Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/84403acc777a83e23aae32be94fa170ac43c2913.roa
File: 84403acc777a83e23aae32be94fa170ac43c2913.roa (raw, json)
Hash identifier: VUzpPaNfAFfTo8VBxPSGuySYre/OghtXPylAc5hvbu8=
Subject key identifier: 81:10:C9:20:91:7E:CC:58:E5:CE:E9:D1:F8:A5:43:CB:E8:59:8F:D3
Certificate issuer: /CN=c4935075ec435dbda09406df9fa324ff802f1d14
Certificate serial: 273637
Authority key identifier: 76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/84403acc777a83e23aae32be94fa170ac43c2913.roa
Signing time: Wed 24 Jan 2024 17:08:43 +0000
ROA not before: Wed 24 Jan 2024 17:08:42 +0000
ROA not after: Sat 24 Jan 2026 17:08:42 +0000
asID: 26617
IP address blocks: 190.14.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2569783 (0x273637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4935075ec435dbda09406df9fa324ff802f1d14
Validity
Not Before: Jan 24 17:08:42 2024 GMT
Not After : Jan 24 17:08:42 2026 GMT
Subject: CN=84403acc777a83e23aae32be94fa170ac43c2913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f6:57:2d:33:ee:99:a4:9f:4c:ba:b1:ce:4d:
cf:6e:f6:1d:88:99:50:b2:87:84:f1:3c:a4:b4:c0:
f5:9a:6d:a8:f3:1e:c8:31:2e:49:34:e6:74:95:68:
39:7d:d0:f4:e7:f3:57:2e:50:5f:a5:16:44:da:31:
b4:7c:3c:12:23:b3:f5:b0:d9:4d:26:4d:5c:ab:fe:
20:b8:7a:2c:a8:8e:1a:52:f3:64:e8:4f:d5:22:55:
52:27:a0:60:a2:8e:74:44:27:98:f6:03:ea:51:5b:
c4:1c:f0:66:67:8a:70:50:ec:3c:c3:d4:9d:4e:8f:
04:ea:8e:95:5f:9a:5b:4d:73:50:5d:c8:77:65:1a:
b3:9e:36:90:ed:b7:a6:85:be:f2:9f:41:8c:b5:65:
f9:cd:b0:6c:f9:87:e4:04:da:01:c8:bc:7e:05:c4:
78:3e:b8:db:c2:31:f0:10:4e:75:83:61:b2:53:24:
ac:14:24:aa:ee:b0:76:f8:2f:a7:c8:9d:97:0d:2c:
9c:ad:33:ba:19:2f:24:44:5a:c6:28:46:e5:38:41:
91:bd:7a:42:7f:c2:70:f9:ca:dd:8c:5c:4a:85:3e:
1d:2e:b3:e8:b0:d4:78:c7:a6:fc:88:da:88:0e:95:
68:28:80:ec:b7:aa:90:30:a4:c0:03:97:a4:c9:d5:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:10:C9:20:91:7E:CC:58:E5:CE:E9:D1:F8:A5:43:CB:E8:59:8F:D3
X509v3 Authority Key Identifier:
keyid:76:83:16:F0:88:5D:BF:BD:21:FF:F5:2D:ED:2B:87:BE:D1:53:D7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4935075ec435dbda09406df9fa324ff802f1d14.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/84403acc777a83e23aae32be94fa170ac43c2913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bef91ee1-4224-4c1c-aee6-5ce138641c48/c4935075ec435dbda09406df9fa324ff802f1d14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.14.11.0/24
Signature Algorithm: sha256WithRSAEncryption
50:3f:84:cb:52:ec:29:1a:0f:db:48:dc:05:d2:87:59:7c:5d:
8d:52:1f:71:83:20:33:68:90:5e:08:10:26:22:f6:63:c6:c5:
13:25:18:82:41:59:a5:dd:02:5d:e5:27:87:f1:e5:70:88:24:
14:7f:0b:34:fc:1b:16:29:31:0d:62:5e:2c:08:cc:ef:6d:4f:
dd:1d:c1:c5:37:f8:27:f4:b5:a1:b5:c6:75:70:5c:21:dd:8d:
a6:29:41:ed:ba:28:9e:3c:2a:06:93:8c:1b:b6:d9:c9:c3:53:
b0:1e:ca:96:13:0b:30:fb:93:bb:36:39:e1:a2:4b:f6:00:7a:
7c:de:49:6f:49:92:c5:fc:ed:c9:11:50:cb:7b:80:26:05:f7:
eb:c0:da:d3:76:ba:48:7f:af:4a:7a:cf:a3:63:66:3c:df:e3:
d3:5c:0b:32:15:2a:63:3e:29:43:9c:2a:5c:93:50:5a:f6:33:
e5:83:13:28:b7:f1:1a:9d:78:49:51:48:44:e1:2f:74:2a:97:
57:3b:a1:a0:7f:f3:0e:ea:77:2f:43:d1:a1:76:32:61:a4:91:
07:f4:1c:0e:31:b8:ce:51:a8:9f:c0:d9:b6:8b:3e:ff:fc:12:
4f:c9:ae:63:83:ff:a5:5b:d3:1d:f4:e7:9d:96:82:aa:74:87:
1f:cd:23:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org