Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/6fa659a1c6ee7dd308b9fc251ce5a042e668875d.roa
File: 6fa659a1c6ee7dd308b9fc251ce5a042e668875d.roa (raw, json)
Hash identifier: zvQUDOezdb66gEVQymPzauEgVCnJ4Mxib/oECSy8lYY=
Subject key identifier: 40:80:F3:11:2B:29:07:5B:30:42:DB:98:FB:BC:95:0A:B6:EF:76:EC
Certificate issuer: /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial: 291174
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/6fa659a1c6ee7dd308b9fc251ce5a042e668875d.roa
Signing time: Tue 16 Jan 2024 17:41:27 +0000
ROA not before: Tue 16 Jan 2024 17:41:27 +0000
ROA not after: Fri 16 Jan 2026 17:41:27 +0000
asID: 28011
IP address blocks: 190.152.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691444 (0x291174)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Validity
Not Before: Jan 16 17:41:27 2024 GMT
Not After : Jan 16 17:41:27 2026 GMT
Subject: CN=6fa659a1c6ee7dd308b9fc251ce5a042e668875d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:48:0f:b9:d8:76:e3:c5:a9:d0:a6:e3:bd:
c2:23:38:21:e9:bf:dc:e3:d6:f5:5c:16:dc:04:dd:
e9:d3:85:be:9b:05:4b:27:ee:89:8c:2e:f5:76:83:
c9:e8:5a:db:1c:46:1a:dc:39:99:58:4e:a9:7e:22:
5d:ef:22:26:a6:f7:77:e5:14:f4:13:f2:bb:99:9e:
a2:ab:cb:d4:de:4d:25:5f:28:9c:a7:df:78:4f:79:
84:f9:40:64:4f:50:c5:e8:ea:ab:6a:52:0c:ab:d6:
44:f3:fe:82:e1:fb:ea:33:ef:6a:bf:d8:16:eb:f5:
61:10:b4:18:7f:2e:e9:16:18:24:fa:77:90:39:82:
cd:28:56:f4:c5:da:69:b7:64:da:90:d0:f3:b8:f3:
64:a9:88:b4:d6:93:cc:38:51:39:2c:93:e4:a9:90:
e9:5d:48:4f:b8:38:1e:be:8e:3d:73:04:dc:71:ab:
ee:1b:f9:e1:fc:3e:e7:0b:d5:4d:95:9d:b4:ae:dc:
c2:41:4e:c5:cb:63:98:de:4c:f6:38:fb:4c:f8:25:
c9:ab:88:2c:ee:ad:db:d5:35:3a:d0:d6:ef:98:8e:
ef:2c:2f:14:2d:3d:17:44:9a:56:b9:db:ec:11:76:
81:60:5f:b6:a6:e2:30:83:ff:c7:f0:a8:16:e5:e4:
cb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:80:F3:11:2B:29:07:5B:30:42:DB:98:FB:BC:95:0A:B6:EF:76:EC
X509v3 Authority Key Identifier:
keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/6fa659a1c6ee7dd308b9fc251ce5a042e668875d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.152.252.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d6:9a:2e:5b:81:90:0b:e2:7c:d0:38:30:f9:9a:06:f9:16:
dc:fb:b7:15:0a:9a:be:4f:91:76:ec:14:e3:dd:02:1d:08:11:
84:db:b6:51:00:13:6f:c7:89:84:f4:db:21:0a:50:ed:45:9e:
75:24:fb:68:18:bf:c3:f3:da:11:60:f9:9e:15:47:ac:1f:fa:
93:8e:26:51:ff:0a:21:bc:7e:e6:73:68:99:ae:79:15:30:26:
72:e1:f7:a8:50:65:af:49:24:1d:6f:fb:ea:92:83:84:0e:38:
01:d6:9f:ef:bc:c4:fa:1e:0e:2b:c9:cd:b3:92:3f:b2:ab:2e:
1f:6b:56:48:2d:e8:05:0c:08:d5:e5:55:31:4a:6e:18:b2:32:
e9:63:d1:9d:0d:dc:16:12:95:46:67:d9:c1:b0:98:96:3f:06:
a6:24:51:ec:6b:a2:3a:0e:0d:04:1a:0f:ad:5c:69:61:44:2b:
4a:7b:08:13:6d:85:21:54:af:49:62:c2:79:58:89:8c:07:88:
49:ab:8d:c6:8c:4b:e3:cf:36:f0:36:ac:f1:0a:b2:7c:9a:63:
1a:c9:f5:c0:74:5e:61:15:1f:3e:a1:b7:7a:59:78:7f:a3:1c:
7a:b5:28:02:c2:5a:f9:1e:18:e1:c3:5b:6d:e2:ed:38:30:ed:
9b:dd:07:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org