2d:ba:63:50:ff:fb:5d:d4:08:64:76:f8:87:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Validity
Not Before: Feb 4 18:14:58 2025 GMT
Not After : Feb 3 18:19:58 2026 GMT
Subject: CN=383D76BB7B052F5648616D082DF69AF50B163D18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cc:dc:e7:28:28:58:9f:16:b7:de:f1:b1:12:
ac:28:96:c3:99:80:8a:d5:ba:cc:0b:4b:a6:1a:0f:
d4:03:d2:30:89:92:6c:24:97:2b:c2:9b:b9:41:5b:
cb:6e:c4:f5:60:51:e6:a2:0e:85:84:b2:9c:88:32:
0d:ff:d3:25:82:53:71:60:35:b9:bc:e8:23:81:2c:
b1:bf:57:a6:88:fb:ab:37:14:27:39:48:9a:2e:1d:
9a:99:57:da:31:4b:d1:e1:09:fc:e0:30:6c:b5:3d:
40:0b:9d:b4:59:e5:a3:6a:09:ac:22:b0:81:6e:a5:
f9:9a:a9:d9:a0:13:8e:67:f8:82:e2:d3:8c:96:39:
17:7c:51:e9:ac:20:a9:71:1d:78:e7:56:f8:51:63:
03:1d:63:8f:14:07:0d:f2:15:43:ea:4a:2e:1c:47:
10:8e:15:7c:f9:06:40:4f:c4:12:84:bb:a0:8a:6e:
9f:08:b6:e2:27:fe:c2:6a:75:63:b1:bf:38:1f:24:
b3:98:7e:b4:89:86:7e:2e:d0:cc:f8:2d:e6:00:bd:
9c:13:51:f0:a7:79:4e:ab:08:8c:a0:4b:1a:67:21:
ca:16:68:e6:05:6a:80:f1:8e:3f:5e:ba:e1:25:ac:
38:d8:da:40:af:ae:78:c3:0f:11:da:be:4d:13:02:
9b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3D:76:BB:7B:05:2F:56:48:61:6D:08:2D:F6:9A:F5:0B:16:3D:18
X509v3 Authority Key Identifier:
keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS21578.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.68.254.0/24
Signature Algorithm: sha256WithRSAEncryption
57:86:d4:57:a1:84:76:da:5f:0f:0f:d7:2d:e0:c1:e4:27:f2:
c1:89:95:e8:d9:1c:ed:ae:35:06:b1:a6:4e:b8:a4:9b:5c:7d:
70:d3:f8:10:c9:f9:7c:98:5c:12:10:d9:2a:b4:a8:8d:96:a0:
e2:ee:ea:92:34:79:e9:a1:ad:0c:e0:b7:a3:86:af:87:ac:50:
10:b9:4a:8f:2f:98:f3:1f:83:a9:0c:28:34:24:ce:e7:8b:46:
05:0a:b3:20:de:7d:49:be:f4:dd:cf:df:36:84:a7:6a:e5:61:
d3:26:08:c0:95:72:85:8b:9f:fc:d4:ec:05:32:c3:02:79:24:
34:84:ec:b4:7d:02:76:af:6c:2c:7f:c5:99:ba:39:58:b3:ed:
88:33:0d:03:cb:10:5a:c1:a3:bd:13:4e:74:78:34:c9:3b:6c:
7a:2b:0f:c3:08:01:40:2b:ad:c9:71:3f:71:33:6a:8c:85:14:
f9:18:f9:dd:69:8f:e9:a1:6c:da:4f:51:d2:9b:e8:86:90:aa:
5e:fd:31:e1:43:2b:61:82:f7:17:39:15:76:c6:b0:7c:16:10:
20:98:08:c6:74:0d:67:45:53:cc:c2:4c:96:32:04:ae:59:20:
85:4d:d0:11:72:54:82:ce:a0:c3:8c:0e:68:16:65:a5:76:80:
24:47:d9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:59:35 2025 by rpki-client