Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/5caa14c8bdaabb422269decea25f52bef72e056a.roa
File: 5caa14c8bdaabb422269decea25f52bef72e056a.roa (raw, json)
Hash identifier: 2EH6tGx0sv7RBx5MDIKuk+wFW3QIvK3o0mrQPmlAEPs=
Subject key identifier: 8A:66:EF:4D:26:BD:EC:DF:F6:C8:28:6B:2D:F0:45:0C:CB:29:C2:B6
Certificate issuer: /CN=8f3873d2185c02d28d6e454da708150f962e9305
Certificate serial: 16A5
Authority key identifier: 18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/5caa14c8bdaabb422269decea25f52bef72e056a.roa
Signing time: Tue 27 Jun 2023 19:30:39 +0000
ROA not before: Mon 26 Jun 2023 19:30:39 +0000
ROA not after: Fri 27 Jun 2025 19:30:39 +0000
asID: 28067
IP address blocks: 64.28.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5797 (0x16a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3873d2185c02d28d6e454da708150f962e9305
Validity
Not Before: Jun 26 19:30:39 2023 GMT
Not After : Jun 27 19:30:39 2025 GMT
Subject: CN=5caa14c8bdaabb422269decea25f52bef72e056a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bd:f3:5f:6f:9a:bb:30:b1:01:6a:a7:aa:78:
62:25:c2:c3:a7:4e:bd:82:ca:d4:1d:fd:a9:e2:90:
4a:5f:c7:07:19:89:9b:77:19:53:e6:61:b2:d5:80:
47:a6:5a:2b:eb:bc:4c:ed:2a:73:a0:75:dc:fd:9a:
5f:5a:4a:35:0f:1a:84:4e:0e:3f:fe:ce:e4:50:f7:
78:33:ac:2a:94:16:08:94:27:e3:1b:1c:3e:ad:7e:
d2:c5:8a:38:90:f6:5f:a6:08:9c:48:9e:6a:00:a5:
08:e6:6f:ff:a5:59:40:81:73:ef:5d:55:cd:a6:5c:
1d:cc:a0:c8:dc:cb:86:ec:4e:6c:f5:fc:60:28:62:
26:cf:b3:a8:0b:72:69:78:57:36:08:96:c3:35:30:
20:47:2e:1e:1c:fc:81:ba:e3:1d:92:d1:51:b2:e3:
10:70:0d:68:e4:3a:77:0f:4a:bb:67:95:d9:e9:87:
11:e7:0b:fd:8d:f5:32:26:df:13:41:b3:44:ea:94:
50:cf:ed:11:03:70:ea:c6:45:4a:3d:c6:1a:65:17:
31:52:15:41:15:ff:50:48:bf:53:ca:24:c9:d6:72:
cc:48:59:a8:9a:34:b1:d6:cc:c7:40:4f:0d:ce:be:
1d:0b:fe:52:6b:de:73:15:c1:3b:a6:4a:f0:48:a8:
f0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:66:EF:4D:26:BD:EC:DF:F6:C8:28:6B:2D:F0:45:0C:CB:29:C2:B6
X509v3 Authority Key Identifier:
keyid:18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/5caa14c8bdaabb422269decea25f52bef72e056a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/8f3873d2185c02d28d6e454da708150f962e9305.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.28.132.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e6:01:ee:a5:3b:02:a5:e4:52:5a:00:7b:c3:ec:5d:17:5c:
f9:f6:15:c4:0e:7f:99:e3:9f:3e:99:7d:63:16:c2:54:21:89:
8b:72:04:b8:ed:d1:70:1f:77:a1:4e:68:92:c4:07:05:b5:63:
5f:7f:cc:32:d0:73:60:ed:fc:1c:33:90:31:ef:94:5e:6a:01:
4b:22:10:69:28:63:9f:31:c7:40:74:9e:12:1b:16:e4:d8:4c:
c0:b8:0d:00:68:60:fa:36:89:f3:32:b3:ae:81:e7:40:2e:ec:
47:35:67:2d:f9:b7:24:a0:32:9d:a8:37:8f:c2:03:bb:44:eb:
9b:53:6d:7a:8e:08:c0:bf:f0:c4:3b:53:2d:9c:8a:2c:52:4d:
9c:d8:1f:71:86:f6:16:14:68:f9:54:cf:43:c4:6e:1a:86:0d:
99:21:4e:2c:10:b7:00:81:65:44:1a:51:7c:34:62:55:20:d9:
83:fc:f4:8f:d1:8a:75:6c:65:e1:e0:96:41:cf:ac:54:16:d2:
1a:bd:05:48:5f:a2:ee:a8:88:6f:84:0d:01:5d:00:24:44:44:
ce:6c:00:83:a0:f8:96:b8:81:58:6f:6b:d5:57:15:29:fb:ea:
89:39:53:52:3b:39:ce:d3:db:e3:c8:79:7e:9b:65:ed:64:b0:
3e:63:20:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:15 2024 by rpki-client on console-fra.rpki-client.org