Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/e6fed5464661771e17aa2509607fd41c31684814.roa
File: e6fed5464661771e17aa2509607fd41c31684814.roa (raw, json)
Hash identifier: xuReJhCLXA+ikESxHSUB33+upHz7UTpne/XElZO2mvc=
Subject key identifier: C2:FC:91:10:FC:DE:35:5D:11:39:BE:00:74:F7:E0:A6:13:4C:0C:8A
Certificate issuer: /CN=12664936ff3e23a04dd6aaf24e9f7f4ca9183528
Certificate serial: 1BEFE9
Authority key identifier: D1:03:98:83:D7:74:69:C5:48:D0:D2:9B:47:45:20:8D:CB:64:73:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/e6fed5464661771e17aa2509607fd41c31684814.roa
Signing time: Wed 10 Jan 2024 14:35:22 +0000
ROA not before: Wed 10 Jan 2024 14:35:22 +0000
ROA not after: Sat 10 Jan 2026 14:35:22 +0000
asID: 267832
IP address blocks: 170.245.158.0/23 maxlen: 23
170.245.158.0/24 maxlen: 24
170.245.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1830889 (0x1befe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12664936ff3e23a04dd6aaf24e9f7f4ca9183528
Validity
Not Before: Jan 10 14:35:22 2024 GMT
Not After : Jan 10 14:35:22 2026 GMT
Subject: CN=e6fed5464661771e17aa2509607fd41c31684814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:a4:6c:65:c5:65:75:11:ba:ca:c2:24:5a:
c2:9f:cb:7e:91:d3:df:4a:2a:c0:60:c3:4c:ed:c1:
8f:62:07:9f:ab:01:ce:86:e8:7f:68:ee:17:5b:12:
ce:e9:7a:dc:5c:1e:3b:48:4a:21:62:63:90:b4:13:
80:d5:07:4e:a3:a7:eb:50:c8:d4:66:0a:9e:ff:dc:
97:e9:89:8f:86:41:50:26:64:8a:d1:74:05:3e:f6:
00:f8:ca:20:1e:82:b8:3a:33:cc:67:82:4e:39:fe:
74:96:9c:05:f6:a0:d6:4f:34:cb:fb:93:e1:32:55:
24:5c:dd:35:c4:75:1d:b2:ff:5d:45:64:9a:40:ac:
15:83:44:92:fe:71:cc:47:72:cb:f2:c7:7c:bc:77:
81:21:83:f9:43:d6:e8:1c:63:96:9d:c8:2a:56:4a:
07:77:b5:1c:5e:51:d5:0f:fe:bb:f5:6b:6b:6f:76:
bb:9e:81:c2:12:70:cd:19:c1:c6:d2:8b:2d:91:7c:
85:ea:bc:03:31:ec:95:fb:59:bf:aa:f5:5a:a4:88:
bf:9f:85:2c:b6:56:2b:09:67:b8:b5:b6:dd:52:42:
40:4d:84:8e:39:7a:69:fe:ea:e7:4a:8a:00:e9:48:
e1:35:2a:b1:ed:b3:11:7d:21:f5:72:43:13:fd:9b:
29:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FC:91:10:FC:DE:35:5D:11:39:BE:00:74:F7:E0:A6:13:4C:0C:8A
X509v3 Authority Key Identifier:
keyid:D1:03:98:83:D7:74:69:C5:48:D0:D2:9B:47:45:20:8D:CB:64:73:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/e6fed5464661771e17aa2509607fd41c31684814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/147892b0-7ff7-4d9f-8614-ba9a3d7aa168/12664936ff3e23a04dd6aaf24e9f7f4ca9183528.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.158.0/23
Signature Algorithm: sha256WithRSAEncryption
49:78:b8:42:e0:fa:15:92:ec:8a:ad:00:09:3d:cd:2b:86:3d:
09:0b:7c:a0:b9:37:93:a4:df:77:1f:e9:a4:65:9c:a6:bc:29:
c2:8b:d7:5e:66:5b:b4:b1:93:4a:45:05:2e:3f:5b:31:6e:0a:
26:e6:0f:97:8f:f3:91:fb:e4:21:38:8e:56:9e:a5:66:10:b6:
f3:0a:97:9e:a6:e4:5e:c8:e5:da:a6:1f:aa:f5:6f:8f:4d:6a:
2a:63:62:9b:b8:bb:11:c5:58:f6:52:bd:10:3e:69:1b:ee:d3:
d3:a3:8c:ed:26:8a:b0:10:7b:d6:d6:11:95:46:e1:dd:aa:b8:
fb:b5:52:bd:db:b0:22:e5:fe:e8:3f:85:d9:36:5f:a1:6d:fa:
78:ea:62:0f:5b:ec:a1:d1:29:50:85:42:64:9b:1f:77:77:41:
d0:6e:21:58:96:27:a6:89:c6:97:ca:5f:a7:2c:92:e6:d0:2c:
72:a0:83:3c:b6:82:54:30:23:17:df:42:e4:a5:be:fb:8a:73:
24:44:95:bb:6b:c0:2c:3a:bb:a4:fd:78:31:28:14:79:79:cc:
a6:79:14:86:f0:66:a5:ec:f6:bf:67:29:02:65:ba:64:58:66:
31:57:2c:b2:e5:94:3f:c4:49:b8:0f:1f:cd:3b:fd:eb:8f:97:
bf:e0:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org