Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/c50de4565822a7b2adfd7d5a4dbde74bd5f6fbd6.roa
File: c50de4565822a7b2adfd7d5a4dbde74bd5f6fbd6.roa (raw, json)
Hash identifier: ebCXPKLCVUw1BrNGXql2fYwd8X5HSA5ExHTrXx6d9/g=
Subject key identifier: CE:51:D0:3E:C5:D5:F7:0B:5C:33:33:93:1D:58:5F:6B:6D:27:E0:E3
Certificate issuer: /CN=c355af2587e04fcb2db519de3ca0af885d613b77
Certificate serial: 241969
Authority key identifier: BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/c50de4565822a7b2adfd7d5a4dbde74bd5f6fbd6.roa
Signing time: Mon 02 Oct 2023 20:17:26 +0000
ROA not before: Sun 01 Oct 2023 20:17:25 +0000
ROA not after: Thu 02 Oct 2025 21:17:25 +0000
asID: 265780
IP address blocks: 168.227.20.0/24 maxlen: 24
168.227.21.0/24 maxlen: 24
168.227.22.0/24 maxlen: 24
168.227.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2365801 (0x241969)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c355af2587e04fcb2db519de3ca0af885d613b77
Validity
Not Before: Oct 1 20:17:25 2023 GMT
Not After : Oct 2 21:17:25 2025 GMT
Subject: CN=c50de4565822a7b2adfd7d5a4dbde74bd5f6fbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1e:84:7c:af:b4:ba:2a:f6:56:22:fe:b1:3e:
d9:f8:a8:d7:59:c0:de:28:a7:14:a9:6f:e6:04:be:
59:ea:c6:e4:d0:35:e1:80:28:f8:9f:7f:45:31:fd:
bd:66:1b:ba:04:f9:c6:f3:8d:67:c1:1e:e1:ed:c0:
87:7f:49:17:6c:32:fd:f7:9b:ad:49:f6:e2:e7:15:
4f:ba:60:ec:76:8c:b2:b2:c1:17:7f:8b:54:bd:d1:
4a:70:ff:d8:ad:ab:55:9b:b5:8c:f1:09:14:a9:45:
cd:d1:9a:93:f3:a2:fa:57:d2:7a:fc:1b:7b:16:93:
94:43:37:12:57:51:66:72:01:94:96:d5:ae:42:a4:
13:d6:2d:e2:99:d8:ba:f5:c3:d3:ce:e4:1b:20:af:
12:9b:74:b3:46:63:fa:0a:06:4b:2a:55:cf:e0:53:
4f:5d:c8:7c:d3:7d:78:bf:ca:94:57:1a:bc:ec:e0:
1b:28:d5:cf:8a:7c:13:6f:6c:5f:f6:a0:68:e0:ec:
dd:d4:f6:54:15:94:7e:30:fc:a6:5a:56:51:58:66:
8f:39:ae:87:a2:64:85:a1:8f:11:6b:88:03:ba:73:
73:bf:39:f1:d0:c9:42:aa:7a:c7:2e:4a:d6:5f:6f:
cb:11:55:5d:fa:2e:d5:b6:92:a5:01:7f:a3:e6:c5:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:51:D0:3E:C5:D5:F7:0B:5C:33:33:93:1D:58:5F:6B:6D:27:E0:E3
X509v3 Authority Key Identifier:
keyid:BB:CB:68:E2:69:EA:41:9E:58:D5:D8:99:EF:09:D0:88:D0:94:A9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c355af2587e04fcb2db519de3ca0af885d613b77.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/c50de4565822a7b2adfd7d5a4dbde74bd5f6fbd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05eb0511-bfcc-4f43-8c71-906df7993882/c355af2587e04fcb2db519de3ca0af885d613b77.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.20.0/22
Signature Algorithm: sha256WithRSAEncryption
29:f7:34:23:15:9b:30:ac:56:ad:f1:eb:ec:74:dc:bb:0c:ee:
50:a8:f1:12:cf:62:1f:ef:da:1c:41:81:84:85:eb:19:fb:75:
64:1e:13:66:f2:e7:0e:dc:7f:d7:a2:88:e7:fa:19:5b:48:8e:
d4:eb:be:4a:eb:2f:12:7e:3d:5b:cb:cb:0c:c4:83:db:b6:a7:
d6:4b:f8:32:48:8a:9f:18:0e:e7:36:80:62:b8:5b:d7:18:f0:
77:64:12:e7:24:6e:58:7a:45:6c:1c:d7:40:46:58:4c:0d:e8:
fb:29:a1:15:06:72:2a:96:54:05:af:03:6f:ef:cf:71:be:b6:
ba:a6:cf:48:91:7f:7a:41:24:09:48:3f:29:54:20:21:42:dc:
ab:6b:77:07:19:e3:00:c5:82:70:e9:c1:3c:89:1d:36:bc:c8:
25:09:d7:12:d0:3f:6a:b2:b4:d2:f4:39:c8:5f:47:b8:7a:4d:
3f:60:88:5d:e5:29:2f:98:a0:c3:20:1b:fd:15:9a:b2:9d:e2:
dc:67:ae:e9:3f:86:7d:52:2e:c0:18:cf:cd:45:ec:59:d1:0b:
33:ac:57:02:48:0f:72:af:00:7d:d9:04:06:b0:85:1a:2b:35:
44:91:5f:5f:53:d7:d6:52:29:d7:b4:13:58:ff:b4:c2:b5:a1:
c9:f7:04:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org