Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/3db5c8c5074d19acb4c280083d6f3dbaf553886e.roa
File: 3db5c8c5074d19acb4c280083d6f3dbaf553886e.roa (raw, json)
Hash identifier: cTAXcUmkljv1rXgQAUf4hnkG6DElnfsirJdIfHiveEc=
Subject key identifier: 65:08:8C:18:22:B0:05:F2:46:17:62:FD:8D:28:23:8D:2C:EE:00:5A
Certificate issuer: /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial: 1E1259
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/3db5c8c5074d19acb4c280083d6f3dbaf553886e.roa
Signing time: Mon 08 May 2023 17:10:32 +0000
ROA not before: Sun 07 May 2023 17:10:30 +0000
ROA not after: Thu 08 May 2025 17:10:30 +0000
asID: 28548
IP address blocks: 189.202.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1970777 (0x1e1259)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Validity
Not Before: May 7 17:10:30 2023 GMT
Not After : May 8 17:10:30 2025 GMT
Subject: CN=3db5c8c5074d19acb4c280083d6f3dbaf553886e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:b0:a8:51:a7:df:21:f7:f4:31:09:c9:f7:
a2:fb:97:3d:07:78:5d:ce:3f:9c:11:50:b6:85:bf:
c1:de:70:db:c7:06:18:61:a1:4a:eb:59:cf:90:59:
a6:d3:42:b9:5b:45:af:1a:a0:e3:27:a7:b7:7f:ca:
62:94:97:e7:a4:fd:37:c7:03:e4:27:79:79:17:40:
34:63:ca:01:c9:35:cb:eb:6c:e9:96:6d:d9:b5:07:
6b:13:56:59:f2:57:5f:f1:22:92:d3:a9:ec:d8:6c:
be:29:cd:cc:b1:bb:91:19:3f:1c:d7:31:5a:92:aa:
f7:95:2e:84:be:98:8b:6b:c7:2c:f0:68:99:6b:76:
50:dd:1f:17:10:4c:31:85:28:4d:11:9c:64:49:78:
34:aa:67:c1:f7:d7:d1:f9:e5:60:0a:d1:47:73:2f:
83:30:11:51:80:f2:af:24:45:cf:0f:32:13:8b:da:
d0:3a:ae:a8:35:ba:42:99:c6:ee:23:af:7e:64:dd:
12:3e:cd:39:a0:d3:4b:57:eb:06:fd:50:c3:d0:a4:
2d:54:53:72:82:c7:73:ae:4a:58:49:2c:d6:e9:96:
6e:d2:0a:19:5a:be:b3:0b:10:00:bd:2e:6e:c1:83:
e3:8e:65:7b:1c:70:b7:d7:40:3b:c0:e0:85:2c:6b:
f4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:08:8C:18:22:B0:05:F2:46:17:62:FD:8D:28:23:8D:2C:EE:00:5A
X509v3 Authority Key Identifier:
keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/3db5c8c5074d19acb4c280083d6f3dbaf553886e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.202.230.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:bb:8a:44:8f:d4:49:a0:e4:c9:43:93:fc:46:7e:e3:2a:8c:
36:55:ff:91:1c:98:7a:7f:1e:58:1a:da:df:7d:55:ab:d3:f2:
03:af:61:e8:69:8b:25:87:cd:62:0f:b9:ad:a7:23:66:70:d6:
d6:30:b7:6d:cb:c1:67:2b:5f:b5:77:d6:9e:6b:0e:da:3d:34:
e4:17:c2:63:3d:07:cf:68:1d:ea:fb:5f:57:0a:9e:b4:45:3f:
cd:4a:52:50:68:ee:4c:a0:ff:e5:72:c5:07:38:c3:ae:57:e2:
1b:88:a9:b0:e5:c3:f3:a4:3f:fa:d3:ab:21:35:7a:6e:70:73:
4c:53:55:cd:3f:44:0f:1f:6d:30:0e:dd:a5:03:63:5b:fd:46:
66:33:64:88:6a:1f:8b:4a:c3:22:10:5b:7a:2e:71:51:78:29:
71:c4:40:e4:e8:58:59:25:1c:1d:e2:15:4f:c5:92:10:d5:27:
d3:58:b9:b0:a1:19:07:73:3d:0f:ce:54:a7:6a:91:8f:25:8e:
7b:b8:fc:0e:d5:ff:b8:1e:d2:50:4c:36:45:96:fc:01:20:4b:
c5:e6:2a:3f:3c:f4:91:53:7d:d9:53:ac:21:33:c0:4b:31:80:
10:7f:6a:1c:50:33:32:d8:2a:46:ac:ea:93:ab:a3:f1:0b:ae:
0b:32:4a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org