Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/17c5cfa886a08ddc3fefb453e6370234e994686c.roa
File: 17c5cfa886a08ddc3fefb453e6370234e994686c.roa (raw, json)
Hash identifier: WdQ5+zIhsVrWbPWXvXT80C5xlVs2n87rcTFI7RjrJ5w=
Subject key identifier: EA:D6:0B:ED:97:70:BA:8E:3F:55:85:CF:F5:F2:46:AF:76:D8:03:BE
Certificate issuer: /CN=da0cd30df4491331691a183f5b0a9260b7daadec
Certificate serial: 2904F9
Authority key identifier: 21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/17c5cfa886a08ddc3fefb453e6370234e994686c.roa
Signing time: Mon 18 Mar 2024 14:12:26 +0000
ROA not before: Mon 18 Mar 2024 14:12:19 +0000
ROA not after: Sun 18 Mar 2029 14:12:19 +0000
asID: 198949
IP address blocks: 190.149.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2688249 (0x2904f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da0cd30df4491331691a183f5b0a9260b7daadec
Validity
Not Before: Mar 18 14:12:19 2024 GMT
Not After : Mar 18 14:12:19 2029 GMT
Subject: CN=17c5cfa886a08ddc3fefb453e6370234e994686c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4f:ba:b2:fc:43:93:43:e2:2b:43:09:25:4e:
dc:e4:ab:4c:be:0c:aa:0f:59:fc:af:2e:63:f7:19:
65:48:76:fb:3d:c0:e0:8d:f0:a1:4b:9d:e5:36:8a:
37:7d:8d:93:25:bc:82:c7:5b:02:21:56:17:b9:34:
ef:10:3c:db:a2:bf:f9:f6:85:c0:35:7b:e6:8f:1e:
cf:a9:1e:65:12:04:eb:f1:4d:cc:65:d0:7c:9b:17:
2f:04:87:4c:61:0a:b8:3a:07:79:f3:18:c3:b0:a6:
7d:7c:07:25:c3:16:7c:6a:87:da:35:04:a9:6f:60:
7c:c4:0c:ee:2b:d6:e7:8a:fb:03:84:04:a8:27:85:
ae:81:29:03:6b:6b:e9:2c:c9:a0:13:ee:d8:bb:0f:
17:9c:44:01:16:cd:71:6b:8b:ed:38:27:37:21:60:
a6:b7:62:9f:05:82:72:e1:84:7d:43:91:17:15:43:
41:b0:bb:91:04:34:ab:73:7c:62:12:f7:fd:58:39:
76:f9:93:5d:1c:26:e1:59:b5:c7:62:15:60:c8:c9:
8d:46:f5:cf:38:ca:d6:d0:34:ba:42:a2:5a:13:09:
9b:ec:9c:ed:36:13:41:a3:91:66:df:19:87:aa:f1:
83:41:8d:95:a6:68:19:b6:9a:b4:b2:49:da:01:a6:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D6:0B:ED:97:70:BA:8E:3F:55:85:CF:F5:F2:46:AF:76:D8:03:BE
X509v3 Authority Key Identifier:
keyid:21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/17c5cfa886a08ddc3fefb453e6370234e994686c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/da0cd30df4491331691a183f5b0a9260b7daadec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.149.164.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:2a:5c:ae:32:b2:ac:7d:fd:d0:c2:ea:61:71:07:91:82:21:
b1:49:5e:0c:66:40:e1:53:9e:9b:8a:b1:d2:c5:5e:af:6d:3f:
bc:a2:da:76:15:99:2f:8d:6f:cb:f9:0f:21:9a:44:bd:32:ed:
7d:98:85:82:15:91:89:74:bb:3e:fa:36:3b:99:b1:98:7c:7a:
bc:c2:a3:2c:a8:a7:fa:83:f2:56:a3:cb:1c:58:d5:5c:ce:cc:
74:4b:9d:52:e5:46:64:8f:ab:c7:b8:28:18:9b:eb:69:e7:af:
9c:d8:84:3d:d9:64:a6:c1:48:4e:60:26:0c:d9:f5:25:04:34:
be:cc:f4:83:72:e1:b2:7a:5f:b7:51:b8:d7:57:1b:fb:67:e2:
e1:5e:cc:79:6a:72:4c:65:cd:e0:f5:40:06:19:3b:a0:2a:94:
3a:4d:8c:11:2a:6f:46:1c:53:78:53:a0:39:b5:75:74:c3:6e:
fb:c6:f5:4f:62:ca:77:58:32:89:76:48:70:8a:73:7f:7e:08:
6b:71:70:9b:b4:6c:4d:bf:c3:25:4c:66:91:7c:67:a7:49:86:
d2:76:f9:f8:ec:f2:1b:47:b6:13:a0:ca:18:ab:95:da:60:a1:
19:90:4c:c1:fc:bb:1b:b9:6c:21:64:00:e1:65:b6:4a:62:74:
a2:e9:31:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org