Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/d1620b14b7d2ebeb24e66d381701547a94f76bb7.roa
File: d1620b14b7d2ebeb24e66d381701547a94f76bb7.roa (raw, json)
Hash identifier: 8PedsWCBCQzyaFB5jrorBp2l26anDwcWEMt5b35bc/Y=
Subject key identifier: 62:68:2D:A6:FE:EC:1D:78:4E:17:87:AB:57:71:44:FE:01:1B:C0:0E
Certificate issuer: /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial: 25B5D5
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/d1620b14b7d2ebeb24e66d381701547a94f76bb7.roa
Signing time: Mon 18 Sep 2023 11:04:22 +0000
ROA not before: Sun 17 Sep 2023 11:04:11 +0000
ROA not after: Thu 18 Sep 2025 11:04:11 +0000
asID: 265867
IP address blocks: 190.98.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2471381 (0x25b5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Validity
Not Before: Sep 17 11:04:11 2023 GMT
Not After : Sep 18 11:04:11 2025 GMT
Subject: CN=d1620b14b7d2ebeb24e66d381701547a94f76bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7e:70:dc:c2:29:a7:76:ff:84:62:ae:c6:f3:
36:fd:89:a4:ce:91:29:ec:9e:78:71:f2:2c:84:f8:
fa:ea:38:3e:5e:6a:03:32:67:30:4f:91:06:86:a9:
2a:6a:03:80:7d:ce:b4:eb:2e:00:e7:96:8b:b2:a9:
66:6b:8f:a9:83:d3:8a:94:d4:9d:a7:66:68:3b:32:
8a:17:55:1c:d3:58:c1:44:12:e4:c9:f8:1c:c1:35:
6d:f0:d0:e0:50:7d:91:43:99:c9:ff:01:fd:97:94:
42:bb:2b:81:06:7d:cc:4d:14:e5:f3:0e:c1:32:3b:
ba:0a:94:36:4b:d0:a4:77:a1:22:5a:96:3f:11:f0:
01:c5:f0:b4:fe:38:ff:53:73:c6:4b:13:13:25:5d:
86:c9:39:53:f5:40:35:d1:d3:fe:99:f4:f4:f3:29:
f1:3b:e6:9c:41:8c:7b:f7:73:65:19:e9:a1:d5:80:
a0:cf:97:23:e9:86:cd:a0:12:b2:4f:da:89:13:4d:
81:6e:1a:8f:b8:38:0f:52:9e:1a:96:bc:f2:fd:79:
54:e8:da:41:9b:8e:ec:ab:ac:f2:11:1e:c0:7c:45:
66:c9:bb:43:41:ef:9f:d8:39:40:31:4e:e8:ec:32:
8f:c5:6d:41:36:72:fe:ef:8a:c5:b8:01:d2:36:ec:
40:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:68:2D:A6:FE:EC:1D:78:4E:17:87:AB:57:71:44:FE:01:1B:C0:0E
X509v3 Authority Key Identifier:
keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/d1620b14b7d2ebeb24e66d381701547a94f76bb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.98.128.0/24
Signature Algorithm: sha256WithRSAEncryption
90:bc:37:ac:98:8a:c9:9c:7f:cf:8b:3b:b0:ce:51:22:22:d4:
53:d8:30:87:68:e8:e3:04:0f:dd:a8:5c:aa:da:c5:70:aa:72:
6d:b7:7a:b8:4b:e3:46:0a:24:fc:b0:29:a4:d1:6a:f8:c2:b2:
f2:99:fe:67:ee:ff:c7:1e:b2:6a:a8:e8:7f:6a:29:84:cf:4c:
1e:e5:c7:13:f3:6f:25:df:ec:39:c8:dd:c7:c8:21:63:5e:5f:
7b:fd:08:6b:52:1d:22:7d:71:09:70:4f:02:dd:8a:23:14:f5:
0e:04:b7:c1:cb:c7:76:0a:77:7a:58:76:f6:ed:d9:6d:cb:bb:
9f:5b:5e:c3:13:ed:75:1d:8a:42:47:df:bb:1b:61:72:82:0a:
06:17:05:9e:a4:b2:1f:8e:5e:2f:75:90:68:10:6a:36:f5:07:
3b:59:a2:e3:60:d7:9c:ce:df:72:23:bc:38:f0:17:12:1c:d1:
db:85:26:70:4e:1e:20:07:fe:d3:48:bf:c4:67:51:82:e4:3e:
79:a2:a8:5c:8c:8f:81:a3:0d:27:24:75:e5:5e:b6:8b:24:74:
49:d9:65:fb:35:ed:a7:ff:b7:44:e2:a9:0d:97:80:db:74:44:
7a:8f:8a:14:16:86:c1:d8:de:ad:54:6c:a7:a8:fe:fc:90:99:
0e:69:d7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 12:16:37 2023 by rpki-client on console-fra.rpki-client.org