Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/c01eb46338a48c765cd05046165c6fd4e8208149.roa
File: c01eb46338a48c765cd05046165c6fd4e8208149.roa (raw, json)
Hash identifier: f7ZBKW6Yl+9+Jc3Yxq4QaqEbLVvAHJG2RAU19NH1rhE=
Subject key identifier: 2D:2A:28:72:E8:20:28:EF:AF:73:1F:AE:01:0F:7B:C4:D8:D1:A9:C6
Certificate issuer: /CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Certificate serial: 262D2F
Authority key identifier: B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/c01eb46338a48c765cd05046165c6fd4e8208149.roa
Signing time: Wed 03 Jan 2024 21:09:46 +0000
ROA not before: Wed 03 Jan 2024 21:09:46 +0000
ROA not after: Sat 03 Jan 2026 21:09:46 +0000
asID: 21575
IP address blocks: 148.102.96.0/20 maxlen: 20
148.102.96.0/24 maxlen: 24
148.102.97.0/24 maxlen: 24
148.102.98.0/24 maxlen: 24
148.102.99.0/24 maxlen: 24
148.102.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2501935 (0x262d2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Validity
Not Before: Jan 3 21:09:46 2024 GMT
Not After : Jan 3 21:09:46 2026 GMT
Subject: CN=c01eb46338a48c765cd05046165c6fd4e8208149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:1f:1d:c3:39:e7:f1:f5:e4:0d:02:70:9f:
5a:9f:fc:0a:95:25:64:6d:41:0a:38:4d:ef:64:1f:
44:2f:49:4d:b4:8e:42:af:bd:24:1a:f8:83:9e:59:
4e:11:9d:0c:30:a9:ab:10:3d:ac:a6:fb:f4:f0:02:
92:1f:76:ed:b3:bd:88:3e:f4:d7:cf:df:50:f9:ac:
a8:5a:67:00:b1:72:88:5b:61:d3:87:3f:d7:fe:14:
df:71:99:f5:7c:41:e7:03:43:4a:d4:ef:9f:ac:be:
b4:a7:aa:10:b3:08:63:bf:6b:bc:f9:07:de:f9:0d:
f6:d3:1c:7a:2c:0c:21:4d:9e:dc:2d:eb:4d:77:96:
b6:9e:a8:a6:25:7b:9c:a8:91:65:30:8e:8e:a8:07:
00:1d:d0:46:5c:a7:72:0b:60:fa:d6:dd:b3:9e:0c:
ef:4a:6b:be:7d:68:4b:b3:c9:66:bf:dd:74:7a:a0:
04:0b:f2:51:8b:dc:94:1d:8c:a1:c3:b6:6e:12:b2:
16:32:fb:25:0f:02:0d:6d:3a:ab:d7:7a:83:41:cd:
f1:d8:50:35:a3:c9:a0:b9:1e:96:8c:98:40:1d:36:
dd:7b:70:a7:3f:81:a8:5d:c8:2e:10:63:f3:92:27:
86:ce:77:fa:3b:52:a6:13:90:8b:fa:65:e2:45:14:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2A:28:72:E8:20:28:EF:AF:73:1F:AE:01:0F:7B:C4:D8:D1:A9:C6
X509v3 Authority Key Identifier:
keyid:B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/c01eb46338a48c765cd05046165c6fd4e8208149.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.96.0/20
Signature Algorithm: sha256WithRSAEncryption
03:b7:1b:c8:f1:4c:3a:76:a0:d4:f9:e4:2d:26:e2:92:39:7e:
cd:78:52:88:6b:d4:1d:fc:1d:8f:eb:81:af:b5:79:e0:70:95:
33:a2:17:48:68:44:22:e5:15:18:90:da:45:28:88:b9:4b:e0:
0b:c2:38:18:db:7d:05:1b:6c:0e:06:05:0a:dd:58:f1:80:73:
3a:70:31:32:65:b8:c8:52:82:3e:6f:29:a2:32:31:c3:c1:0a:
e2:ae:48:3d:d4:4a:88:df:10:d9:3b:66:1f:e9:8e:b5:eb:83:
10:e2:4c:f2:c3:ee:5e:23:72:38:16:16:e0:1c:8f:78:8b:7f:
d9:f5:4e:ef:e8:9a:13:96:bd:41:79:de:56:23:d0:e4:5f:e5:
ca:58:5e:3b:4c:bb:0b:07:00:83:10:c5:f7:3d:c5:48:30:3a:
32:33:5c:19:8b:b1:fd:5c:fd:f2:7f:75:1f:cc:68:50:49:a5:
99:45:3f:98:bf:46:2a:ee:16:3f:fb:2e:b0:47:9d:78:22:f1:
e7:e1:e4:71:80:20:d0:40:ca:79:d9:3a:95:d5:77:ea:34:fa:
58:16:da:aa:55:2a:f4:6f:17:59:97:2c:f8:81:ae:90:1a:eb:
63:d0:ca:11:2d:3b:25:b7:d7:c0:04:94:81:0a:41:fa:59:42:
af:1a:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org