Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/f73d05cfab201a3e256a94448f4232c7210cdbd0.roa
File: f73d05cfab201a3e256a94448f4232c7210cdbd0.roa (raw, json)
Hash identifier: CQDXT/bfuOIlPkmm2aIuWCzaFLyP95n5ymlj0KDCvHQ=
Subject key identifier: B4:C5:AA:D9:AE:4A:40:07:38:A7:70:8D:C7:24:5E:3E:52:63:CB:52
Certificate issuer: /CN=b8e5cbfb9465a07deba594219e5ffc698fbfbabb
Certificate serial: 0F6693
Authority key identifier: 00:6D:71:13:48:C6:78:C3:31:34:E9:B4:AB:28:C4:BB:2B:F0:E7:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/f73d05cfab201a3e256a94448f4232c7210cdbd0.roa
Signing time: Fri 15 Dec 2023 17:10:34 +0000
ROA not before: Fri 15 Dec 2023 17:10:34 +0000
ROA not after: Mon 15 Dec 2025 17:10:34 +0000
asID: 18840
IP address blocks: 165.98.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1009299 (0xf6693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e5cbfb9465a07deba594219e5ffc698fbfbabb
Validity
Not Before: Dec 15 17:10:34 2023 GMT
Not After : Dec 15 17:10:34 2025 GMT
Subject: CN=f73d05cfab201a3e256a94448f4232c7210cdbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:29:8a:bf:5d:e1:a5:83:cf:bc:0b:e2:5d:d1:
f8:92:b4:66:52:77:c1:dc:41:f2:ec:48:48:81:61:
ee:da:b7:d8:ba:fa:29:71:79:90:43:bf:41:bc:28:
66:2d:e3:aa:0d:fe:f2:f7:25:38:23:81:7e:f6:45:
c5:f1:4e:11:76:b2:66:ce:15:d4:db:ac:1b:5e:54:
9f:61:ef:99:f6:27:00:c4:29:5e:37:c0:a7:a1:31:
05:5d:64:72:86:d7:f9:38:17:d1:ac:77:dc:a8:8b:
c2:c4:ae:26:cc:42:13:4b:aa:63:e0:1e:12:e9:ed:
69:e6:3a:59:e6:ff:e0:3c:cb:26:f7:8d:b2:54:17:
cd:9c:92:80:5e:1e:b2:fa:e0:05:08:6f:b9:ea:ad:
f4:f0:7b:24:f1:b7:bc:0d:e8:f5:c2:43:f6:fb:ae:
20:f8:91:c6:50:1a:91:e7:9c:e3:6e:52:3e:f1:0e:
57:63:69:6c:f6:3e:87:0f:b4:c6:54:f8:6e:29:21:
e2:d8:88:e2:63:a1:df:ee:9c:07:1e:cb:06:e5:5c:
69:7e:76:12:65:48:37:ff:16:e1:57:f6:ed:c5:53:
10:20:ec:8e:e7:8d:a2:c2:e5:2e:a8:d7:d1:f6:ad:
2f:dd:b8:7d:6b:62:7e:f4:ff:a7:53:35:94:d1:16:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C5:AA:D9:AE:4A:40:07:38:A7:70:8D:C7:24:5E:3E:52:63:CB:52
X509v3 Authority Key Identifier:
keyid:00:6D:71:13:48:C6:78:C3:31:34:E9:B4:AB:28:C4:BB:2B:F0:E7:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/f73d05cfab201a3e256a94448f4232c7210cdbd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/003bf825-b144-476d-89c7-4987bdc328da/b8e5cbfb9465a07deba594219e5ffc698fbfbabb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.98.130.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4b:02:88:fb:40:85:61:0d:0d:61:47:c9:93:2b:66:bb:4d:
c7:4c:d0:5e:8f:aa:ea:e3:84:c4:08:3c:be:ea:64:53:68:e2:
d6:00:b6:91:25:b1:30:b4:72:44:2b:06:dc:06:f2:4d:d9:52:
4c:5a:e5:c6:a4:c6:5d:d5:e1:40:8c:63:ec:5e:fc:a3:6c:7d:
c9:e4:bb:10:73:7d:a5:00:1a:cc:54:d1:98:37:62:9a:81:9b:
93:97:86:b1:75:19:78:c5:08:57:67:25:be:c5:9e:1e:ea:1a:
8a:30:4d:bf:85:3f:cf:1d:5c:7b:49:8c:0e:62:86:de:c3:12:
01:1d:a8:e7:b0:a5:26:bb:8d:1c:60:5f:a1:d2:a2:63:70:92:
e2:b1:9c:51:21:74:8f:1b:4d:08:4d:92:97:f4:8e:60:e8:d8:
00:27:82:23:54:98:eb:d8:87:b9:47:00:94:87:07:b1:20:c7:
83:e9:ab:51:45:75:86:31:87:a4:bd:bf:4f:84:e7:e1:75:31:
22:d4:0e:c5:26:30:11:e3:55:ca:b0:ce:1a:dd:75:43:5a:f8:
80:ea:43:5e:c2:95:3e:d4:d5:1a:c5:09:81:59:9f:ad:f2:45:
86:69:d4:d1:f8:14:aa:56:12:ea:ff:a4:ca:f8:e5:34:24:6a:
c6:a0:e2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org