Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/b08c45c3142deaaeeec97015169c6c9b53b23ebc.roa
File: b08c45c3142deaaeeec97015169c6c9b53b23ebc.roa (raw, json)
Hash identifier: XZWFZohomxlf9zZm/L07bHlKeujTa3wo+en8bcuqGZc=
Subject key identifier: 9B:09:BD:00:AF:B5:09:5C:B3:0C:4B:E9:5A:7E:0F:04:9B:D1:AB:40
Certificate issuer: /CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Certificate serial: 25E260
Authority key identifier: 82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/b08c45c3142deaaeeec97015169c6c9b53b23ebc.roa
Signing time: Mon 18 Sep 2023 11:36:40 +0000
ROA not before: Sun 17 Sep 2023 11:36:31 +0000
ROA not after: Mon 18 Sep 2028 11:36:31 +0000
asID: 20940
IP address blocks: 190.98.153.0/24 maxlen: 24
190.98.160.0/24 maxlen: 24
190.98.161.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2482784 (0x25e260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Validity
Not Before: Sep 17 11:36:31 2023 GMT
Not After : Sep 18 11:36:31 2028 GMT
Subject: CN=b08c45c3142deaaeeec97015169c6c9b53b23ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:28:4f:10:f6:ff:c2:96:bc:f4:64:44:5a:4b:
bc:ef:aa:48:fe:35:e1:9b:38:73:f9:ed:15:78:98:
3c:11:fc:cc:2d:8c:42:45:14:6b:86:39:39:cc:21:
14:c9:88:24:a1:54:4f:d0:ac:55:a0:ef:53:f1:8e:
e5:5d:72:4b:a1:c5:84:fb:f2:22:52:96:4e:c1:57:
a2:44:a5:44:ab:8e:c7:fc:8e:25:ae:fe:ca:e6:d6:
a0:7d:21:34:22:6c:15:52:7d:de:b2:74:c4:6d:55:
1e:fe:a9:2d:db:93:5d:75:f4:6c:76:cb:3c:16:0b:
2a:1e:e6:81:4a:3f:08:dc:5e:e0:f0:5e:95:c9:30:
52:1b:e0:bd:6e:af:92:04:b6:88:7e:e7:63:79:2f:
1a:d9:47:a7:8d:47:58:ec:09:d5:d2:1b:ef:bd:6b:
77:59:d2:de:a7:95:3a:15:07:9d:14:d8:e5:ee:05:
a4:8d:e2:cc:9c:43:42:f7:44:86:f8:ee:16:d1:51:
92:5c:9a:94:73:5d:de:07:f2:de:08:f2:0f:25:ea:
69:f2:33:b3:f4:40:9a:4c:b7:c3:aa:bc:7f:02:49:
ab:ec:a8:8e:91:f6:26:16:ad:74:9e:b2:49:9a:56:
cd:78:e3:4a:97:16:67:ed:82:44:fc:81:34:92:08:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:09:BD:00:AF:B5:09:5C:B3:0C:4B:E9:5A:7E:0F:04:9B:D1:AB:40
X509v3 Authority Key Identifier:
keyid:82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/b08c45c3142deaaeeec97015169c6c9b53b23ebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.98.153.0/24
190.98.160.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:a9:67:2c:d3:9e:d0:c3:9c:0f:83:28:1e:59:5a:2e:e0:6c:
d9:59:15:6f:8c:ca:48:81:57:ee:be:6c:09:98:d0:d2:c0:27:
28:c0:87:16:96:cf:ee:31:20:e0:70:f7:9e:ae:05:e2:7c:d7:
85:ce:f2:76:e3:1a:48:d7:dc:39:c2:d8:7f:1c:5d:31:61:82:
94:3c:78:ba:b0:a8:9c:94:ba:b0:78:89:e1:cf:fd:a4:47:5c:
46:08:19:3e:a8:ed:58:22:18:b5:a4:ac:d9:36:87:0f:19:03:
4f:33:d3:14:a2:3f:28:a4:a8:6b:c1:d1:04:70:2d:db:97:e7:
7c:37:94:b8:66:7f:7b:7d:d1:6f:e7:6a:4c:e6:ed:28:f4:13:
68:eb:13:90:69:2e:35:6b:57:d0:7a:ff:88:ec:a9:6a:08:01:
47:d1:2f:eb:4e:7e:a7:23:42:99:9d:7e:42:cf:83:43:fb:26:
6a:5a:e7:90:7b:b7:57:19:af:f8:73:e7:76:86:33:69:87:12:
5e:ff:7c:63:5e:f3:0d:a6:a7:47:3a:30:ae:a2:b3:d3:97:3d:
2b:ad:01:63:33:81:d9:10:25:83:e1:c1:1b:ce:28:b7:fb:4e:
e8:5e:bf:e4:be:63:79:11:d9:c2:a9:8c:02:e1:20:05:f6:7b:
71:5f:a8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org