Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4de43255f0e76efa8b5f79cd888757cdde20833a.roa
File: 4de43255f0e76efa8b5f79cd888757cdde20833a.roa (raw, json)
Hash identifier: iLHJ+gPITM2rzbEtA9GVExzN5UNZLITS9S7AlpjLesU=
Subject key identifier: 44:D3:A9:3F:5E:0D:34:A9:DD:48:45:59:A5:CE:62:BF:B7:B5:64:52
Certificate issuer: /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial: 2A6EFD
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4de43255f0e76efa8b5f79cd888757cdde20833a.roa
Signing time: Wed 14 Feb 2024 13:39:54 +0000
ROA not before: Wed 14 Feb 2024 13:39:34 +0000
ROA not after: Wed 14 Feb 2029 13:39:34 +0000
asID: 63375
IP address blocks: 190.93.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2780925 (0x2a6efd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Validity
Not Before: Feb 14 13:39:34 2024 GMT
Not After : Feb 14 13:39:34 2029 GMT
Subject: CN=4de43255f0e76efa8b5f79cd888757cdde20833a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ac:2d:a0:de:74:89:71:46:f8:cd:99:f0:8f:
96:e7:67:90:af:ea:ff:a2:88:2b:bd:a8:f9:37:c1:
13:85:51:32:8f:6d:9b:c7:ee:da:90:a4:8b:24:71:
dc:0c:67:23:23:1f:77:b1:5e:61:66:b5:6e:a3:26:
82:dd:55:74:9a:41:61:50:a8:fb:22:80:cb:11:f4:
8b:67:89:4d:29:3b:bb:9e:1b:26:6a:b8:67:cf:f4:
b7:6d:56:66:a5:ca:12:55:e2:cc:42:61:7a:50:cd:
e5:85:a7:7d:31:ed:f0:89:73:a8:c8:5e:36:a6:b0:
50:40:e0:4a:a4:10:f5:72:51:7b:2e:cc:35:7f:25:
7d:d6:35:7a:aa:07:52:10:2b:95:8b:b3:d2:75:7e:
89:e1:b4:4d:0c:f8:6e:10:89:43:5c:25:d8:7c:1b:
fb:45:13:4d:d3:16:70:2e:4a:18:5f:1d:a2:8b:c3:
c3:96:6c:40:e0:f0:fb:d1:89:0f:60:e8:07:8d:d6:
2a:64:e8:fa:de:6c:0a:f3:0f:9f:07:f0:6e:55:c8:
b7:e8:07:01:1b:c8:a4:dd:fd:d6:c2:25:7f:40:dd:
37:d1:d5:61:a5:d5:e1:5e:29:ad:78:c1:03:ba:b2:
cc:4e:82:a4:69:7a:62:9f:87:c5:f6:26:46:32:7c:
9c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D3:A9:3F:5E:0D:34:A9:DD:48:45:59:A5:CE:62:BF:B7:B5:64:52
X509v3 Authority Key Identifier:
keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/4de43255f0e76efa8b5f79cd888757cdde20833a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.93.95.0/24
Signature Algorithm: sha256WithRSAEncryption
70:cd:9b:e2:df:41:ad:0e:d8:ea:93:c0:ff:89:fd:b8:9e:69:
52:08:b0:07:6e:61:b4:a9:33:8a:de:04:a5:bc:ef:62:6a:fd:
92:ce:da:c9:ce:cf:c0:ae:e9:29:2f:18:c7:e0:ec:ca:9b:e0:
5b:6b:91:65:64:05:e2:0f:b6:a9:fb:54:fd:1d:72:1d:0d:db:
bc:41:63:8e:c6:7f:97:df:b4:10:cf:c1:e0:47:43:09:db:a2:
f4:74:06:4d:f6:aa:b1:51:34:ce:e1:52:99:3d:f9:0e:5a:b9:
45:b4:25:9d:39:0c:06:6a:a2:46:b9:60:71:55:f2:77:37:e7:
b2:f0:41:f2:4f:08:77:12:fe:60:b4:5a:4a:74:86:f4:c0:78:
6c:62:4e:bf:f5:52:4e:7f:05:8d:4d:a4:66:da:a8:c7:c9:15:
af:e5:d2:5a:ae:bd:25:89:d9:e5:90:75:02:70:36:7b:c0:b5:
f3:df:48:64:a4:ff:3f:58:75:bd:2c:d4:1c:a7:8f:df:13:67:
7d:0b:67:2c:1a:9f:fb:d6:f2:36:9f:eb:0e:ef:1e:93:1c:f5:
f8:d1:7e:48:99:ca:8d:76:f0:49:4e:40:94:05:a9:6a:a6:0b:
c4:46:f4:a1:37:e5:fb:7c:e8:08:35:26:66:d0:b0:1d:a7:e6:
f4:11:a9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org