Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/d07e90bb5c5b42da7e76e4a06474ec66b92843f8.roa
File: d07e90bb5c5b42da7e76e4a06474ec66b92843f8.roa (raw, json)
Hash identifier: 3QyToHdQRxSTqbSVAfTwNnV6vR+TyD8jZ3JwO9Xqzqg=
Subject key identifier: A0:DD:F6:3E:3A:68:FA:91:55:8A:77:F6:25:39:62:D0:0C:36:CA:77
Certificate issuer: /CN=9e7d975858e57eba8aa9f3546843c2ca4ff98a40
Certificate serial: 23F740
Authority key identifier: DE:BC:71:7F:74:DB:DD:C0:04:1E:52:07:60:20:BD:59:47:54:E2:D9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/d07e90bb5c5b42da7e76e4a06474ec66b92843f8.roa
Signing time: Wed 18 Oct 2023 20:44:21 +0000
ROA not before: Tue 17 Oct 2023 20:44:21 +0000
ROA not after: Sat 18 Oct 2025 20:44:21 +0000
asID: 52262
IP address blocks: 191.103.92.0/23 maxlen: 24
191.103.67.0/24 maxlen: 24
191.103.69.0/24 maxlen: 24
191.103.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2357056 (0x23f740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e7d975858e57eba8aa9f3546843c2ca4ff98a40
Validity
Not Before: Oct 17 20:44:21 2023 GMT
Not After : Oct 18 20:44:21 2025 GMT
Subject: CN=d07e90bb5c5b42da7e76e4a06474ec66b92843f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:98:6f:ba:f0:32:92:17:c6:e2:05:90:ae:23:
14:26:68:55:f9:42:b1:c7:57:48:b7:c3:db:88:ed:
9b:70:21:36:fe:c1:28:0c:b3:b7:6a:84:78:e3:23:
87:8d:99:69:14:62:77:2f:34:d8:69:f5:d4:76:7e:
ab:d1:3f:06:c0:13:df:2e:d9:e6:02:26:00:fa:db:
87:0a:a6:a1:32:44:b9:77:e7:40:da:77:73:d3:7d:
bd:7c:bd:12:6b:29:87:1a:8d:28:98:6c:9f:37:79:
c3:5d:19:33:47:84:de:87:b8:99:c9:8d:51:60:8f:
d7:fe:92:8d:6b:25:24:44:fe:e0:16:1e:82:94:69:
4a:c9:43:91:41:a1:10:fb:a1:9b:b7:1f:05:cd:22:
51:e5:e4:21:ab:89:b3:b4:85:79:a1:2b:4d:07:f0:
ae:93:9e:c4:aa:5f:8e:58:07:b4:c2:36:d1:c2:91:
96:8f:1c:de:d7:c1:40:98:e4:c2:c6:09:5b:26:36:
bf:8c:41:9b:7b:0a:52:23:cd:1b:be:12:28:b3:a3:
8e:80:c1:5a:fe:d9:ed:91:98:9b:48:d6:09:15:e6:
d3:f6:94:4e:07:2b:a5:d1:45:ea:1f:04:97:fd:27:
b6:57:b6:9b:28:0d:67:eb:ce:0b:97:43:20:d1:65:
3c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DD:F6:3E:3A:68:FA:91:55:8A:77:F6:25:39:62:D0:0C:36:CA:77
X509v3 Authority Key Identifier:
keyid:DE:BC:71:7F:74:DB:DD:C0:04:1E:52:07:60:20:BD:59:47:54:E2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/d07e90bb5c5b42da7e76e4a06474ec66b92843f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c3f7d255-8da2-4a22-b327-761c4c752239/9e7d975858e57eba8aa9f3546843c2ca4ff98a40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.103.67.0/24
191.103.69.0/24
191.103.86.0/24
191.103.92.0/23
Signature Algorithm: sha256WithRSAEncryption
35:a3:25:37:40:1b:e5:9c:ab:d6:68:97:36:f6:3e:ec:ff:48:
14:a6:bf:14:14:2c:69:9b:58:45:24:52:6a:cf:7f:8e:ab:01:
62:93:a7:e7:8c:b8:d8:2b:f9:18:26:7f:88:da:19:5e:0a:be:
36:d6:b6:51:23:0c:be:85:d2:d3:51:a5:8b:1c:29:dc:9c:4b:
7d:22:ef:54:2a:21:ac:8b:12:f8:ce:86:2c:65:3a:e8:fc:07:
b7:0b:80:84:c3:17:3c:b7:44:5d:a0:ab:98:67:ff:00:df:9a:
40:24:49:53:36:dd:a9:14:61:47:99:db:73:4b:ed:29:ee:c4:
84:e7:a4:c6:29:c1:0f:f9:13:05:a9:81:47:a3:05:7b:ae:dd:
ee:80:7a:e5:65:a9:3f:e4:d9:32:9c:65:67:61:b6:44:7f:2f:
91:11:34:12:ad:e0:be:44:9d:84:79:f9:a0:7d:83:ca:4a:c7:
e9:19:3b:29:50:46:15:fc:61:7d:94:58:7d:82:ce:22:45:14:
fb:59:dd:d3:79:e4:55:6a:2f:91:85:38:2a:11:e5:5f:93:94:
6f:09:4e:b2:f4:9a:08:84:e2:39:45:85:62:ae:b2:fe:d0:80:
c4:19:f6:fa:20:5b:21:6f:18:f6:96:77:10:21:ed:e5:ea:af:
51:81:6f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org