Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/3dfd014315a87cd7643150044c676ea389f55859.roa
File: 3dfd014315a87cd7643150044c676ea389f55859.roa (raw, json)
Hash identifier: NU8hcTyoNdHJBsoXU9VmNgjMhtloEwLwKnC5H9Qwoqg=
Subject key identifier: 0C:CC:40:F6:AA:96:D4:EF:5A:90:50:27:4C:17:EF:DE:79:9D:8F:29
Certificate issuer: /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial: 1DFE6E
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/3dfd014315a87cd7643150044c676ea389f55859.roa
Signing time: Mon 08 May 2023 17:10:31 +0000
ROA not before: Sun 07 May 2023 17:10:30 +0000
ROA not after: Thu 08 May 2025 17:10:30 +0000
asID: 265541
IP address blocks: 189.204.164.0/23 maxlen: 23
189.204.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1965678 (0x1dfe6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Validity
Not Before: May 7 17:10:30 2023 GMT
Not After : May 8 17:10:30 2025 GMT
Subject: CN=3dfd014315a87cd7643150044c676ea389f55859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:6b:4c:7b:92:f0:06:f3:08:be:56:69:e2:
6b:94:b8:bd:6e:f6:08:4e:66:28:a7:5c:de:44:ef:
c6:ef:98:06:d8:ad:26:82:7b:f1:fe:27:f2:db:b6:
03:7f:c9:dc:85:e4:9a:9c:5f:ef:47:60:ab:6e:06:
7b:f7:b0:c5:d5:5e:7c:f0:70:47:07:2b:68:f6:61:
14:e3:81:28:69:e0:28:53:8d:f1:f7:5c:a8:84:7e:
29:69:d8:30:65:de:ae:4d:69:44:97:8a:a9:60:6d:
6b:0c:a1:23:5c:62:7f:23:b1:2b:60:d0:d7:7a:59:
6d:85:e7:57:61:14:48:97:01:65:f0:e4:0a:49:b0:
23:cf:1a:3d:a2:ca:8a:dd:51:3c:31:55:f4:7a:5f:
05:1d:35:1a:d6:6e:73:72:de:fe:08:e3:a4:d1:e4:
0a:9f:9c:df:0b:ef:8f:b9:b2:33:e4:fd:69:fc:bf:
5d:03:99:46:64:62:d9:71:25:e2:af:43:22:10:1f:
6f:e6:41:58:a2:7d:69:0f:21:c7:17:2c:f2:3d:78:
e5:fa:44:92:75:a0:be:4e:6c:55:ac:31:36:aa:71:
38:5e:48:d6:d1:21:8a:a9:88:15:99:89:88:ca:bf:
1e:e3:be:dc:e3:c2:79:4f:2a:82:78:b0:c7:4a:0d:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CC:40:F6:AA:96:D4:EF:5A:90:50:27:4C:17:EF:DE:79:9D:8F:29
X509v3 Authority Key Identifier:
keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/3dfd014315a87cd7643150044c676ea389f55859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.204.164.0/23
189.204.208.0/24
Signature Algorithm: sha256WithRSAEncryption
06:cc:f2:aa:57:e3:98:24:35:8e:ae:f0:b0:bc:88:59:df:1c:
b7:84:00:c5:e1:07:3e:b6:ed:2b:f2:12:16:8b:a0:db:20:ee:
0f:00:22:36:97:e3:29:21:78:49:2c:b2:96:7c:83:a9:01:79:
13:9b:67:c7:4a:be:b4:57:25:9e:bc:c5:96:12:93:4e:07:87:
30:63:11:a4:1c:ed:a3:46:72:11:47:12:69:79:cc:62:7f:dc:
03:49:ac:11:ba:ad:a3:78:11:49:eb:d0:2c:e8:50:7c:59:ef:
39:d5:0a:19:55:8e:86:8f:40:27:99:80:32:13:62:61:41:5a:
85:1e:79:e4:e6:f5:26:15:19:9d:02:86:06:df:60:2e:8f:42:
68:c1:f7:f0:a5:6d:67:cd:94:dc:7a:b5:9a:21:0e:e8:43:4c:
49:26:29:62:42:f7:26:55:5c:cb:ac:a8:cf:e2:39:ae:5f:c6:
a6:87:94:1e:ac:dc:a4:6f:33:77:60:00:a1:a6:3b:2c:d6:7c:
51:24:fb:7b:4b:1d:ce:e8:c8:5e:e5:e1:f7:ef:19:f6:81:80:
a6:01:4b:b3:fc:95:8c:60:ad:27:30:87:ed:76:4f:d7:f0:16:
4a:03:2c:55:cb:b8:b0:f1:dd:a6:d7:fc:8c:80:69:b2:f6:e5:
7d:0b:5c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:28 2024 by rpki-client on console-fra.rpki-client.org