Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/d2ec7606a282b396d9c52e8b032bf4057307c7b2.roa
File: d2ec7606a282b396d9c52e8b032bf4057307c7b2.roa (raw, json)
Hash identifier: wPWb+1uGKmzaG/Rkt+uqDbrGIunxAAjbRYvjHpha7nA=
Subject key identifier: FA:5B:E8:BE:17:64:B4:3F:5D:21:63:A7:8B:93:65:11:5C:F8:A5:E2
Certificate issuer: /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial: 25B173
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/d2ec7606a282b396d9c52e8b032bf4057307c7b2.roa
Signing time: Mon 18 Sep 2023 11:04:20 +0000
ROA not before: Sun 17 Sep 2023 11:04:11 +0000
ROA not after: Thu 18 Sep 2025 11:04:11 +0000
asID: 20940
IP address blocks: 190.98.153.0/24 maxlen: 24
190.98.160.0/24 maxlen: 24
190.98.161.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2470259 (0x25b173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Validity
Not Before: Sep 17 11:04:11 2023 GMT
Not After : Sep 18 11:04:11 2025 GMT
Subject: CN=d2ec7606a282b396d9c52e8b032bf4057307c7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:3a:86:3d:89:11:7d:6f:07:f9:a6:68:4c:
6e:57:4c:6f:2e:67:40:45:df:7c:02:fc:de:30:16:
b7:32:1c:68:2c:3d:86:08:f8:5b:77:18:8a:ac:62:
02:a4:7d:93:04:26:5a:f0:0d:af:20:c1:c1:59:3e:
50:a4:04:38:2c:e7:7f:56:4c:62:8a:66:2a:9a:78:
f5:88:41:2f:bc:f0:ae:54:44:df:e7:b8:72:19:7f:
f5:6e:ab:fd:16:2c:5c:bd:67:5f:f8:9c:01:5f:cd:
c2:b1:a0:f2:ad:e4:0c:a4:7e:cb:c1:d8:f3:33:9b:
2d:d0:a7:d5:1c:7d:cd:46:bf:2d:f0:9a:d7:55:42:
b1:36:ca:97:6d:cb:d3:91:9a:8b:24:96:82:07:d6:
dc:b1:11:5e:9a:c8:94:41:d8:fe:2b:24:1f:5b:62:
83:c1:c6:da:a3:78:64:98:66:61:20:c1:42:9b:87:
fc:69:12:c6:46:88:ed:83:e5:f2:05:a9:85:f9:a8:
47:cb:6a:45:5b:20:9c:0d:21:7e:83:8d:14:04:b8:
b1:7d:c6:8b:ea:6f:84:a3:95:17:2d:dc:61:24:ae:
e6:ea:d4:c0:18:6b:62:20:83:df:0c:ea:b8:4a:88:
79:f0:79:d9:83:e8:fd:f1:d9:32:d4:3a:ac:9e:0c:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:E8:BE:17:64:B4:3F:5D:21:63:A7:8B:93:65:11:5C:F8:A5:E2
X509v3 Authority Key Identifier:
keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/d2ec7606a282b396d9c52e8b032bf4057307c7b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.98.153.0/24
190.98.160.0/23
Signature Algorithm: sha256WithRSAEncryption
25:bf:a8:82:17:09:66:d5:19:07:e7:b2:e0:a2:20:fe:74:7c:
88:0e:d8:ed:e8:be:b2:de:67:80:22:d6:dd:d4:07:dc:69:a0:
ff:3d:16:49:62:6a:df:26:80:dd:d5:5c:6a:49:a5:ec:6a:cb:
c1:74:75:55:3c:02:58:61:5d:3d:3c:a3:74:7f:d4:8f:cb:25:
b6:fa:bf:b7:1e:0f:1b:97:ec:59:7f:9c:54:a8:e0:6e:92:12:
6a:e2:f3:2b:f1:44:eb:fd:74:5c:24:cb:54:10:7b:f0:db:44:
83:b5:2e:ee:d8:7b:47:91:e0:a9:f0:9a:ba:15:91:ba:75:c6:
da:5a:47:d5:07:e2:fd:ba:90:19:4e:92:b1:e9:59:a1:84:ed:
7e:fd:e5:29:86:5b:1e:aa:e7:25:28:f9:04:f0:e3:c7:95:27:
d4:a7:e6:36:55:7a:2a:6b:a8:c4:f4:ea:d1:2e:d1:93:f8:c3:
cb:ac:05:dd:68:e5:07:4b:6e:01:29:ea:ae:50:19:69:ac:52:
29:45:72:65:3c:16:9a:aa:53:50:35:c8:1b:e8:2c:66:15:6a:
5c:59:03:54:80:ba:1e:ac:69:6a:fc:7f:e9:fd:f1:7e:83:ff:
9d:03:8c:fe:3e:59:28:7e:d6:01:af:48:7b:63:9b:40:2c:e2:
d7:f5:b4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 12:16:37 2023 by rpki-client on console-fra.rpki-client.org