Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/9707b84de63fdd44f90cf18658c841fc2e905391.roa
File: 9707b84de63fdd44f90cf18658c841fc2e905391.roa (raw, json)
Hash identifier: Vpys3nM3WIOONeyWn4cofsmnsjeM/SG6QKXJEFRvqls=
Subject key identifier: 5B:A1:EC:AB:EF:78:07:00:37:56:C1:78:87:E8:AF:6E:9D:56:A4:96
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 26E288
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/9707b84de63fdd44f90cf18658c841fc2e905391.roa
Signing time: Wed 30 Aug 2023 17:50:40 +0000
ROA not before: Tue 29 Aug 2023 17:50:30 +0000
ROA not after: Sat 30 Aug 2025 17:50:30 +0000
asID: 12956
IP address blocks: 190.66.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2548360 (0x26e288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Aug 29 17:50:30 2023 GMT
Not After : Aug 30 17:50:30 2025 GMT
Subject: CN=9707b84de63fdd44f90cf18658c841fc2e905391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ca:ef:06:0f:3e:ba:59:aa:6c:64:b9:a7:67:
89:0f:06:36:63:70:d3:34:27:17:42:5f:8f:b0:99:
62:f4:c3:b0:7e:60:53:c2:9f:57:41:5e:8a:c2:50:
d9:b4:7b:f1:65:8f:83:ab:29:96:b0:ca:fe:97:6c:
28:09:c5:19:10:ba:24:53:61:90:3a:ab:a7:43:3d:
b7:ba:38:5f:19:a3:9e:45:4b:92:05:6b:0d:9a:05:
3b:5f:a6:35:25:f4:00:2a:50:f9:14:1d:47:e8:84:
a1:69:32:36:ba:85:6f:b1:2c:2c:da:40:f7:d6:a8:
3f:3e:2b:fd:74:19:60:91:80:e9:37:70:e8:74:fe:
8d:c7:43:d5:e2:f7:a8:ce:68:05:91:90:c8:f9:2e:
40:b3:30:17:5d:8b:0d:b6:41:94:ed:9d:c5:ff:c2:
0b:6f:71:4b:7a:c3:d8:d7:48:8f:11:ca:2b:3a:65:
57:0c:61:0f:fa:00:47:03:d8:6c:6f:e4:c3:80:3b:
14:13:52:38:bb:0c:7d:5e:2d:9f:ed:e1:2f:17:81:
f2:2b:13:0a:45:f4:95:9f:ee:7a:6b:4b:db:4e:39:
08:8f:cc:10:c2:7b:df:fd:7f:e7:42:72:b5:96:16:
d5:d4:a2:c9:fd:c6:93:d4:cb:95:18:3b:3a:39:d0:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A1:EC:AB:EF:78:07:00:37:56:C1:78:87:E8:AF:6E:9D:56:A4:96
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/9707b84de63fdd44f90cf18658c841fc2e905391.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.66.4.0/24
Signature Algorithm: sha256WithRSAEncryption
62:61:6f:44:77:4c:5a:f1:bc:85:90:2b:d1:42:40:db:eb:4c:
85:34:60:df:02:8e:7c:06:69:16:1c:3d:79:e7:0b:3b:fd:13:
f0:0c:03:c6:61:38:3d:21:58:17:b2:25:17:a6:66:7b:a3:43:
50:1c:ad:45:a1:73:56:d0:b6:ed:4f:de:03:51:bf:be:65:bb:
ed:97:49:19:0a:b7:c7:86:4c:67:27:89:83:d4:19:3f:5b:94:
f5:26:16:8c:6f:b7:e2:bd:37:e0:11:5c:9f:f9:19:70:80:fc:
9c:61:2f:1e:f8:00:d3:53:8a:2c:7e:69:c0:47:59:c2:07:0e:
93:73:d6:d6:6e:1c:cc:8f:f9:72:4b:b7:f8:1c:4e:bf:43:90:
a4:d5:71:09:74:d2:33:4c:44:67:92:ba:db:99:87:8c:33:35:
5a:b8:6c:24:85:61:cd:2c:06:c9:3d:e9:50:01:ef:22:65:dd:
81:9a:a3:a4:9e:cc:ea:81:85:ce:c9:53:36:43:1d:2e:ed:db:
95:dc:ac:31:96:4d:b6:1f:2b:0b:c0:26:fe:72:71:a7:68:4a:
ab:fb:06:65:a8:38:8d:12:5b:2f:40:99:68:c8:49:55:e7:2a:
87:7d:a5:50:e8:e7:5f:34:b2:a9:22:fd:cd:14:1c:87:d6:cd:
8a:85:a4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org