Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/2bf7760f085d52d71a361bf0567deccdc8f424fb.roa
File: 2bf7760f085d52d71a361bf0567deccdc8f424fb.roa (raw, json)
Hash identifier: DLmMqAiwTta4eIwWz6OPG76PoIpprVkDDX0Kz0P4Jio=
Subject key identifier: F6:1C:33:8D:34:EF:23:E8:CA:3A:CD:B0:69:6B:2C:4C:98:79:3E:BC
Certificate issuer: /CN=8f3873d2185c02d28d6e454da708150f962e9305
Certificate serial: 0BB8
Authority key identifier: 18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/2bf7760f085d52d71a361bf0567deccdc8f424fb.roa
Signing time: Tue 27 Jun 2023 19:25:46 +0000
ROA not before: Mon 26 Jun 2023 19:25:46 +0000
ROA not after: Fri 27 Jun 2025 19:25:46 +0000
asID: 28067
IP address blocks: 64.28.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3000 (0xbb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3873d2185c02d28d6e454da708150f962e9305
Validity
Not Before: Jun 26 19:25:46 2023 GMT
Not After : Jun 27 19:25:46 2025 GMT
Subject: CN=2bf7760f085d52d71a361bf0567deccdc8f424fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:0e:5b:72:78:fc:6e:44:3b:69:84:e5:a0:
df:f1:45:62:b0:19:ca:3f:f9:7a:98:2e:6d:e2:da:
e1:82:9e:53:3c:a6:15:78:50:aa:3e:09:23:89:80:
e3:a6:5c:99:33:81:72:0a:48:68:ff:07:13:f6:a5:
af:3e:fd:2f:13:65:02:65:7c:73:6b:03:b2:a4:61:
cd:71:cc:cc:b3:96:cd:d6:84:13:48:0d:52:f6:42:
40:7f:fa:79:fb:e8:68:2d:71:22:fd:32:d0:cd:33:
be:ce:5d:8c:c6:4c:52:35:ed:5c:40:48:3a:c2:38:
9d:fd:17:80:e2:d4:17:5a:c5:63:45:19:6d:13:ec:
e5:59:2d:3b:2c:b6:a6:9a:8d:b9:a1:5d:28:91:4c:
31:c5:80:83:34:a3:23:77:12:11:63:18:bb:cc:49:
92:ba:a8:0c:ca:5d:36:ac:b6:70:fc:89:cf:d4:12:
6c:4f:64:89:b2:7d:1e:3d:0b:03:af:1e:14:eb:92:
84:9c:ac:91:46:21:d9:36:d3:45:db:ae:64:48:b2:
07:91:ca:6b:70:b7:fc:9a:f7:f0:58:9e:d3:02:58:
f3:a5:8c:3f:3f:3c:7d:0b:42:52:0f:30:3e:19:81:
68:82:e5:ca:88:33:ff:52:11:81:9d:dc:cc:91:08:
57:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1C:33:8D:34:EF:23:E8:CA:3A:CD:B0:69:6B:2C:4C:98:79:3E:BC
X509v3 Authority Key Identifier:
keyid:18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/2bf7760f085d52d71a361bf0567deccdc8f424fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/8f3873d2185c02d28d6e454da708150f962e9305.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.28.129.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e1:8f:ec:3d:d5:db:b8:71:2b:ff:a4:89:de:9e:89:cc:3d:
50:46:eb:35:22:bb:b6:43:81:02:4d:0f:ea:40:6f:77:fc:5e:
b8:8c:8c:c5:2a:bd:66:7a:04:34:be:be:0f:03:58:d8:0b:01:
f7:e1:14:f7:86:c5:b7:77:9a:3b:13:f0:df:2b:62:11:48:11:
95:5b:79:bf:c3:7a:6e:a5:9a:3a:51:c8:12:ed:e1:5d:f6:46:
f6:bb:73:44:11:d2:21:95:cc:9c:b5:42:9d:91:32:d5:0f:ec:
7a:99:db:32:13:d7:4a:60:79:51:9b:2d:76:38:15:7c:d4:2a:
53:a2:44:b6:3b:44:3a:d4:62:c9:08:70:63:8b:7a:3e:ad:d0:
8c:ac:b2:32:46:f4:e8:db:ae:36:1f:09:98:1d:5d:59:1f:a6:
6a:d9:6d:0b:cc:18:31:2a:7d:c5:94:8c:50:66:a2:0d:25:72:
82:fb:62:0d:0f:8c:63:22:5f:80:c0:65:f6:cb:51:8b:de:ad:
05:5e:d3:09:12:71:94:ff:b5:45:35:ae:f5:20:39:a3:37:06:
90:f0:e0:75:a1:c5:84:f5:2b:f2:e5:61:75:e4:fc:9d:34:64:
a7:e4:8f:62:4a:21:bd:a4:5f:d5:e5:1e:44:dd:db:ba:17:f8:
e6:a3:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org