Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0b1ccc03-b344-455f-b91b-342a76b8d060/700e67f33f12cc89a047d9e613b3187937f6fdfb.roa
File: 700e67f33f12cc89a047d9e613b3187937f6fdfb.roa (raw, json)
Hash identifier: f1dR3ZItv9HjilqPOnYgGjQI3TW4v3RyHdAurLtDpdI=
Subject key identifier: 2F:4C:DB:42:E6:3B:F1:49:32:7C:C2:DA:21:A6:08:7E:77:C1:36:49
Certificate issuer: /CN=6c8a4b07cb08ab3c53324618779575295829f1ff
Certificate serial: 0697C0
Authority key identifier: 9F:D4:EE:23:DD:0E:72:70:44:2D:91:DA:53:8A:88:77:66:A5:D5:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c8a4b07cb08ab3c53324618779575295829f1ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0b1ccc03-b344-455f-b91b-342a76b8d060/700e67f33f12cc89a047d9e613b3187937f6fdfb.roa
Signing time: Sat 10 Feb 2024 02:54:15 +0000
ROA not before: Sat 10 Feb 2024 02:54:15 +0000
ROA not after: Tue 10 Feb 2026 02:54:15 +0000
asID: 270149
IP address blocks: 159.16.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432064 (0x697c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8a4b07cb08ab3c53324618779575295829f1ff
Validity
Not Before: Feb 10 02:54:15 2024 GMT
Not After : Feb 10 02:54:15 2026 GMT
Subject: CN=700e67f33f12cc89a047d9e613b3187937f6fdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:b3:0a:54:52:87:82:7a:25:59:05:13:a1:
d0:a1:7a:ee:bb:cb:4b:84:07:c6:26:81:6a:ef:c7:
30:eb:c7:70:f7:65:4b:99:81:58:5d:1b:27:47:e2:
0e:d9:5a:92:6b:8a:e6:1e:f2:49:be:a3:d8:d4:93:
25:fe:64:3f:af:26:a5:d8:65:ed:d9:0c:f0:86:e0:
1c:7b:c2:6f:1d:25:7c:3e:6a:f4:2d:8b:ee:ca:b5:
4a:31:52:2a:d1:f8:99:63:ce:df:81:29:bc:18:48:
07:d4:2e:39:1d:26:0e:93:fd:17:2b:a2:5a:18:b6:
1c:b4:d8:86:6e:8a:b8:14:2e:fe:00:e7:ea:0d:5a:
d5:47:1f:e8:f6:0f:06:19:81:1e:1d:42:8e:93:a1:
3b:51:a5:79:f6:d1:9c:78:26:d9:56:45:37:54:53:
28:4b:ba:0f:e1:8e:76:14:e9:cf:0b:36:e2:fa:51:
77:a0:d4:3d:8f:bc:6b:e2:b1:50:56:fe:5d:5a:cb:
6d:d8:6d:64:20:28:ee:f3:66:2a:fc:56:55:c1:07:
75:5a:57:c5:94:c9:de:df:cd:8a:52:81:2f:8c:23:
94:14:78:ea:7d:a7:6c:ad:c6:d1:ae:f6:45:5d:ec:
4d:df:38:34:8a:65:ad:e0:ab:1d:fc:1b:51:f5:48:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4C:DB:42:E6:3B:F1:49:32:7C:C2:DA:21:A6:08:7E:77:C1:36:49
X509v3 Authority Key Identifier:
keyid:9F:D4:EE:23:DD:0E:72:70:44:2D:91:DA:53:8A:88:77:66:A5:D5:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c8a4b07cb08ab3c53324618779575295829f1ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0b1ccc03-b344-455f-b91b-342a76b8d060/700e67f33f12cc89a047d9e613b3187937f6fdfb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0b1ccc03-b344-455f-b91b-342a76b8d060/6c8a4b07cb08ab3c53324618779575295829f1ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.16.4.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b8:63:08:b1:f1:30:de:ab:33:ab:d5:16:d3:3f:ac:20:2b:
01:89:5e:f1:e1:dd:e0:34:e2:2c:f9:88:40:ec:37:8c:f5:12:
d9:14:ff:db:19:a4:34:a0:46:3e:ad:2a:bf:3a:8d:96:6d:cb:
9e:5c:06:f4:d4:1b:69:05:31:6a:09:ad:01:96:70:94:bf:d8:
6f:f8:a2:46:8d:70:c7:20:e3:db:fa:a4:c9:f3:e5:e0:82:df:
d8:ee:6b:42:36:e0:aa:b9:92:b3:c0:8d:7a:eb:23:a9:b2:5c:
2e:6c:21:39:43:26:7d:d2:4f:42:4c:9f:9f:89:fc:c0:0c:59:
24:15:24:55:ee:62:54:4e:f6:d1:b2:82:0a:0c:fa:74:1b:cb:
05:93:07:b1:c1:25:25:a3:7d:8f:89:36:a6:36:32:5e:23:10:
b5:91:4b:35:14:bf:24:4b:2f:77:d1:62:47:5b:60:b9:e8:3e:
c4:95:cf:66:81:5a:e5:2f:cd:52:6b:1f:55:5e:e3:01:d3:71:
6b:87:47:1c:aa:91:90:9e:4a:45:46:18:63:76:80:93:1c:09:
a1:68:6c:9b:9c:24:87:7c:ae:76:ec:86:ab:7f:f4:a1:55:0f:
69:8c:fa:dc:26:b5:08:97:2b:24:1f:27:28:dd:ae:a4:3e:de:
2c:e1:ec:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org