Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/a7ffe63b04758470de697ffa2a84e14f44f7a8a0.roa
File: a7ffe63b04758470de697ffa2a84e14f44f7a8a0.roa (raw, json)
Hash identifier: xJp9T/bP1Ts2geuOgz4MZMhoqaAiWhFJtg1HSW9GGro=
Subject key identifier: 73:8D:34:CE:A8:0D:8F:45:21:7F:94:6E:DD:83:0B:73:76:6E:EC:E2
Certificate issuer: /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial: 0D9E71
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/a7ffe63b04758470de697ffa2a84e14f44f7a8a0.roa
Signing time: Wed 24 Mar 2021 14:35:13 +0000
ROA not before: Wed 24 Mar 2021 14:35:11 +0000
ROA not after: Tue 24 Mar 2026 14:35:11 +0000
asID: 19429
IP address blocks: 186.28.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 892529 (0xd9e71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Validity
Not Before: Mar 24 14:35:11 2021 GMT
Not After : Mar 24 14:35:11 2026 GMT
Subject: CN=a7ffe63b04758470de697ffa2a84e14f44f7a8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5f:b9:99:52:70:b3:7e:74:b4:08:38:02:f4:
de:ce:18:dd:7f:d1:d4:29:24:09:b6:66:c6:32:51:
89:d1:33:e3:62:aa:38:33:8c:21:c3:93:d2:af:75:
48:a0:b6:e6:4a:b5:ed:37:1a:a5:44:3a:e8:d8:f8:
18:aa:51:74:31:50:bd:fc:d6:81:2b:28:83:bb:f3:
1a:d5:a8:e5:49:cd:c2:31:ce:28:f0:4d:aa:47:cf:
d8:cf:c1:61:97:a8:39:77:7e:78:9c:5d:14:fb:8b:
75:d3:be:bb:d7:47:ff:7c:6c:e0:3c:92:64:9f:9a:
d5:a1:27:7e:ab:2c:9d:04:34:21:19:e5:0a:76:7f:
2c:85:b0:f9:d5:c1:ea:ba:ee:d4:07:3d:b3:c0:db:
5f:0a:04:75:39:16:e2:7e:86:11:a7:3a:86:2d:42:
aa:b8:f7:41:d4:be:81:99:06:09:7e:f9:5d:ce:d4:
c5:4a:d2:55:4d:7e:4e:f9:11:17:2d:0f:74:c2:e4:
8c:d5:cd:32:7e:52:8f:3c:7d:1e:dd:a5:30:c7:e9:
19:7b:fb:64:bc:b0:76:bb:d3:29:c7:0d:aa:76:9f:
cb:fc:20:4a:75:ff:0f:be:6a:35:c2:36:67:ba:4b:
b9:10:88:be:ee:af:8a:42:ee:cc:29:65:91:03:82:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8D:34:CE:A8:0D:8F:45:21:7F:94:6E:DD:83:0B:73:76:6E:EC:E2
X509v3 Authority Key Identifier:
keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/a7ffe63b04758470de697ffa2a84e14f44f7a8a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.28.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:e4:c4:1c:9b:1e:0a:3f:ac:00:12:76:fc:23:e8:28:5f:19:
9a:62:65:a1:9e:77:49:f4:4e:b5:0c:c3:5f:3a:36:3f:bd:e8:
f9:8e:36:b1:c8:e8:f6:e8:66:10:50:4b:8e:83:57:e3:71:77:
7c:b6:ac:bd:d9:8a:aa:1d:99:1e:39:5c:1d:49:ec:cd:63:e6:
22:5f:08:3a:be:fe:e8:0b:09:29:69:51:ac:11:ec:d5:d2:08:
cc:7f:f9:49:22:5b:55:aa:b2:7a:09:cd:12:6f:06:f1:00:2b:
9a:c0:65:2e:13:e8:b8:ab:56:28:4f:a3:52:29:74:da:61:7b:
a9:95:d8:00:41:c5:1a:3b:7e:2d:2b:fd:a8:d7:97:61:6b:cf:
e4:1d:f1:2b:99:e7:21:31:d0:97:60:cb:50:00:b6:fe:56:b5:
8b:56:bb:cb:52:ef:94:89:1c:e3:40:cc:df:ff:0f:13:74:77:
19:e0:99:08:24:57:cf:d2:1d:27:b4:f1:b0:20:b2:c5:d6:1d:
e9:f1:1e:4c:ee:45:47:da:aa:ea:d0:ed:0f:4d:43:49:6e:a0:
b2:18:f5:fb:57:22:e1:a4:5f:4d:45:b8:ad:94:ed:c4:44:04:
38:76:85:1f:00:49:f9:60:85:85:05:f7:33:9f:13:17:49:21:
a9:5f:df:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org