Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/404e0807cac324700db1336656f60e894196825c.roa
File: 404e0807cac324700db1336656f60e894196825c.roa (raw, json)
Hash identifier: R2X0ryxhTohCWvXUEZ/lP0iwDz8MKD7Xg1HMxLl5YE0=
Subject key identifier: 59:66:0B:86:D2:69:A2:C8:D3:9E:ED:DB:60:51:21:B9:64:FF:C0:BB
Certificate issuer: /CN=71ccf671605b5e725ec595356fba462b15442130
Certificate serial: 1A2C43
Authority key identifier: 2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/404e0807cac324700db1336656f60e894196825c.roa
Signing time: Tue 03 Oct 2023 08:30:03 +0000
ROA not before: Mon 02 Oct 2023 08:30:03 +0000
ROA not after: Wed 01 Oct 2025 08:30:03 +0000
asID: 271813
IP address blocks: 190.123.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1715267 (0x1a2c43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ccf671605b5e725ec595356fba462b15442130
Validity
Not Before: Oct 2 08:30:03 2023 GMT
Not After : Oct 1 08:30:03 2025 GMT
Subject: CN=404e0807cac324700db1336656f60e894196825c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:88:91:46:b6:49:18:8a:b3:c6:e2:85:62:8d:
13:bb:49:e7:01:16:52:3e:8b:fa:66:b3:b4:5c:7e:
bf:72:ea:98:03:2c:54:d4:59:d5:a5:1c:04:da:19:
a9:ea:e0:47:e5:67:da:61:28:05:bf:bf:a3:e9:42:
9a:fc:1a:21:c0:35:b1:56:67:d6:ee:53:79:dc:d1:
89:3f:9c:98:44:00:11:bb:59:bc:5f:4d:89:8f:f0:
cc:1f:ab:00:28:55:e8:07:cc:d8:25:9b:f9:a5:3a:
10:b3:da:78:f0:b9:42:75:e0:63:96:bd:94:2a:ae:
2b:59:d6:98:e6:30:fc:d3:05:d0:af:55:df:e1:e1:
74:c1:51:c4:56:b1:7f:fc:13:14:d9:3b:47:48:69:
ea:57:8f:b3:83:f0:af:c1:fe:d5:cc:e7:63:b6:ae:
6e:5d:7d:7e:6c:33:0f:2c:00:4c:86:10:82:4b:43:
20:13:50:7f:f3:fc:31:ac:03:93:22:3d:f8:74:24:
eb:a0:ee:3e:9e:50:78:1c:91:ed:25:9f:dc:52:58:
00:15:b4:02:35:c1:11:9a:3c:e4:eb:6f:91:6a:f3:
f5:10:fe:2d:a7:8a:09:17:48:5f:46:89:9f:f8:c0:
49:58:00:5a:6e:d2:9e:b6:d1:b4:87:41:bf:9c:32:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:66:0B:86:D2:69:A2:C8:D3:9E:ED:DB:60:51:21:B9:64:FF:C0:BB
X509v3 Authority Key Identifier:
keyid:2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/404e0807cac324700db1336656f60e894196825c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/71ccf671605b5e725ec595356fba462b15442130.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.123.67.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:28:83:03:4e:1f:10:79:b0:9d:0d:32:00:d6:b7:09:25:11:
02:42:5e:6a:c9:f9:1b:ff:52:eb:82:66:2e:da:fc:cb:52:09:
02:08:5c:99:fa:c0:06:95:be:16:0d:27:30:34:f3:dd:55:10:
c2:e6:2d:cd:90:05:85:92:26:d2:d0:b9:00:97:a6:e5:b8:57:
2e:a0:30:23:1b:c1:b0:63:56:15:94:48:fb:2c:ed:f0:58:0d:
6f:0a:2f:ce:b2:11:8f:26:67:81:94:55:5f:13:1f:b4:e8:2a:
21:24:91:a2:2b:84:40:b6:c9:35:5f:02:91:8d:e3:87:4f:b0:
f8:42:26:75:dd:92:09:39:01:ef:94:8d:c2:95:d6:28:74:67:
70:84:e6:42:c7:43:d4:57:ef:70:39:44:7a:96:3a:da:10:cc:
18:ea:46:08:91:19:c5:f4:2c:a6:a2:fd:f7:f5:81:d2:b4:a2:
a5:7d:9a:18:71:42:79:a4:1b:8e:7c:7c:db:67:15:18:54:4a:
29:0b:e1:1d:53:63:4f:6f:aa:a2:e7:9f:4a:a3:24:e4:3b:62:
2f:2f:00:7d:79:d9:d5:7b:a6:95:b7:ea:16:1b:a5:c0:7b:d7:
5f:03:44:cf:8e:98:c2:01:e7:a8:5e:a4:4c:57:3a:63:51:e6:
14:cd:bc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-ams.rpki-client.org