Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df066a5c-4aa3-46a5-bb33-027ea387eeaa/30c28f45b35628090e7698d5970dffeb9324ae61.roa
File: 30c28f45b35628090e7698d5970dffeb9324ae61.roa (raw, json)
Hash identifier: H8cQovXl4FTuFEPyzrCB5kSRSbMNGeH0hWF+alLFj3Y=
Subject key identifier: 2D:83:E7:F9:7D:E6:42:02:25:CB:EE:AC:CC:E4:8E:34:38:B0:7E:79
Certificate issuer: /CN=ae61782f9050bb91be1a3cfc5144d8a8c0450c74
Certificate serial: 0D8AA4
Authority key identifier: 06:48:8B:21:8F:69:D4:E5:DE:32:C6:8B:BF:55:E8:00:F7:8D:3E:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae61782f9050bb91be1a3cfc5144d8a8c0450c74.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/df066a5c-4aa3-46a5-bb33-027ea387eeaa/30c28f45b35628090e7698d5970dffeb9324ae61.roa
Signing time: Wed 24 Mar 2021 14:41:24 +0000
ROA not before: Wed 24 Mar 2021 14:41:24 +0000
ROA not after: Tue 24 Mar 2026 14:41:24 +0000
asID: 52343
IP address blocks: 192.188.51.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887460 (0xd8aa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae61782f9050bb91be1a3cfc5144d8a8c0450c74
Validity
Not Before: Mar 24 14:41:24 2021 GMT
Not After : Mar 24 14:41:24 2026 GMT
Subject: CN=30c28f45b35628090e7698d5970dffeb9324ae61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:1f:63:46:55:77:f3:e2:f8:fd:50:31:c8:
b7:e0:ea:5e:bd:64:76:c1:7c:e8:32:39:bd:35:69:
b2:d6:ea:57:8c:ec:c3:3f:42:41:0d:b8:9a:c1:19:
4e:02:6f:f7:24:4c:2d:a7:51:b1:ed:0a:a2:e9:d1:
92:d0:52:f2:4b:e5:33:c3:0f:76:ff:fa:d4:f9:b2:
41:4a:dc:9d:a8:17:0f:40:b1:3b:e9:55:f8:67:7f:
1d:26:81:fe:98:02:72:ac:c8:bb:38:b4:72:89:79:
53:c2:ac:14:f4:69:b1:90:be:96:98:a2:53:c5:c8:
1f:b0:ee:74:d3:af:f7:fe:b5:f1:06:5f:21:af:dc:
2a:64:95:e8:c8:bc:29:83:86:ab:8e:6b:26:c9:8d:
b2:2d:2c:14:0e:37:57:f0:de:42:18:4f:ba:16:97:
6c:1f:0b:d6:1e:f3:97:b2:9e:0d:3e:d6:64:ed:d4:
99:c6:6b:ac:d8:0a:2e:97:91:6b:08:d4:3f:6d:96:
65:19:36:e2:b9:5e:76:46:55:05:a3:67:9e:a1:7f:
43:e3:22:1d:ab:8e:6f:c2:55:ec:dc:dc:08:e7:12:
98:14:5b:45:22:67:b9:f4:b5:75:20:64:69:10:62:
c1:a3:84:56:90:cc:81:29:de:05:80:d0:85:ba:47:
8b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:83:E7:F9:7D:E6:42:02:25:CB:EE:AC:CC:E4:8E:34:38:B0:7E:79
X509v3 Authority Key Identifier:
keyid:06:48:8B:21:8F:69:D4:E5:DE:32:C6:8B:BF:55:E8:00:F7:8D:3E:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae61782f9050bb91be1a3cfc5144d8a8c0450c74.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df066a5c-4aa3-46a5-bb33-027ea387eeaa/30c28f45b35628090e7698d5970dffeb9324ae61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/df066a5c-4aa3-46a5-bb33-027ea387eeaa/ae61782f9050bb91be1a3cfc5144d8a8c0450c74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.51.0/24
Signature Algorithm: sha256WithRSAEncryption
25:93:23:65:0d:13:c3:74:e8:4a:a3:22:af:6f:85:7e:04:6f:
ea:b0:3f:06:b4:7a:cb:51:e9:32:80:17:90:02:d8:21:fc:7e:
10:5d:1b:39:0b:66:be:c7:96:ae:c8:07:63:ea:fa:d4:be:7d:
10:88:11:cd:b8:2c:ed:0e:03:15:40:af:50:2d:6b:0e:1c:ff:
0b:58:20:52:76:4d:79:2d:44:2a:c9:fe:fe:52:16:9f:83:cc:
d6:6b:d2:6c:4d:1c:66:db:4b:fe:62:64:b9:0c:c5:06:3a:b0:
5f:b1:98:7a:c4:59:77:7d:e9:70:19:f3:ae:de:b6:a3:ae:8a:
e5:f6:85:4a:97:6d:df:dd:31:96:34:40:54:0a:f5:b1:fc:f4:
d8:19:b0:ed:b7:89:f7:6f:97:da:b3:9f:45:a8:49:04:14:de:
d3:e6:af:ff:8f:23:fe:2b:e1:42:7c:b8:7d:b0:db:30:9e:24:
ea:46:ba:ec:ca:24:74:1f:b6:b7:2a:c8:11:26:21:cf:c1:ce:
b1:83:97:3f:43:0b:91:ce:40:4c:a5:c5:84:74:d3:8e:f2:1b:
9d:ca:25:e1:13:45:d7:d4:71:10:29:3a:fe:e8:04:5d:2a:8e:
fc:f6:ef:19:64:b6:bf:8e:97:95:13:b9:25:01:4e:cf:c8:8c:
43:30:a8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org