Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/af8512f7cde750148c8a6ec6a6155aae69e3b764.roa
File: af8512f7cde750148c8a6ec6a6155aae69e3b764.roa (raw, json)
Hash identifier: azzIWzxlaGwZluIDHNE2Ux1iU81SAT66lRr1EKASKew=
Subject key identifier: 77:F2:FB:C2:D0:EE:99:50:8E:FB:9A:31:87:E9:61:7F:30:DB:6C:C2
Certificate issuer: /CN=1b429c72865e191f13438ce54026b95b47e06113
Certificate serial: 083C49
Authority key identifier: 62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/af8512f7cde750148c8a6ec6a6155aae69e3b764.roa
Signing time: Tue 05 Sep 2023 22:34:23 +0000
ROA not before: Mon 04 Sep 2023 22:34:23 +0000
ROA not after: Fri 05 Sep 2025 22:34:23 +0000
asID: 7438
IP address blocks: 189.201.227.0/24 maxlen: 24
189.201.229.0/24 maxlen: 24
189.201.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539721 (0x83c49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b429c72865e191f13438ce54026b95b47e06113
Validity
Not Before: Sep 4 22:34:23 2023 GMT
Not After : Sep 5 22:34:23 2025 GMT
Subject: CN=af8512f7cde750148c8a6ec6a6155aae69e3b764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:ea:28:9a:12:a6:c9:ff:9e:27:43:c0:a1:
64:8b:1b:fa:61:27:e0:88:b9:10:ba:dd:11:e0:3c:
93:ab:05:7d:49:34:62:d6:6d:bf:0e:50:09:60:4f:
6e:f4:2a:54:93:04:fc:76:66:21:a1:ac:60:e1:fb:
b7:79:5a:a0:35:8d:5b:61:1f:1d:19:7a:a6:72:f6:
d2:1e:0a:74:c2:e5:9b:ae:30:25:af:f9:9a:0f:70:
db:8c:ff:bc:fc:7a:29:18:cd:1c:3a:ff:53:23:db:
73:28:2f:8a:c5:f5:4c:29:59:49:1d:88:b5:dd:67:
c1:03:68:85:99:5a:9d:50:3a:c9:11:d8:a2:64:c1:
9f:04:b2:0a:34:7b:be:98:7f:d3:5b:58:24:c3:57:
19:0a:32:60:e6:f5:52:17:d4:45:77:bb:2b:a8:81:
7c:b2:c6:a5:0d:74:36:60:2e:bf:b0:b5:b4:59:f9:
bf:d0:26:ab:d4:87:f8:f0:63:1f:25:e1:50:91:c5:
8f:c5:a6:74:31:82:01:a1:c1:d2:e6:24:52:96:ef:
96:25:61:f7:e6:7e:a6:ed:38:dc:e9:6e:ca:f2:d7:
d6:6d:a6:7d:ce:ee:97:74:8c:48:77:e9:5a:40:e6:
93:70:0f:7e:17:08:e2:b8:64:1b:fd:4c:c5:35:f1:
4f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F2:FB:C2:D0:EE:99:50:8E:FB:9A:31:87:E9:61:7F:30:DB:6C:C2
X509v3 Authority Key Identifier:
keyid:62:58:9B:CF:97:B8:14:9A:7C:D4:6C:7D:9A:64:67:27:1B:59:EF:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b429c72865e191f13438ce54026b95b47e06113.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/af8512f7cde750148c8a6ec6a6155aae69e3b764.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9a82ee3d-c756-4a5c-a367-93e205e33649/1b429c72865e191f13438ce54026b95b47e06113.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.227.0/24
189.201.229.0/24
189.201.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:e7:ef:cf:3e:f7:b6:94:cf:4f:a3:63:94:7e:6e:ca:4e:2b:
24:7e:31:99:fc:82:54:41:3f:91:91:07:b7:e0:ed:32:08:7c:
18:ea:53:16:1c:3c:52:85:08:62:af:99:99:da:85:e7:ae:45:
fb:d7:31:19:6f:07:d1:61:9c:27:04:71:b3:c0:c5:bc:00:a9:
cd:84:fe:57:62:3a:81:de:32:f2:fa:ed:bf:2d:90:4b:e7:ff:
9f:22:af:ad:7d:f6:c9:dd:89:a8:72:91:72:e8:5a:34:44:1c:
eb:73:d1:ab:68:e7:b7:87:8e:73:5b:c5:5f:b8:14:3e:c1:1c:
b1:82:dd:01:af:3c:ec:bc:8b:69:c9:32:9e:31:03:75:7c:21:
66:bc:7b:fe:c0:30:2b:a0:2a:21:6c:1c:11:72:cd:46:9b:25:
e1:f8:d1:0e:b3:eb:2a:c4:ed:1c:71:0a:4b:40:34:20:a1:f9:
ed:82:bf:f5:81:28:81:0c:1b:c5:7b:f9:be:69:ca:89:4c:18:
f6:60:b5:7a:99:61:4c:71:ad:e7:b1:22:f4:5a:9a:69:cb:86:
27:3f:67:9d:33:b9:50:f1:87:f1:56:84:07:d6:a4:3a:d9:ed:
f4:04:b7:e5:a8:3d:e8:fa:37:16:7b:b4:91:b0:2e:24:40:41:
29:05:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 17:40:06 2023 by rpki-client on console-fra.rpki-client.org