Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/67df7a5042f39df808a1eaa3c055a716f4e70c74.roa
File: 67df7a5042f39df808a1eaa3c055a716f4e70c74.roa (raw, json)
Hash identifier: P7g5AiRr6Fjhjy0xjVdvlZMtW/INum+LoESzlFvh85s=
Subject key identifier: F5:E1:14:FE:10:4C:D4:13:60:31:67:CB:25:17:64:F9:22:B1:0A:E0
Certificate issuer: /CN=1d01e0d3cb834f895612155144725f326726b46a
Certificate serial: 1A02CD
Authority key identifier: 09:29:CA:B4:B6:2B:66:D5:F7:17:2A:EE:84:5E:79:84:65:AF:59:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d01e0d3cb834f895612155144725f326726b46a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/67df7a5042f39df808a1eaa3c055a716f4e70c74.roa
Signing time: Fri 12 Apr 2024 20:10:08 +0000
ROA not before: Fri 12 Apr 2024 20:10:07 +0000
ROA not after: Sun 12 Apr 2026 20:10:07 +0000
asID: 204300
IP address blocks: 164.163.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1704653 (0x1a02cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01e0d3cb834f895612155144725f326726b46a
Validity
Not Before: Apr 12 20:10:07 2024 GMT
Not After : Apr 12 20:10:07 2026 GMT
Subject: CN=67df7a5042f39df808a1eaa3c055a716f4e70c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:83:06:83:f4:ab:65:7f:fe:89:61:73:dc:
42:dd:fe:e0:5d:a8:03:05:92:9b:48:5e:3a:e6:a5:
bb:e5:4a:f9:75:9c:b6:44:f0:f8:2c:99:0a:a3:4a:
9e:e8:9d:22:f6:75:da:88:b3:b4:4f:51:35:31:e8:
79:a5:f3:20:b6:cd:55:40:9b:8e:eb:4f:a2:10:6e:
14:20:b8:2a:ef:e2:21:c8:14:3f:ab:d4:d3:77:f6:
2f:e2:18:e7:fa:f7:07:fd:2e:93:00:8e:8a:2b:4b:
55:98:5e:bf:e0:7a:26:7b:bc:b2:68:81:e1:3d:fa:
a0:f8:85:f0:7b:86:9d:f3:f7:94:16:a9:f2:0d:08:
ce:d5:fa:c4:52:2a:54:11:cc:56:f0:d9:49:53:42:
73:c1:64:fa:42:e0:a7:30:47:36:e5:6e:92:fb:6a:
9c:d4:9c:28:6d:ce:b0:35:a5:90:07:20:c4:7d:39:
b8:69:49:10:79:e9:a2:3f:d1:a5:90:33:ef:37:a5:
40:17:86:63:75:75:50:dc:c5:79:63:b6:98:a5:60:
df:a5:52:b0:c3:f3:29:6b:e6:25:6c:88:d8:b5:71:
64:d7:da:ce:ac:11:49:e3:b4:a5:8f:21:19:1c:21:
37:10:ef:fa:cc:54:f6:6f:1b:8b:a8:45:33:5c:c0:
2c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E1:14:FE:10:4C:D4:13:60:31:67:CB:25:17:64:F9:22:B1:0A:E0
X509v3 Authority Key Identifier:
keyid:09:29:CA:B4:B6:2B:66:D5:F7:17:2A:EE:84:5E:79:84:65:AF:59:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d01e0d3cb834f895612155144725f326726b46a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/67df7a5042f39df808a1eaa3c055a716f4e70c74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0a563888-0a5d-480c-9a24-46af4b96bbb6/1d01e0d3cb834f895612155144725f326726b46a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.124.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e0:6f:b7:5e:79:37:31:a9:c3:c1:94:46:1d:9b:dc:84:22:
21:ac:53:d0:c9:d5:0c:77:b0:56:1a:56:c6:46:5c:9b:15:04:
c0:07:3b:31:2d:e6:14:c6:07:50:aa:be:cc:53:1d:84:68:8d:
1c:c0:0a:97:0a:a1:a5:b0:f9:5f:a4:cb:b0:4f:64:ad:2f:11:
d8:13:58:ce:ea:d4:6b:95:fa:df:fe:17:80:a2:97:c3:c5:bc:
6f:b6:c2:72:ef:9b:dc:b3:2e:65:9a:a8:d1:44:fa:6d:1b:2b:
00:ab:d7:03:17:9d:fa:ba:ff:02:2f:7c:bd:df:16:15:a8:17:
71:fd:bd:70:42:01:6f:4f:4a:1b:95:5e:47:fa:52:2f:84:17:
9e:cd:14:b6:d7:6d:da:a0:7b:37:65:8c:10:7f:3f:22:fa:5f:
e4:73:58:97:21:0b:e5:e0:12:1c:5c:af:1c:c6:25:ef:8f:8f:
7e:dc:5c:35:3b:63:35:be:cb:6f:99:5e:06:8b:b0:6b:2d:dc:
95:c2:ea:4e:82:53:d5:35:5a:c2:31:9d:62:26:18:23:e4:3e:
42:e2:fa:bc:0a:6e:07:c1:76:1a:25:af:1a:c0:f5:ab:2e:a3:
c6:dc:ef:9e:05:d5:37:2f:6c:85:3e:c9:42:b0:2e:52:ce:d7:
f5:3e:d8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org