Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/42a7af2041be53cfd35a9630ce1e3ab95052d444.roa
File: 42a7af2041be53cfd35a9630ce1e3ab95052d444.roa (raw, json)
Hash identifier: JYU3gacTcUjVwxizQ+l+A7SwzGNXkbiXH4Jdl6T2gog=
Subject key identifier: FD:C3:87:9A:4F:69:4A:29:1D:64:E4:CE:F7:92:71:00:F7:71:40:5B
Certificate issuer: /CN=a1e706ce8128add2b25ca400a695dc4620ac6e0f
Certificate serial: 12D3F9
Authority key identifier: 5E:D1:5A:C7:56:2D:40:AA:73:65:03:62:76:86:9E:A5:01:69:A5:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1e706ce8128add2b25ca400a695dc4620ac6e0f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/42a7af2041be53cfd35a9630ce1e3ab95052d444.roa
Signing time: Sat 04 Nov 2023 07:30:01 +0000
ROA not before: Sat 04 Nov 2023 07:30:01 +0000
ROA not after: Mon 03 Nov 2025 07:30:01 +0000
asID: 52420
IP address blocks: 190.11.128.0/19 maxlen: 24
190.11.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1233913 (0x12d3f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e706ce8128add2b25ca400a695dc4620ac6e0f
Validity
Not Before: Nov 4 07:30:01 2023 GMT
Not After : Nov 3 07:30:01 2025 GMT
Subject: CN=42a7af2041be53cfd35a9630ce1e3ab95052d444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5b:50:02:05:38:f8:db:5d:81:c3:d7:01:8f:
ae:e1:61:88:59:76:dc:94:7a:42:a8:48:db:87:6f:
81:77:31:22:1a:9b:d9:3b:e0:3a:be:e3:ce:c3:b9:
20:f7:d0:68:7a:83:e3:44:5d:d6:9e:92:94:5e:1e:
df:d8:77:6b:32:64:df:ac:5f:bb:2c:d7:fa:c2:45:
69:4c:fa:c4:85:b5:3d:e0:48:3d:0d:60:e1:aa:99:
47:4f:f3:78:d7:02:fa:71:1e:fa:74:5e:05:52:8d:
26:74:c1:f5:9a:75:f3:b8:b0:ad:08:88:7a:69:29:
f9:31:89:b2:cd:99:69:2e:0c:da:e0:9d:0f:68:ee:
f7:88:3a:31:af:c9:a2:9b:2a:1a:05:5e:b7:f3:ad:
3c:71:a0:10:3e:77:eb:57:dc:b9:53:3d:a8:11:48:
cd:d0:45:24:7c:1a:be:eb:8d:e7:1a:30:86:7d:4c:
70:46:82:44:ba:77:dc:93:f6:08:e2:e4:e9:29:52:
b5:65:48:a0:e1:ad:58:66:68:b8:04:93:ef:9b:94:
0c:f0:f2:dd:c3:0d:02:74:14:02:48:5e:93:d3:fe:
dd:57:a2:00:6a:18:81:8e:6d:1c:e5:2d:3b:80:38:
aa:b3:06:18:1f:bc:d3:5c:f4:15:8a:9d:05:fe:13:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:87:9A:4F:69:4A:29:1D:64:E4:CE:F7:92:71:00:F7:71:40:5B
X509v3 Authority Key Identifier:
keyid:5E:D1:5A:C7:56:2D:40:AA:73:65:03:62:76:86:9E:A5:01:69:A5:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1e706ce8128add2b25ca400a695dc4620ac6e0f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/42a7af2041be53cfd35a9630ce1e3ab95052d444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/a1e706ce8128add2b25ca400a695dc4620ac6e0f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.11.128.0/18
Signature Algorithm: sha256WithRSAEncryption
03:e0:eb:c8:22:08:25:3d:26:a8:9d:d5:0f:99:1b:3d:6d:7e:
91:03:16:7f:92:cb:55:42:c0:b2:46:32:e3:f3:ef:f7:42:5b:
eb:a0:f6:96:fa:76:6a:f7:c6:90:7a:b1:e1:e3:4f:6d:3e:d9:
4a:0a:1f:1e:ac:7c:de:22:76:49:ac:a8:f7:e8:22:f0:7c:b1:
94:fe:4c:7f:cf:ce:11:1a:50:95:f4:ea:d4:c7:65:87:ab:8f:
88:85:f7:3a:30:83:e7:11:53:fa:c8:59:4d:b4:38:f2:e1:56:
fd:9f:d9:2e:2a:0d:f6:0e:84:03:01:e7:ba:4c:00:76:ce:dd:
09:6c:99:25:e3:d7:80:82:8f:f7:e5:10:dd:b2:f5:25:19:df:
e1:d6:4e:c8:af:60:2f:f1:8f:4c:c3:c2:55:49:5c:80:75:27:
4a:3e:81:09:d8:db:5a:f5:d1:3b:47:d7:7e:cb:1a:d3:39:85:
88:95:ec:71:9b:45:dd:90:7d:90:5f:90:eb:0f:fc:77:59:1d:
ec:62:a1:25:58:94:b1:e0:ff:52:33:d9:db:78:85:a6:68:fd:
42:e7:8b:9d:b4:90:c5:c5:eb:eb:67:39:5b:91:5c:7c:fd:5f:
ed:91:dc:0d:d8:cc:98:9f:bb:3f:93:01:ab:7a:6f:80:af:60:
34:84:7e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org