Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28079.roa
File: AS28079.roa (raw, json)
Hash identifier: iSYXhI+PP+ekQbOF0rPIonF83roN5axUh0N0dOdoCc4=
Subject key identifier: 3A:11:A6:91:2B:AE:9A:F0:E0:86:2E:4C:C4:47:D7:B6:74:DF:F2:9B
Certificate issuer: /CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Certificate serial: 1E0D099E50F3B2850F8F0EE97F6740F5E6725A21
Authority key identifier: 5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28079.roa
Signing time: Tue 04 Feb 2025 18:02:49 +0000
ROA not before: Tue 04 Feb 2025 17:57:49 +0000
ROA not after: Tue 03 Feb 2026 18:02:49 +0000
asID: 28079
IP address blocks: 190.5.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:0d:09:9e:50:f3:b2:85:0f:8f:0e:e9:7f:67:40:f5:e6:72:5a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D158BE61CA911BC34A887005B96056F4C474B1E
Validity
Not Before: Feb 4 17:57:49 2025 GMT
Not After : Feb 3 18:02:49 2026 GMT
Subject: CN=3A11A6912BAE9AF0E0862E4CC447D7B674DFF29B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:8d:62:7a:54:e7:cd:6a:5b:89:4b:29:ba:
7b:45:bc:d3:05:50:54:11:fd:72:de:47:f8:0c:0c:
4b:78:b2:60:83:95:c3:f0:ff:a0:a3:30:82:2e:c4:
e5:f7:34:32:0f:1a:c6:aa:8d:db:66:11:bb:36:05:
53:54:e6:17:97:6b:c7:6f:7b:d2:ca:be:4e:e6:36:
21:3c:b2:25:82:f1:c8:6f:a7:4e:8b:58:03:d7:ae:
f1:9d:8b:07:dd:c8:9d:e6:a6:f3:f3:94:5a:96:b8:
70:70:cb:df:da:f2:de:7b:da:52:68:03:fc:4f:92:
05:05:03:c2:a5:df:ae:de:db:b7:23:da:fc:9e:89:
29:44:d7:37:ba:7c:5f:a2:ed:92:c8:e3:41:8d:82:
fb:e6:38:55:9f:7d:00:4e:5f:7f:b9:40:1e:a5:be:
bd:16:15:9f:46:fe:08:64:7c:cf:27:6d:5d:c5:fd:
5e:88:46:b9:8f:dc:6e:22:30:82:b4:60:e8:17:0f:
b1:8a:b0:6c:c6:8f:b5:d9:fd:61:fd:7f:28:85:bf:
ba:79:a6:14:21:27:0d:ea:73:48:9f:51:91:60:e2:
85:ab:5b:a6:62:e8:2f:04:d4:19:15:c2:9b:0d:20:
d6:99:98:c0:b8:4f:b9:27:15:b1:1c:b6:5e:25:a1:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:11:A6:91:2B:AE:9A:F0:E0:86:2E:4C:C4:47:D7:B6:74:DF:F2:9B
X509v3 Authority Key Identifier:
keyid:5D:15:8B:E6:1C:A9:11:BC:34:A8:87:00:5B:96:05:6F:4C:47:4B:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/5D158BE61CA911BC34A887005B96056F4C474B1E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5D158BE61CA911BC34A887005B96056F4C474B1E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D572EA2659715B3B002B9225A1529608FC29328B0BFED7958379A8EF9D006EF5/0/AS28079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.5.251.0/24
Signature Algorithm: sha256WithRSAEncryption
60:7c:51:7f:fe:7c:52:f9:01:86:bc:9e:7d:cd:c3:12:90:c8:
6e:fd:03:35:10:96:49:69:e8:79:41:d8:c1:3d:79:27:c2:19:
78:fa:ed:48:10:a6:79:50:df:1a:a0:a4:9d:fd:9c:86:0e:7e:
39:8e:83:92:ca:8f:65:a3:8e:4f:7e:50:5a:ee:e6:61:c1:10:
4d:72:21:32:ce:53:bb:e9:1b:29:30:cc:47:81:27:35:f8:77:
c4:b0:88:c4:42:b2:43:1c:95:f2:c6:75:95:89:6e:66:a9:89:
97:ca:c8:56:9e:a1:7e:34:a7:dc:7f:21:01:c2:1b:2c:b8:e0:
f4:26:12:11:fd:a6:6a:51:69:dd:df:f5:46:3d:74:65:eb:e2:
70:75:13:3c:86:1e:55:f1:ac:c4:e5:bb:ae:3f:23:6e:45:6e:
1d:64:16:57:10:0e:0a:6f:2e:16:bf:b6:94:86:48:d6:75:a4:
4f:1d:3c:65:1e:9d:fb:e4:38:e5:82:0f:68:a9:43:81:0a:fc:
2e:b4:c6:89:2a:96:cc:43:72:36:bc:1a:30:83:b3:ba:95:31:
1d:33:37:b5:b2:24:fd:e6:ed:0a:21:9c:01:b6:60:b8:1d:75:
a6:fd:23:a1:87:ab:03:96:dd:58:e0:e9:73:24:b2:02:db:bd:
ac:f2:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:59:36 2025 by rpki-client