Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c250dd1-44a3-474f-ab3b-28e84a96c6a9/641a4d2757099c0ad711a03167d4b6f35e4e831a.roa
File: 641a4d2757099c0ad711a03167d4b6f35e4e831a.roa (raw, json)
Hash identifier: sZk4GTc5ubJ3rWcTrBqK5Pgw1XdSeFwucvgiSq2UoQ4=
Subject key identifier: C5:66:BD:DB:28:96:3F:BA:82:79:EA:07:E2:8D:09:41:B1:A5:88:79
Certificate issuer: /CN=9c12854c0688e59705e41e3c1e61e06fe3bdebc3
Certificate serial: 0BBA3A
Authority key identifier: 5B:6E:D2:E6:53:ED:49:5A:76:EB:35:CD:73:4A:72:84:C2:91:17:15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c12854c0688e59705e41e3c1e61e06fe3bdebc3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9c250dd1-44a3-474f-ab3b-28e84a96c6a9/641a4d2757099c0ad711a03167d4b6f35e4e831a.roa
Signing time: Wed 24 Mar 2021 14:30:36 +0000
ROA not before: Wed 24 Mar 2021 14:30:36 +0000
ROA not after: Tue 24 Mar 2026 14:30:36 +0000
asID: 28109
IP address blocks: 190.124.192.0/20 maxlen: 20
190.124.208.0/21 maxlen: 21
2801:0:90::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768570 (0xbba3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12854c0688e59705e41e3c1e61e06fe3bdebc3
Validity
Not Before: Mar 24 14:30:36 2021 GMT
Not After : Mar 24 14:30:36 2026 GMT
Subject: CN=641a4d2757099c0ad711a03167d4b6f35e4e831a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:1e:a8:cb:b1:e7:a8:c0:7e:7b:7b:55:a2:
c5:7f:e3:c0:0f:7c:75:26:15:a6:e9:79:ea:2b:ca:
f6:ec:7b:c4:f5:3a:57:86:64:a0:36:8f:bc:f6:3f:
be:ad:59:8e:91:c0:e3:fe:b2:01:70:a4:e1:86:3f:
18:0e:db:20:3c:58:35:83:51:cb:1d:29:07:1f:e9:
35:10:3c:9d:3e:e0:11:95:e7:0a:b9:2a:3d:72:b0:
b0:fe:42:d6:dd:b6:ba:a3:39:7a:9e:7a:38:ab:07:
c0:8f:59:d7:f3:64:07:7b:d7:2b:ad:e2:c5:14:bc:
f3:7a:2a:bb:60:a3:4e:1f:95:51:37:d6:04:a8:07:
34:20:3c:f1:1a:c7:6f:4b:9f:4a:04:29:e5:75:89:
6e:b2:b0:52:d6:2d:d2:ea:1f:a1:79:a6:cb:7e:ae:
01:43:88:30:c0:a2:59:39:e3:d6:6e:10:4a:6c:2a:
fa:9d:47:66:97:0d:76:b3:b1:ff:8c:bb:ec:42:a0:
4e:18:89:22:67:78:97:12:11:9f:fd:c3:61:29:67:
4e:80:a2:2e:a4:2f:18:e7:6f:d8:1b:00:69:c9:51:
d4:c3:15:23:6e:12:e5:a6:89:9f:e2:47:01:14:d6:
28:51:c6:80:a2:2f:0e:1f:ff:16:8f:92:7d:a1:45:
db:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:66:BD:DB:28:96:3F:BA:82:79:EA:07:E2:8D:09:41:B1:A5:88:79
X509v3 Authority Key Identifier:
keyid:5B:6E:D2:E6:53:ED:49:5A:76:EB:35:CD:73:4A:72:84:C2:91:17:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c12854c0688e59705e41e3c1e61e06fe3bdebc3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c250dd1-44a3-474f-ab3b-28e84a96c6a9/641a4d2757099c0ad711a03167d4b6f35e4e831a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9c250dd1-44a3-474f-ab3b-28e84a96c6a9/9c12854c0688e59705e41e3c1e61e06fe3bdebc3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.124.192.0-190.124.215.255
IPv6:
2801:0:90::/48
Signature Algorithm: sha256WithRSAEncryption
84:f0:f0:80:a9:9f:29:88:b2:29:a7:54:55:34:c8:e1:21:6a:
4e:fe:de:61:6b:62:6d:4a:a1:2d:88:f0:cf:9d:a8:88:61:c2:
b6:12:f1:5a:a6:bd:28:5d:52:42:71:02:aa:37:1c:04:ff:fb:
df:c9:85:45:da:72:a0:7c:5a:11:e3:29:de:f0:40:a6:ca:4f:
0a:59:aa:44:00:8e:5c:22:c2:1f:3d:87:c1:80:7d:90:f7:6e:
37:00:34:a8:85:8b:99:b1:36:bf:ae:2c:61:07:61:e2:7b:06:
02:0e:55:42:af:34:1c:74:83:7a:ac:bf:a5:63:86:e7:a3:00:
e4:52:96:98:c4:a9:cd:82:2b:de:a7:46:d0:f4:4d:9b:55:7a:
68:04:a0:88:9b:80:c4:50:d7:96:9f:4f:ef:97:80:71:a5:3d:
44:e1:db:83:4d:8a:c5:a2:39:a8:20:bb:97:97:da:78:b2:e2:
53:42:d6:6b:9c:54:0b:e3:e7:18:1b:85:cc:5b:7f:ea:a3:d8:
a1:f2:6a:52:3f:e2:2d:f4:1f:2f:31:7d:69:7b:f2:11:4c:81:
f3:bc:4f:a1:9a:78:6a:07:5a:18:22:8e:3a:c3:b2:45:de:1a:
36:f1:c0:d7:44:eb:d0:02:77:e5:2d:8d:6d:f5:39:1e:a4:df:
18:80:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org