Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/5a772586a2fa150a697c5bb8bc301cad15ef014a.roa
File: 5a772586a2fa150a697c5bb8bc301cad15ef014a.roa (raw, json)
Hash identifier: EzsVRUVUY0h2DkpFlAX0ROSxg0tVSSHdWd4rPZ0KZzs=
Subject key identifier: BE:F2:37:BD:C6:3E:FF:95:60:CA:DE:78:E8:36:1E:9B:0D:6A:FC:FB
Certificate issuer: /CN=5b57ec865ac261e0ae36d05374102c7827e41e4c
Certificate serial: 3DBB
Authority key identifier: 93:20:ED:01:88:81:BB:02:C8:2D:EA:13:20:D6:89:79:B8:68:A0:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b57ec865ac261e0ae36d05374102c7827e41e4c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/5a772586a2fa150a697c5bb8bc301cad15ef014a.roa
Signing time: Mon 17 Oct 2022 19:15:28 +0000
ROA not before: Sun 16 Oct 2022 19:12:35 +0000
ROA not after: Thu 17 Oct 2024 19:12:35 +0000
asID: 7155
IP address blocks: 190.52.118.0/24 maxlen: 24
190.52.120.0/24 maxlen: 24
190.52.122.0/24 maxlen: 24
190.52.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15803 (0x3dbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b57ec865ac261e0ae36d05374102c7827e41e4c
Validity
Not Before: Oct 16 19:12:35 2022 GMT
Not After : Oct 17 19:12:35 2024 GMT
Subject: CN=5a772586a2fa150a697c5bb8bc301cad15ef014a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:6d:55:48:ff:11:e8:c0:4e:88:b9:de:86:
a9:fa:11:70:44:ca:02:2f:57:5d:15:82:dc:fe:d1:
59:24:be:56:a2:ec:f0:83:bd:c0:ff:f6:5d:29:61:
a0:c4:56:5e:44:fa:12:34:6e:0e:ad:e2:7d:6d:35:
db:8d:37:28:bf:3e:1e:20:c8:73:a5:fa:7e:ac:d8:
af:09:07:1f:d6:93:61:a9:d1:c3:43:86:3c:b4:83:
60:ad:2d:27:67:f1:fd:b9:ec:c0:96:9d:e6:c0:b4:
46:8e:0e:9d:92:42:ff:ad:f4:9a:3a:43:ad:71:20:
21:53:7e:bb:88:5d:33:ec:8a:56:c5:25:0c:21:27:
64:fa:9d:f9:ca:cd:ca:2e:37:92:f2:c2:12:6b:85:
e8:5a:3d:9e:1e:86:54:87:d4:31:e6:56:9a:e0:8b:
b7:42:5b:43:59:1f:76:29:f4:0d:f8:08:5d:e4:1e:
e2:8e:02:ff:fd:c5:ba:d0:5f:ff:62:5b:6d:27:dd:
4e:21:9b:05:72:5b:0b:df:ae:93:83:63:b4:98:26:
16:8f:7d:80:6e:2d:56:97:ea:72:85:d9:dd:33:7e:
64:59:a6:dc:38:97:17:7a:40:06:4f:8e:2b:9e:66:
12:0c:18:a6:b3:ef:57:23:ba:30:92:d8:f2:18:c2:
26:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F2:37:BD:C6:3E:FF:95:60:CA:DE:78:E8:36:1E:9B:0D:6A:FC:FB
X509v3 Authority Key Identifier:
keyid:93:20:ED:01:88:81:BB:02:C8:2D:EA:13:20:D6:89:79:B8:68:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b57ec865ac261e0ae36d05374102c7827e41e4c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/5a772586a2fa150a697c5bb8bc301cad15ef014a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/5b57ec865ac261e0ae36d05374102c7827e41e4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.52.118.0/24
190.52.120.0/24
190.52.122.0/24
190.52.124.0/24
Signature Algorithm: sha256WithRSAEncryption
88:de:83:45:b6:f9:bf:4a:79:84:3a:8a:b4:cc:4b:51:79:14:
5d:d1:b8:aa:a1:c4:a0:ea:46:7e:38:8f:39:73:5f:1f:f9:d3:
00:e4:e2:2e:0a:81:62:d3:1b:4b:6d:25:04:89:3f:ac:fb:d8:
23:ab:af:25:72:32:58:71:ba:64:98:ad:c6:fe:26:47:a8:bf:
d0:6b:89:3d:13:80:c1:0c:e6:d9:55:42:41:e1:27:b4:af:be:
8f:77:bc:36:cc:8e:f9:b4:66:68:82:c7:55:37:f4:31:0c:7c:
bf:a7:8e:4e:f0:24:b0:8e:e6:f8:e1:a4:10:b0:b6:e1:75:c5:
4c:af:0d:2a:31:4b:00:25:c0:b0:a5:8a:a8:dd:85:a7:1f:12:
3f:d6:de:61:54:f8:6b:df:56:31:15:74:00:14:a2:80:3a:6f:
51:65:40:76:2e:c4:d6:6f:ed:a0:9a:c0:78:a7:bf:0a:16:24:
f1:a8:f8:43:9a:e2:90:92:ff:8b:a0:12:40:62:c3:cc:e7:b6:
70:49:dc:37:b5:c8:69:57:f6:3b:4f:48:37:66:c3:85:f6:7c:
09:86:cd:ca:ca:3a:a4:41:a1:e7:55:84:10:5d:ca:d3:a8:e3:
82:de:88:4a:db:fc:34:0d:dd:26:02:73:91:c5:8d:c7:c4:5d:
cc:23:20:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org