Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/1b7bd73af383fbe36588dccc58a85699b39269c7.roa
File: 1b7bd73af383fbe36588dccc58a85699b39269c7.roa (raw, json)
Hash identifier: gW5dmzUswzPtycHkBmFw16I/dvCqiFWxqEtL6BfaGhI=
Subject key identifier: 5C:67:B0:8A:B5:1B:0F:CD:F8:8E:0D:F8:E0:A7:8A:79:52:99:89:38
Certificate issuer: /CN=98a80d301d847e6c050c408da1b0efe36548fad8
Certificate serial: 2784C8
Authority key identifier: 44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/1b7bd73af383fbe36588dccc58a85699b39269c7.roa
Signing time: Fri 01 Mar 2024 08:30:12 +0000
ROA not before: Fri 01 Mar 2024 08:30:12 +0000
ROA not after: Sun 01 Mar 2026 08:30:12 +0000
asID: 264659
IP address blocks: 179.43.104.0/22 maxlen: 24
179.43.108.0/22 maxlen: 24
190.211.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2589896 (0x2784c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a80d301d847e6c050c408da1b0efe36548fad8
Validity
Not Before: Mar 1 08:30:12 2024 GMT
Not After : Mar 1 08:30:12 2026 GMT
Subject: CN=1b7bd73af383fbe36588dccc58a85699b39269c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:97:2c:31:77:31:df:24:80:1d:8b:d1:c0:
91:4d:4a:0f:fe:bd:6d:05:2a:2d:4d:32:16:7a:0a:
4d:84:0b:cd:ff:17:fd:d9:95:c1:11:ab:cc:a3:94:
5f:49:6d:a7:04:48:f6:79:e7:8c:ae:88:c2:73:28:
3d:52:53:33:3c:49:c3:97:4d:0a:1b:42:da:b2:c2:
d5:57:5f:91:bb:9f:b7:1f:dc:26:b5:2c:e7:28:f5:
61:ef:dd:89:7b:2c:4e:3a:3f:aa:61:22:4c:56:87:
c4:8b:7a:e4:17:9e:d9:75:39:3b:ff:b6:bb:06:cc:
f5:97:e6:12:8e:a3:3f:a5:da:e3:b2:9a:95:b5:cc:
44:c3:9e:48:f6:ab:4d:7a:f1:8f:9c:01:db:5f:56:
f0:b4:01:a9:9f:4f:50:33:74:b7:da:93:66:2c:e6:
f6:3a:b4:2f:59:55:9f:fd:cb:aa:c3:4e:37:59:ce:
93:e1:42:e7:05:fe:74:ad:96:d7:18:6e:90:76:ae:
a8:0d:b1:0d:85:5a:c5:e2:d1:ba:61:8b:87:40:b0:
eb:6f:67:6b:a1:65:db:ec:4d:92:3f:df:f4:de:fd:
9c:65:3c:88:78:db:77:53:6c:4a:f4:bc:b1:d2:50:
95:50:54:ed:1c:39:fc:7c:21:bd:a8:33:87:77:ae:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:67:B0:8A:B5:1B:0F:CD:F8:8E:0D:F8:E0:A7:8A:79:52:99:89:38
X509v3 Authority Key Identifier:
keyid:44:60:6A:18:92:13:DC:19:3D:86:0D:3B:65:8C:E5:B4:EF:68:7A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98a80d301d847e6c050c408da1b0efe36548fad8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/1b7bd73af383fbe36588dccc58a85699b39269c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c268b2d-745b-4448-9e66-c086c4f36900/98a80d301d847e6c050c408da1b0efe36548fad8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.43.104.0/21
190.211.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:be:8d:ed:7e:59:8d:0f:1b:5e:45:13:a9:78:00:7f:e7:f7:
2a:55:aa:4a:9a:9f:f8:c5:da:fe:b6:ae:7d:25:81:43:f6:5e:
d3:f9:c3:dd:4d:c9:8c:31:08:a8:b2:c6:24:ba:44:a5:c4:ef:
46:a4:1b:97:bc:cb:3b:60:f9:3e:ef:df:31:b7:01:5a:c3:3f:
57:91:7f:cb:df:27:12:63:f3:cc:fd:b3:ce:bf:ef:44:44:53:
90:6a:84:4b:50:05:c2:84:d2:02:36:a4:e6:7d:da:5f:fd:a5:
5a:90:9b:21:01:9b:9f:4b:67:d2:77:3d:5d:79:e9:c3:52:36:
ae:10:16:28:a3:2e:74:2b:a1:61:e5:93:15:10:55:bd:08:b0:
22:78:ab:9e:01:0c:39:83:fd:9a:c7:05:cb:e4:8f:04:e8:97:
c6:79:06:71:34:05:88:db:6a:70:b0:dd:e5:3e:92:1c:08:86:
af:79:71:17:e0:d6:a1:18:b4:ec:0a:e0:9d:d1:5d:58:41:81:
56:7e:38:f6:38:7c:1e:bd:8f:99:0b:b2:b3:3f:60:03:c8:52:
37:16:cd:e6:26:cd:a4:33:35:3b:89:fa:71:02:8b:5f:3c:b1:
ea:2b:7f:07:81:2d:cd:92:75:72:27:42:28:76:0b:38:ba:e5:
5a:3b:a0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org