Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/ebdaa3605cacb42c6d5f8f7bf9f4ebff932a28ad.roa
File: ebdaa3605cacb42c6d5f8f7bf9f4ebff932a28ad.roa (raw, json)
Hash identifier: 4p0Am21c4ov2d5pAYEE8JwqxHK8gbskjyhZ+7ME9hps=
Subject key identifier: 70:0D:1D:E3:F5:04:16:2F:3F:F1:38:04:78:A8:5D:6B:96:66:B5:91
Certificate issuer: /CN=d150a188184eb3e194f963dfc48dfa17a2509aa8
Certificate serial: 0F916E
Authority key identifier: 21:20:91:3C:94:CA:E1:FF:C4:4E:C9:5A:B1:74:28:10:39:8E:02:79
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d150a188184eb3e194f963dfc48dfa17a2509aa8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/ebdaa3605cacb42c6d5f8f7bf9f4ebff932a28ad.roa
Signing time: Sat 19 Jun 2021 05:16:10 +0000
ROA not before: Sat 19 Jun 2021 03:00:00 +0000
ROA not after: Fri 19 Jun 2026 03:00:00 +0000
asID: 198949
IP address blocks: 170.238.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1020270 (0xf916e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d150a188184eb3e194f963dfc48dfa17a2509aa8
Validity
Not Before: Jun 19 03:00:00 2021 GMT
Not After : Jun 19 03:00:00 2026 GMT
Subject: CN=ebdaa3605cacb42c6d5f8f7bf9f4ebff932a28ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:3d:1c:1f:0f:86:c1:26:3f:05:05:0b:13:
e1:f7:b4:81:b2:b8:8f:c9:e2:aa:d1:ac:d4:87:cc:
79:d0:7c:84:68:a6:10:da:35:d7:5f:8e:c2:42:c0:
9a:04:b8:77:49:40:99:9b:5e:f6:6c:58:c3:17:fe:
f6:ce:8f:18:0a:25:81:56:b8:a8:c8:13:4c:8b:28:
40:2e:ce:a7:10:a5:de:fd:6c:66:47:6e:2f:24:9f:
43:b8:d8:a5:ef:fa:1a:05:25:8c:5e:d0:22:8a:84:
42:66:44:b1:b3:60:1c:d6:2d:02:03:5b:a8:71:2f:
f2:4b:33:31:02:4e:94:52:c4:02:ca:f1:fe:22:b3:
73:98:4d:56:01:a5:bf:c6:8f:51:82:b3:68:ee:c0:
3e:69:c9:c3:7e:a2:2c:58:ec:d9:75:cd:40:48:31:
60:77:b7:4a:c3:98:46:ca:55:26:c5:9a:5e:fc:b7:
7c:ef:37:1a:e6:9e:09:1b:99:50:c7:54:4e:31:80:
0b:d2:17:f8:c3:f5:43:14:17:cd:48:ed:52:f8:bb:
f5:1f:7d:94:2f:5d:98:58:fe:81:72:dd:17:58:7d:
fc:2d:e4:ec:06:44:41:6d:c1:19:34:57:71:6e:88:
9c:9e:39:4d:35:9c:a0:c0:63:3b:44:64:b9:9f:b3:
dd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0D:1D:E3:F5:04:16:2F:3F:F1:38:04:78:A8:5D:6B:96:66:B5:91
X509v3 Authority Key Identifier:
keyid:21:20:91:3C:94:CA:E1:FF:C4:4E:C9:5A:B1:74:28:10:39:8E:02:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d150a188184eb3e194f963dfc48dfa17a2509aa8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/ebdaa3605cacb42c6d5f8f7bf9f4ebff932a28ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/d150a188184eb3e194f963dfc48dfa17a2509aa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.171.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9c:34:15:af:89:a7:0e:e0:d9:5b:3c:98:ff:ad:fd:d7:3f:
af:0a:b1:23:ad:62:ed:2d:9a:9c:79:6b:96:d9:00:d1:d7:00:
49:2c:2c:ed:e6:88:65:df:c7:16:83:e3:e1:ff:1b:16:08:2a:
26:27:53:7f:c5:92:eb:f4:e4:be:14:dc:1b:79:15:ba:5b:17:
17:ed:a1:d4:0b:b7:72:1c:42:0a:8a:be:13:81:e6:a3:fe:64:
aa:51:61:bc:aa:e5:1c:35:2e:ee:4a:ba:00:f9:90:17:2a:a4:
2f:7e:15:43:e8:92:22:be:6a:eb:c1:8b:17:82:87:df:f9:42:
09:be:0c:57:cd:18:7e:3d:33:f4:4b:f1:57:ae:39:93:fc:ba:
12:46:f2:51:7c:db:9d:2d:00:c2:fa:fc:43:ab:91:db:80:00:
00:08:aa:86:e3:19:9c:48:1a:89:65:63:f4:69:16:71:fd:ed:
81:a8:64:35:32:cb:a3:83:1e:35:4a:3e:ba:4a:31:d8:f5:55:
9c:d1:6e:51:4e:88:23:96:fc:5b:42:83:6c:74:97:c7:09:48:
84:3b:9c:3c:28:0f:99:67:7a:aa:08:51:dd:92:17:cb:7a:8b:
11:42:dc:77:df:47:66:3f:9b:28:7a:2d:f2:e5:51:5a:8b:4f:
e9:25:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org