Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/062567b0-ed85-4c67-b6ab-fc5db33e8f68/173b5d16675b806332d3dbd3c7a31ad51b83d0cc.roa
File: 173b5d16675b806332d3dbd3c7a31ad51b83d0cc.roa (raw, json)
Hash identifier: e8OckfXGqNfT0naJLaF4kkaYY0m8sgfptS4JOAxi2Mc=
Subject key identifier: 6A:16:72:EB:ED:9C:81:45:82:51:A2:F1:1C:B5:AF:41:29:2F:82:2D
Certificate issuer: /CN=54013eb72cc370d8b5b65a59ca0205401d8ff195
Certificate serial: 076CC6
Authority key identifier: A0:C2:12:4E:AA:BC:DD:7F:FE:B4:63:BE:9C:6D:C6:9F:F0:95:40:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54013eb72cc370d8b5b65a59ca0205401d8ff195.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/062567b0-ed85-4c67-b6ab-fc5db33e8f68/173b5d16675b806332d3dbd3c7a31ad51b83d0cc.roa
Signing time: Tue 28 Dec 2021 19:44:01 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 272006
IP address blocks: 143.0.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 486598 (0x76cc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54013eb72cc370d8b5b65a59ca0205401d8ff195
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=173b5d16675b806332d3dbd3c7a31ad51b83d0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:6d:f3:b7:56:d7:f6:9a:5e:e6:b8:67:88:
5f:41:86:15:c8:6a:0f:e3:91:75:9f:f2:b1:c0:5a:
67:eb:4c:43:ef:fd:41:95:78:dd:b5:c4:c6:29:02:
e4:12:1e:19:4d:f8:31:13:7b:7f:53:7b:f9:5d:7b:
9f:19:94:fa:02:35:1e:b8:84:31:05:7f:57:64:38:
b3:c1:46:44:26:62:15:83:bd:1e:3a:25:a1:c6:88:
3c:94:4b:49:3f:b6:c7:d7:a7:64:2e:3e:4b:22:a7:
5d:0e:31:60:e5:0c:72:9c:fa:98:ca:b1:c0:26:54:
c1:0e:88:13:b9:65:bd:1e:4b:1b:1e:15:65:98:85:
fb:4e:da:80:16:05:41:9c:a6:45:73:56:c0:61:93:
3e:45:1d:2a:72:cb:8a:db:36:a1:11:73:68:f3:8b:
d2:74:12:69:74:c2:0f:70:98:e1:71:6b:07:d8:8a:
a4:d3:57:ec:59:47:dd:05:38:24:63:d0:95:d6:04:
cd:af:75:26:97:96:a9:8e:31:aa:dc:db:d1:9d:f3:
a7:26:a5:96:df:f3:54:82:05:9d:78:b8:5f:66:b4:
d5:09:75:33:4d:f0:56:5c:a1:b8:ff:45:d9:67:2d:
d7:cd:5e:c2:29:d1:be:b7:fc:4e:81:15:87:aa:cd:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:16:72:EB:ED:9C:81:45:82:51:A2:F1:1C:B5:AF:41:29:2F:82:2D
X509v3 Authority Key Identifier:
keyid:A0:C2:12:4E:AA:BC:DD:7F:FE:B4:63:BE:9C:6D:C6:9F:F0:95:40:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54013eb72cc370d8b5b65a59ca0205401d8ff195.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/062567b0-ed85-4c67-b6ab-fc5db33e8f68/173b5d16675b806332d3dbd3c7a31ad51b83d0cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/062567b0-ed85-4c67-b6ab-fc5db33e8f68/54013eb72cc370d8b5b65a59ca0205401d8ff195.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.64.0/22
Signature Algorithm: sha256WithRSAEncryption
50:09:f9:21:c1:5c:c2:a7:ac:f5:5f:b1:fa:00:ce:6d:28:e9:
37:1b:29:24:4a:69:b5:fb:61:c9:6f:6a:85:b7:bc:3c:3f:34:
b2:02:e1:74:09:a4:e4:81:e6:5b:35:97:8b:66:24:00:60:14:
61:7e:b9:ab:6f:cb:81:31:cb:62:6d:54:57:a1:ba:a0:bc:57:
99:80:30:8e:1a:3b:df:c3:2d:66:1a:40:b6:36:5a:66:4c:01:
11:ae:af:2a:ea:08:1d:80:5c:d5:a3:86:6e:80:58:6e:40:f6:
75:09:d1:c2:35:db:04:03:8c:ea:83:50:22:c2:b4:bf:3c:b1:
26:8f:05:b3:9f:93:a8:38:0d:88:49:bc:49:cd:75:ec:69:14:
1a:ed:4a:11:bb:87:1e:64:b2:20:5d:17:3d:0e:ca:fd:d7:ef:
59:1f:7b:27:46:c9:cc:33:6a:4b:49:08:1a:90:6c:7a:e7:f7:
d9:d6:01:90:f5:dc:74:d0:58:a1:29:c5:c6:80:fe:92:6c:a7:
b3:8c:61:59:27:0a:5a:62:0d:b3:62:31:6f:58:6b:27:41:f1:
fe:36:3f:7c:08:72:e7:f4:9c:f8:42:66:70:09:c7:e4:77:e0:
6b:67:12:7e:0e:3a:64:c5:b9:84:85:ce:2c:72:82:7f:2d:2a:
1b:5f:7e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:55 2024 by rpki-client on console-ams.rpki-client.org