Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/ce5be86e2e4d90cd0df4fca4702f03252c8119c6.roa
File: ce5be86e2e4d90cd0df4fca4702f03252c8119c6.roa (raw, json)
Hash identifier: toJ5sTdYFysc5PWnRbQrzykYPFX3u9zcKAyzI8Z1n6E=
Subject key identifier: 7E:60:83:40:A6:34:44:BB:15:A6:77:4E:7D:5F:91:63:CA:6C:FF:E8
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 0E5928
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/ce5be86e2e4d90cd0df4fca4702f03252c8119c6.roa
Signing time: Tue 14 Nov 2023 22:34:34 +0000
ROA not before: Tue 14 Nov 2023 22:34:34 +0000
ROA not after: Fri 14 Nov 2025 22:34:34 +0000
asID: 22884
IP address blocks: 148.230.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 940328 (0xe5928)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: Nov 14 22:34:34 2023 GMT
Not After : Nov 14 22:34:34 2025 GMT
Subject: CN=ce5be86e2e4d90cd0df4fca4702f03252c8119c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:c6:fb:26:30:ed:67:8e:99:90:11:47:a6:
34:e0:21:00:b0:1a:14:83:97:36:6f:42:57:84:b5:
3d:3e:f2:f1:92:57:fd:3e:53:a2:2e:7a:3c:8a:d2:
2e:35:7c:15:56:21:d5:9c:f7:70:20:20:65:89:2b:
91:a7:95:b7:af:a6:09:73:45:df:a5:f8:54:37:c9:
e4:a4:cf:76:fb:0a:d1:c7:f2:24:91:8a:30:37:9b:
5e:ad:b0:a5:44:d6:62:57:98:ff:1a:d1:18:35:8f:
b4:0a:a3:c8:80:3f:e5:71:93:52:23:58:24:fd:97:
6a:57:89:4a:e0:33:9b:68:cc:d6:d8:06:92:78:b6:
ee:24:65:d4:f1:89:c3:1d:4d:bf:f2:a6:4b:45:ed:
1f:d6:56:6a:1f:03:1f:f0:28:fa:da:d2:e5:82:12:
73:e6:5d:7a:9f:2a:09:87:2a:89:55:cf:b2:18:52:
6e:0f:e0:46:4d:07:3e:7a:c0:1e:a9:8e:bb:9e:d3:
fe:0e:bc:d6:77:1d:ec:b2:54:8b:4d:43:ff:d2:7a:
70:32:77:e9:a2:1f:92:42:61:4f:6e:31:08:ea:60:
3c:26:c1:b9:c1:48:16:57:68:36:c9:c4:1d:d1:3d:
77:8c:d0:43:9a:2d:0a:ca:17:76:b9:67:b7:35:ec:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:60:83:40:A6:34:44:BB:15:A6:77:4E:7D:5F:91:63:CA:6C:FF:E8
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/ce5be86e2e4d90cd0df4fca4702f03252c8119c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.230.128.0/17
Signature Algorithm: sha256WithRSAEncryption
30:ba:8d:ff:07:e5:1a:23:0e:7f:a7:0b:86:8f:da:f9:6f:5a:
e9:64:64:aa:fe:15:fb:56:83:7c:34:c5:99:2e:11:1d:9a:f0:
48:23:aa:a1:45:80:94:3f:5d:62:d0:80:8f:a0:60:da:ec:a1:
e6:0b:b2:ef:94:93:3d:a7:18:7c:ac:4f:d3:9a:98:82:ff:e1:
6c:1c:91:5d:76:8b:c3:71:2e:fb:b4:05:b0:6c:36:9f:3d:3d:
ad:22:33:c8:13:46:a2:ae:81:d5:a4:7d:14:1e:1b:a7:51:4f:
8e:65:82:1d:bc:cb:14:1b:b4:6d:64:ba:02:84:92:ac:84:ef:
44:1b:c9:31:d4:fd:38:06:ce:54:66:ab:45:56:e2:5c:98:62:
c5:22:e0:9d:9d:fa:27:c0:29:c4:b8:49:f7:b8:3a:8c:1d:8a:
30:df:e6:94:17:70:23:d1:3e:fd:1b:f3:2a:2e:e1:58:37:dc:
b0:84:26:1c:44:71:da:ff:53:3a:52:0c:52:da:48:5a:cb:d9:
0f:f7:e6:e9:36:aa:46:d4:e3:68:c3:a3:74:03:97:f7:30:8e:
76:ed:96:96:c8:ea:4d:59:a4:14:d0:77:27:27:8c:7a:d4:c8:
7d:d4:4b:1e:c7:59:71:05:23:50:61:db:d9:90:17:b9:0b:a6:
ae:40:2e:0b
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDDlkoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
M2Q1Y2RiMTYwNzI2ZGM5MmUwNGVkNDZhNjU4ZWM2YmZjYmJkZDEwHhcNMjMxMTE0
MjIzNDM0WhcNMjUxMTE0MjIzNDM0WjAzMTEwLwYDVQQDEyhjZTViZTg2ZTJlNGQ5
MGNkMGRmNGZjYTQ3MDJmMDMyNTJjODExOWM2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwCHG+yYw7WeOmZARR6Y04CEAsBoUg5c2b0JXhLU9PvLxklf9
PlOiLno8itIuNXwVViHVnPdwICBliSuRp5W3r6YJc0XfpfhUN8nkpM92+wrRx/Ik
kYowN5terbClRNZiV5j/GtEYNY+0CqPIgD/lcZNSI1gk/ZdqV4lK4DObaMzW2AaS
eLbuJGXU8YnDHU2/8qZLRe0f1lZqHwMf8Cj62tLlghJz5l16nyoJhyqJVc+yGFJu
D+BGTQc+esAeqY67ntP+DrzWdx3sslSLTUP/0npwMnfpoh+SQmFPbjEI6mA8JsG5
wUgWV2g2ycQd0T13jNBDmi0Kyhd2uWe3NeycNQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFH5gg0CmNES7FaZ3Tn1fkWPKbP/oMB8GA1UdIwQYMBaAFI9xTwL31bpGSCLp
2dR7u2DVk6EyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTEzZDVj
ZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Q1YWQ2YzAtNDk5Yi00MzgwLTk4NGYtODc0Yzlm
NTFkMmZmL2NlNWJlODZlMmU0ZDkwY2QwZGY0ZmNhNDcwMmYwMzI1MmM4MTE5YzYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZDVhZDZjMC00OTliLTQzODAtOTg0Zi04NzRj
OWY1MWQyZmYvOTEzZDVjZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEB5TmgDANBgkqhkiG9w0BAQsFAAOCAQEAMLqN/wflGiMOf6cL
ho/a+W9a6WRkqv4V+1aDfDTFmS4RHZrwSCOqoUWAlD9dYtCAj6Bg2uyh5guy75ST
PacYfKxP05qYgv/hbByRXXaLw3Eu+7QFsGw2nz09rSIzyBNGoq6B1aR9FB4bp1FP
jmWCHbzLFBu0bWS6AoSSrITvRBvJMdT9OAbOVGarRVbiXJhixSLgnZ36J8ApxLhJ
97g6jB2KMN/mlBdwI9E+/RvzKi7hWDfcsIQmHERx2v9TOlIMUtpIWsvZD/fm6Taq
RtTjaMOjdAOX9zCOdu2WlsjqTVmkFNB3JyeMetTIfdRLHsdZcQUjUGHb2ZAXuQum
rkAuCw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org