Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04e43c37-64fe-4d45-92a7-e814864c7a18/34ac81bf0d44d7cc3e972be0237c5eb96fd7c664.roa
File: 34ac81bf0d44d7cc3e972be0237c5eb96fd7c664.roa (raw, json)
Hash identifier: Egbw3UTH/cv3djllhrT20J/rLLH2PnVnmGQRXM++wtc=
Subject key identifier: B1:50:EF:3B:1E:10:71:1E:5C:E6:19:A1:68:E6:22:F4:0D:BB:7B:36
Certificate issuer: /CN=d540a2f05624a216a4589684e8e39e782d982f0e
Certificate serial: 0A1158
Authority key identifier: 30:8D:0F:A7:0F:CA:C2:8F:CF:B8:E7:1C:AB:DA:48:3A:E4:22:3E:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d540a2f05624a216a4589684e8e39e782d982f0e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04e43c37-64fe-4d45-92a7-e814864c7a18/34ac81bf0d44d7cc3e972be0237c5eb96fd7c664.roa
Signing time: Wed 24 Mar 2021 14:47:29 +0000
ROA not before: Wed 24 Mar 2021 14:47:29 +0000
ROA not after: Tue 24 Mar 2026 14:47:29 +0000
asID: 60458
IP address blocks: 170.150.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659800 (0xa1158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d540a2f05624a216a4589684e8e39e782d982f0e
Validity
Not Before: Mar 24 14:47:29 2021 GMT
Not After : Mar 24 14:47:29 2026 GMT
Subject: CN=34ac81bf0d44d7cc3e972be0237c5eb96fd7c664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:97:2c:bb:cb:79:de:a1:64:ef:66:7f:cd:47:
f7:c2:7f:c3:e4:09:c9:db:d7:fc:8d:d2:97:db:38:
2e:ab:b7:b2:3f:85:65:9d:7f:cb:8e:f7:d6:87:8b:
0f:e5:48:3a:b8:e6:6d:4f:ee:11:52:1d:7c:61:85:
a5:dd:da:fc:66:fe:0c:ba:fa:d7:24:05:6b:d9:ec:
34:18:d3:98:7b:93:31:29:58:34:a0:09:cf:4c:5b:
a8:2f:4d:e4:19:e7:9a:0e:9f:4d:f3:0b:ae:a2:e9:
79:39:3a:c1:b3:4c:47:2c:c1:10:fb:cd:f6:81:9d:
55:2e:39:5e:43:59:29:45:8c:4c:3e:a3:ce:20:76:
13:6c:0b:7c:f8:dd:04:50:41:3f:e7:d9:03:f5:df:
50:06:31:97:bc:97:9b:88:f0:78:0b:9c:de:4c:5a:
ec:fd:50:05:70:cd:47:d4:3e:9b:17:13:5f:30:46:
10:04:6e:c8:1b:27:f3:3b:c0:b4:dc:25:83:e5:ef:
d6:8b:e1:bb:36:f0:a7:37:ec:e2:db:e3:30:62:b3:
b9:94:5a:6a:a1:c2:7f:fc:2e:b5:67:f8:cc:73:ec:
d1:30:5d:82:d7:50:87:68:16:04:c4:5d:f6:f7:ad:
51:54:af:0c:f4:20:fd:4d:b6:0f:37:97:ff:a5:7f:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:50:EF:3B:1E:10:71:1E:5C:E6:19:A1:68:E6:22:F4:0D:BB:7B:36
X509v3 Authority Key Identifier:
keyid:30:8D:0F:A7:0F:CA:C2:8F:CF:B8:E7:1C:AB:DA:48:3A:E4:22:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d540a2f05624a216a4589684e8e39e782d982f0e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04e43c37-64fe-4d45-92a7-e814864c7a18/34ac81bf0d44d7cc3e972be0237c5eb96fd7c664.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/04e43c37-64fe-4d45-92a7-e814864c7a18/d540a2f05624a216a4589684e8e39e782d982f0e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.150.88.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:e4:ca:70:bb:4d:80:99:f7:b1:d3:e9:90:c8:bc:15:b2:44:
e7:2a:d3:a3:93:a9:73:94:55:5d:87:3b:8e:80:78:12:85:48:
8b:e8:c4:30:ec:99:9b:bd:1f:9a:e9:c4:a3:c8:a2:ef:f8:b1:
ab:e5:f2:7a:71:14:b2:6b:5d:53:59:ff:2a:6d:6f:b1:a1:a7:
6e:73:1f:cb:06:fc:8f:34:f8:9a:8a:cc:4f:c7:35:f8:46:0b:
74:6e:36:9d:16:3b:4c:7a:4e:a0:a0:0b:f6:4c:0a:79:54:2c:
bb:e2:9f:78:d5:75:9d:65:d9:34:1c:0e:29:d1:b6:8b:77:4f:
39:d7:ad:6c:a8:d7:46:78:7a:95:97:b4:3b:4a:17:fd:b5:41:
61:59:36:60:bf:80:5e:0d:47:d0:0d:c9:a4:7f:5f:3b:94:aa:
28:e4:20:ee:e8:9f:26:18:12:fe:77:c9:a3:7d:d3:ad:cf:2c:
ee:ce:dc:b8:86:28:86:59:a7:31:35:3d:d5:21:8a:bd:9d:b8:
a8:4d:b5:6f:52:8c:ce:ef:d6:06:50:ea:dc:82:71:3b:7a:85:
a3:00:e2:5b:6b:ac:8e:04:48:6d:3f:80:1a:11:d7:b8:2d:4b:
00:08:a4:e8:68:ec:1d:04:1d:7a:db:f2:d6:ad:d3:69:ed:f9:
21:ad:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org