Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/5ba69aaf132a24936119a721d6ca452a003c65c7.roa
File: 5ba69aaf132a24936119a721d6ca452a003c65c7.roa (raw, json)
Hash identifier: 5G8Nomj9hMpXTHcevJ0cihWx4HtIPlv6mcgv5+lT2P0=
Subject key identifier: 19:77:A4:75:E0:30:34:02:DE:AD:76:5E:1E:4B:F5:0A:A1:01:76:88
Certificate issuer: /CN=29598424cc9e5513086a121e39d9b7e3d625ecb7
Certificate serial: 1204B4
Authority key identifier: E0:35:3B:2F:23:B2:77:B9:08:2E:80:73:9B:D7:9A:2F:DC:7A:2B:88
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29598424cc9e5513086a121e39d9b7e3d625ecb7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/5ba69aaf132a24936119a721d6ca452a003c65c7.roa
Signing time: Tue 30 May 2023 14:15:41 +0000
ROA not before: Mon 29 May 2023 14:15:41 +0000
ROA not after: Fri 30 May 2025 14:15:41 +0000
asID: 264758
IP address blocks: 168.196.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1180852 (0x1204b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29598424cc9e5513086a121e39d9b7e3d625ecb7
Validity
Not Before: May 29 14:15:41 2023 GMT
Not After : May 30 14:15:41 2025 GMT
Subject: CN=5ba69aaf132a24936119a721d6ca452a003c65c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:66:3e:4a:73:34:76:78:42:8c:49:98:a6:
bd:0b:cb:e0:a4:eb:3d:db:e5:d0:c4:48:1c:b4:87:
7d:95:e2:34:8e:98:de:b0:17:84:ae:33:d2:b6:b0:
43:a9:3a:04:c7:7a:30:c4:b6:ee:db:28:ec:50:c2:
c1:4e:c9:a5:72:da:62:48:eb:40:2a:81:cd:33:04:
23:d4:7d:43:30:65:72:7b:6f:3b:15:8c:ca:b8:03:
7e:3e:2d:d8:3f:fa:08:e9:70:45:f3:8a:9c:31:37:
2c:77:ef:d7:26:3a:0f:a4:60:58:45:31:89:85:48:
63:42:af:c4:99:62:ca:a9:ea:07:ad:b2:17:60:6f:
28:f4:c8:34:4a:94:10:a8:31:5a:98:93:a6:17:dd:
18:ff:b6:da:f1:83:80:08:e2:db:14:ec:03:81:d8:
a6:e7:e2:36:ee:00:9e:73:b6:77:86:e0:6c:3a:ee:
ed:fb:63:85:8c:38:e3:95:26:03:73:be:be:b5:fe:
f5:0b:66:da:1c:ca:12:02:3e:a7:92:c6:1c:ab:8f:
59:06:55:67:27:ab:17:fe:5f:ce:c7:53:01:b6:ab:
56:c1:fa:33:c9:97:d0:d9:02:55:1e:05:1d:be:fb:
f0:87:ac:9c:56:8d:68:0a:46:63:71:9d:ea:31:97:
69:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:77:A4:75:E0:30:34:02:DE:AD:76:5E:1E:4B:F5:0A:A1:01:76:88
X509v3 Authority Key Identifier:
keyid:E0:35:3B:2F:23:B2:77:B9:08:2E:80:73:9B:D7:9A:2F:DC:7A:2B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29598424cc9e5513086a121e39d9b7e3d625ecb7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/5ba69aaf132a24936119a721d6ca452a003c65c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/29598424cc9e5513086a121e39d9b7e3d625ecb7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.24.0/24
Signature Algorithm: sha256WithRSAEncryption
66:40:86:7a:3a:ea:70:f3:d6:61:05:59:a3:b4:c8:41:e4:ed:
4e:1a:61:bb:cc:3e:f1:a2:5e:6e:d4:38:43:9c:d1:47:6d:43:
bf:3d:00:12:8c:2e:de:2f:ff:5c:69:60:2e:17:5c:33:ed:bd:
01:01:6c:3d:bb:22:03:7c:b8:2e:bc:2c:85:56:0b:01:a5:00:
db:db:61:22:b6:dc:39:fc:d7:fa:70:dd:b5:83:6c:e8:f6:e1:
f6:95:7f:53:af:c9:cc:24:61:0a:d5:4b:48:17:fa:5c:22:ef:
9e:e3:89:5f:96:99:15:9e:45:e8:2c:e7:6a:f9:f0:39:20:14:
bb:66:82:79:f0:59:c9:62:48:bf:84:06:90:96:c4:8f:a7:e1:
ac:40:20:2b:80:21:0a:90:5c:28:e8:b9:0c:4d:57:8e:19:84:
55:cd:a1:ca:11:e4:4d:35:88:f9:2a:73:03:0a:3e:3f:53:56:
d2:22:fc:a4:98:96:c3:75:2d:15:23:ad:a7:b1:ae:9a:9b:ef:
b0:cd:0e:2b:fd:33:b2:4a:44:e3:d2:af:00:a3:e2:c0:cc:83:
98:d9:cb:94:bf:f3:86:fc:41:ae:db:ce:f5:56:79:dd:b7:bf:
43:11:ad:51:a6:76:9e:a8:60:c6:9d:54:09:8c:e0:d5:01:6a:
ee:0b:ae:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org