Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/2501250a8d59ed34cb8ed2750f67421ece1d9fe6.roa
File: 2501250a8d59ed34cb8ed2750f67421ece1d9fe6.roa (raw, json)
Hash identifier: /Ztk1LaDNHAwzogfbndkODwV+LIgNWCS7khEcHmG5FQ=
Subject key identifier: B0:FF:2D:02:D2:A4:39:09:77:76:46:5C:AE:52:3D:D1:19:71:29:DE
Certificate issuer: /CN=8f3873d2185c02d28d6e454da708150f962e9305
Certificate serial: 18F0
Authority key identifier: 18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/2501250a8d59ed34cb8ed2750f67421ece1d9fe6.roa
Signing time: Tue 27 Jun 2023 19:31:10 +0000
ROA not before: Mon 26 Jun 2023 19:31:10 +0000
ROA not after: Fri 27 Jun 2025 19:31:10 +0000
asID: 28067
IP address blocks: 64.28.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6384 (0x18f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3873d2185c02d28d6e454da708150f962e9305
Validity
Not Before: Jun 26 19:31:10 2023 GMT
Not After : Jun 27 19:31:10 2025 GMT
Subject: CN=2501250a8d59ed34cb8ed2750f67421ece1d9fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:94:99:9e:8a:04:36:39:fc:d5:a7:62:c6:
81:09:c3:18:df:f4:48:68:f2:0a:df:c8:44:eb:04:
38:49:e3:95:92:c6:a2:3f:44:29:4a:ec:13:b6:5f:
c5:13:01:cc:80:8e:7f:13:fb:45:b8:77:e5:7b:e9:
53:3e:62:63:30:7f:86:c2:59:ef:f3:bf:57:21:fb:
63:e7:e0:25:8b:b6:e1:2e:9a:44:98:17:1b:58:5d:
e5:c3:da:24:11:aa:d2:7f:13:93:13:0a:7f:f7:b7:
97:da:a6:5c:82:91:30:4a:17:ec:ed:29:88:55:da:
43:13:35:f5:04:c1:93:d1:a5:be:2b:7b:8b:96:02:
d2:5f:74:68:9c:83:fe:f9:25:0e:bf:2d:c1:0f:8e:
c0:8a:77:14:2e:65:c0:97:1a:59:65:cf:ba:77:aa:
15:30:f4:9b:f4:a8:c4:0b:77:56:05:f0:55:48:78:
a6:af:79:49:64:76:96:59:e3:05:36:dd:87:54:91:
1c:1f:f4:61:45:9e:38:98:17:2a:fd:8a:cd:cf:70:
87:b9:81:7c:3d:96:46:92:1d:41:3e:23:d9:6d:b0:
76:2d:59:21:0f:a6:57:cb:3c:39:fc:e0:4e:65:9f:
3d:df:71:0e:4a:9e:23:34:25:d4:96:ed:4e:24:f1:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FF:2D:02:D2:A4:39:09:77:76:46:5C:AE:52:3D:D1:19:71:29:DE
X509v3 Authority Key Identifier:
keyid:18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/2501250a8d59ed34cb8ed2750f67421ece1d9fe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/8f3873d2185c02d28d6e454da708150f962e9305.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.28.133.0/24
Signature Algorithm: sha256WithRSAEncryption
79:8d:d3:d0:68:25:4b:ba:89:42:15:d6:d8:0b:29:20:0d:04:
76:59:3f:8d:50:1c:1f:92:6a:43:ba:17:c0:4d:a9:31:df:dc:
c3:75:bb:54:c8:3c:ec:c5:bd:d1:5f:74:d5:3b:ae:9c:1e:40:
46:a8:a9:74:07:66:cc:e6:59:15:23:21:a6:db:8b:d9:56:de:
78:12:e0:0e:c2:1b:a0:a9:c6:dd:dc:79:d9:a8:81:63:23:a7:
70:d3:44:72:55:d7:b0:a5:fe:d5:3f:3c:e3:53:d1:9e:38:f2:
04:ba:bc:18:45:ef:79:01:0f:cd:4b:e0:0d:3d:85:ae:80:87:
84:e4:60:6a:60:3a:f0:51:19:d8:e9:77:e3:4b:5f:70:0f:8e:
ee:68:90:cf:c9:61:1b:e0:61:10:8f:0b:e6:83:3f:a7:0b:fb:
dc:42:ff:8e:13:e1:b5:b3:d3:51:34:79:7b:99:6d:f6:04:87:
3a:30:0e:a2:a7:42:c9:1c:81:af:c4:cf:c6:84:6f:77:b4:1a:
42:ed:54:7f:ed:1f:92:6b:ac:c4:52:34:ba:f9:c2:a5:f1:88:
86:c4:ce:e0:45:22:45:df:11:b8:7c:e7:60:d5:23:d5:d4:e7:
3a:f6:e2:0d:0a:56:3f:31:da:a2:81:8b:d9:6f:e2:32:f5:03:
f3:44:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org