Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/25d8dd1d408754d923a35dd9113616f65f71dd9b.roa
File: 25d8dd1d408754d923a35dd9113616f65f71dd9b.roa (raw, json)
Hash identifier: 3Etl4ee0VdxsXeXLCd9gW9OebrnGUT0GGipYgzDUmZg=
Subject key identifier: C1:61:2B:4B:5B:D6:25:B7:4F:13:4F:BE:14:D9:F7:5D:D5:44:EA:D0
Certificate issuer: /CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
Certificate serial: 27599A
Authority key identifier: 66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/25d8dd1d408754d923a35dd9113616f65f71dd9b.roa
Signing time: Wed 31 Jan 2024 21:53:35 +0000
ROA not before: Wed 31 Jan 2024 21:53:35 +0000
ROA not after: Sat 31 Jan 2026 21:53:35 +0000
asID: 27696
IP address blocks: 190.5.64.0/18 maxlen: 24
181.189.224.0/19 maxlen: 24
2803:7200::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2578842 (0x27599a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
Validity
Not Before: Jan 31 21:53:35 2024 GMT
Not After : Jan 31 21:53:35 2026 GMT
Subject: CN=25d8dd1d408754d923a35dd9113616f65f71dd9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:a6:6c:9f:e6:4e:79:fe:11:6d:72:c4:b5:
b0:2e:7a:b0:e8:6e:ad:4a:d5:52:59:3e:e5:68:96:
d6:88:57:40:ba:90:53:ea:b0:8a:a7:a8:4a:03:0b:
1a:23:0f:ef:ab:cb:19:98:ff:af:75:fb:ba:4b:c9:
c6:5b:17:dd:f4:f6:97:f1:d0:33:8d:bb:0b:c3:33:
52:95:af:84:f0:f8:ce:fb:3c:02:04:3a:ef:2a:d5:
eb:2a:37:d4:c0:b7:c5:cd:58:20:4c:42:97:b1:ba:
0d:bf:c4:f0:6f:a0:42:ee:be:f6:21:ed:3d:30:3e:
ce:6a:b2:e5:43:c9:55:14:3c:1f:74:d9:12:1e:2e:
09:cf:80:ec:93:70:ec:56:5c:d4:5f:d4:75:bc:fc:
ee:55:1e:9b:47:b1:41:ac:f4:25:cf:fe:c1:a5:1b:
c0:a5:bf:a1:c8:56:93:a1:73:d7:52:9e:0b:fc:35:
7f:98:79:e6:66:69:6a:50:85:ed:83:fe:6d:39:22:
93:db:72:bb:12:70:d3:69:e0:cb:65:05:4b:6c:27:
5a:41:e2:35:41:2e:24:74:2c:0e:e6:c3:19:80:56:
c8:b9:26:d8:52:b6:0c:f6:06:9e:b8:74:f7:9b:df:
b4:28:bc:c8:ab:24:23:b1:5c:23:74:e9:60:ed:51:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:61:2B:4B:5B:D6:25:B7:4F:13:4F:BE:14:D9:F7:5D:D5:44:EA:D0
X509v3 Authority Key Identifier:
keyid:66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/25d8dd1d408754d923a35dd9113616f65f71dd9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/95f676acfc94ecb8278d82cca69a83a7b785bd05.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.224.0/19
190.5.64.0/18
IPv6:
2803:7200::/32
Signature Algorithm: sha256WithRSAEncryption
ab:2a:24:9e:3d:ed:ab:56:cd:97:4b:33:23:52:c6:ec:46:92:
33:41:91:1e:19:d6:a4:d3:42:84:a9:8a:be:1c:2c:68:90:e5:
43:12:11:05:3d:ae:04:9e:a3:f3:5e:64:b5:43:53:50:1b:c1:
0d:3a:4f:c2:b9:56:8b:ce:f3:f0:ae:0c:4e:28:16:01:ab:af:
44:35:ec:f4:1d:fc:86:84:10:af:1e:f3:8c:a2:b6:59:7e:d9:
4e:30:5f:65:7d:00:c3:21:05:f1:a3:24:42:ab:a9:2c:a3:de:
5f:45:84:da:04:03:7a:2d:49:13:fe:2e:77:02:c8:75:ce:7e:
d1:0c:ed:77:60:81:a0:cf:a6:13:ea:a6:c8:d2:18:74:08:a5:
08:78:1a:9f:0c:47:a9:92:c5:ee:08:6e:e7:88:04:e5:17:91:
5a:e4:e3:bc:6b:28:3b:86:ae:f9:4d:b9:ac:7d:cd:c4:dd:e9:
d5:01:d6:5d:28:af:89:21:bd:35:9d:08:61:06:21:a8:7f:3c:
93:ae:9e:2d:06:76:3e:db:33:29:fe:bb:01:98:e8:36:9c:7d:
2f:73:77:26:71:37:ec:f9:91:0e:80:34:44:be:fa:f1:1e:49:
8c:b8:bc:e6:6d:3c:b9:65:aa:c7:ee:8e:d9:e5:69:96:23:4e:
83:9a:57:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org