Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/aa78fd79d9a4dc5b9456cc52ce73dba02a1eabe4.roa
File: aa78fd79d9a4dc5b9456cc52ce73dba02a1eabe4.roa (raw, json)
Hash identifier: 93D6wZwerscJR9R6TOqRLMdpGiYzjBByYCpUBFn+lDE=
Subject key identifier: 4B:78:68:55:F1:0D:03:B4:B8:3E:9B:43:00:07:37:40:50:BD:6C:17
Certificate issuer: /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial: 1DFA0A
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/aa78fd79d9a4dc5b9456cc52ce73dba02a1eabe4.roa
Signing time: Mon 08 May 2023 17:10:30 +0000
ROA not before: Sun 07 May 2023 17:10:30 +0000
ROA not after: Thu 08 May 2025 17:10:30 +0000
asID: 28548
IP address blocks: 189.202.230.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1964554 (0x1dfa0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Validity
Not Before: May 7 17:10:30 2023 GMT
Not After : May 8 17:10:30 2025 GMT
Subject: CN=aa78fd79d9a4dc5b9456cc52ce73dba02a1eabe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:00:12:3d:55:4b:15:73:79:c5:d0:cf:1c:
cc:d0:31:84:44:4a:bc:5a:12:55:da:e9:6e:74:3f:
80:2a:e2:c7:8e:92:e4:94:ff:5f:c2:da:38:a7:68:
44:d4:04:3e:54:c2:0e:7a:5c:ee:e1:f9:9e:55:44:
6e:45:e9:c9:fb:5c:22:54:6c:46:9c:0f:d7:e5:8e:
2b:e1:37:ea:e8:c3:17:01:48:33:a3:7a:94:83:63:
88:f6:84:a4:14:db:69:8b:32:f4:44:b3:65:9d:d9:
7c:c5:81:1f:3b:d0:02:a0:9e:ae:a1:25:1a:08:22:
9d:fb:eb:a8:44:44:a8:f0:44:4d:65:0f:fa:6a:48:
fd:26:cc:93:48:81:a6:95:ff:90:32:8c:b6:a6:fd:
bd:00:08:ca:20:10:b1:59:00:bc:bf:eb:75:9e:16:
f1:67:de:ce:b9:21:86:0e:dd:df:f6:59:05:f9:bc:
16:d7:d7:81:8e:56:5a:96:f3:8b:a1:94:70:57:92:
6e:2a:35:1d:b3:33:a0:fe:c1:c9:d6:12:c6:4f:90:
ad:47:9d:9e:9d:a7:33:be:22:49:19:e0:73:13:db:
7e:79:42:d3:61:ee:a9:3d:91:1a:48:f1:ec:3a:e1:
b3:3a:5e:fb:fb:6e:8d:e8:74:5c:1a:99:ad:9b:78:
7d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:78:68:55:F1:0D:03:B4:B8:3E:9B:43:00:07:37:40:50:BD:6C:17
X509v3 Authority Key Identifier:
keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/aa78fd79d9a4dc5b9456cc52ce73dba02a1eabe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.202.230.0/23
Signature Algorithm: sha256WithRSAEncryption
84:1f:f7:91:8f:2c:f7:e9:98:f6:1e:6d:27:2f:fd:2a:7e:8d:
44:7b:8a:f5:3c:e5:6a:23:bb:3c:73:ad:ca:69:14:d9:de:88:
80:27:af:a0:b6:fe:6f:6a:ee:29:18:14:7f:ab:da:63:79:ed:
35:29:a8:f3:b0:57:e1:6e:cc:d0:0c:c1:83:bd:40:ca:26:74:
87:a9:b9:2c:f1:55:7d:15:f4:d0:61:34:3d:28:6e:b5:22:68:
b1:69:3a:ad:82:b3:42:2b:52:50:aa:71:53:09:57:05:c5:37:
4d:ad:6e:af:1f:e8:1a:82:48:24:b6:15:df:e2:2a:8c:7e:7d:
b9:fd:61:80:b0:e2:dc:8f:ac:57:6a:7d:ac:4b:f3:ce:91:5c:
14:5f:9a:ae:f5:0f:16:ef:db:f2:92:c7:51:49:a4:49:7a:ef:
7a:d4:f9:e6:24:e4:bc:70:9b:b6:0d:b8:e6:eb:77:c6:88:f8:
d2:55:da:e5:b2:47:39:a1:2e:9b:c7:b1:43:cc:7d:f9:58:31:
01:55:9b:87:a7:2b:21:6e:a4:07:90:3d:b7:29:5e:93:4a:5d:
f4:e3:78:58:fa:17:7f:91:91:ac:5f:e0:a0:e1:81:e0:08:08:
dc:36:7a:1a:c0:1d:44:8b:8c:2f:11:6c:57:2a:e6:8d:0a:35:
3a:41:ed:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org