Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/740f6e532e1d16c7b352c004c895d6a9721ce1bb.roa
File: 740f6e532e1d16c7b352c004c895d6a9721ce1bb.roa (raw, json)
Hash identifier: Rbrb3kOYjKaklhUqeFvx03XQXjbiBcxYBeuPwI79GQ8=
Subject key identifier: EF:80:34:3B:30:A9:A4:22:D8:53:43:44:92:26:FD:AB:F3:86:C6:FA
Certificate issuer: /CN=87d7ecf6694b4fce05cc75b585f16aa645244ba4
Certificate serial: 28091E
Authority key identifier: 1D:58:0A:D9:AD:FE:37:B8:8F:F8:2E:98:88:C8:0D:64:8C:0A:18:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87d7ecf6694b4fce05cc75b585f16aa645244ba4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/740f6e532e1d16c7b352c004c895d6a9721ce1bb.roa
Signing time: Fri 01 Mar 2024 19:35:31 +0000
ROA not before: Fri 01 Mar 2024 19:35:30 +0000
ROA not after: Sun 01 Mar 2026 19:35:30 +0000
asID: 64100
IP address blocks: 170.84.232.0/22 maxlen: 24
2803:db40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2623774 (0x28091e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7ecf6694b4fce05cc75b585f16aa645244ba4
Validity
Not Before: Mar 1 19:35:30 2024 GMT
Not After : Mar 1 19:35:30 2026 GMT
Subject: CN=740f6e532e1d16c7b352c004c895d6a9721ce1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:80:04:9e:d4:e0:f1:f7:1e:b4:f7:6b:64:ee:
f7:29:a8:4d:89:df:fa:09:dc:1d:6e:2d:cf:2f:cb:
84:b9:f8:a0:40:de:69:f7:a4:3f:05:f1:56:97:d4:
31:99:92:b6:a4:d0:3c:22:b1:b4:d1:e3:40:de:6e:
1c:58:00:00:f9:e4:e6:cf:3b:a9:9f:03:49:5d:84:
53:0f:0a:a3:39:14:63:25:bc:4c:89:b6:68:1c:f3:
97:97:34:9d:e0:fe:30:65:29:79:48:7d:24:f0:fc:
b1:48:26:51:99:b6:19:06:6f:4c:cf:41:86:70:7c:
8d:a7:83:3a:6c:95:2e:39:9b:1a:d6:f7:0f:10:9a:
b6:32:5a:9c:48:c1:81:57:e1:60:84:9a:40:2d:dc:
85:c4:ce:21:7f:6e:80:75:50:1a:aa:b6:5e:5c:e0:
97:c4:3a:08:6d:bb:0f:32:5b:57:75:ca:7a:59:5d:
d8:05:89:e2:a8:0f:aa:1c:39:94:5d:4a:6c:2b:b2:
14:1f:c3:5f:08:a9:57:86:8d:f7:e2:59:30:7e:46:
d1:41:77:d4:43:8d:23:8f:58:13:e5:5a:65:87:d4:
74:92:bc:7b:af:93:b6:9d:79:c1:83:42:69:2d:5d:
85:9a:f7:6f:bc:0f:6f:57:a2:8a:8a:c8:69:85:11:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:80:34:3B:30:A9:A4:22:D8:53:43:44:92:26:FD:AB:F3:86:C6:FA
X509v3 Authority Key Identifier:
keyid:1D:58:0A:D9:AD:FE:37:B8:8F:F8:2E:98:88:C8:0D:64:8C:0A:18:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87d7ecf6694b4fce05cc75b585f16aa645244ba4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/740f6e532e1d16c7b352c004c895d6a9721ce1bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/16f53e9a-9c80-47a9-b8ea-6ecc698bf29b/87d7ecf6694b4fce05cc75b585f16aa645244ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.232.0/22
IPv6:
2803:db40::/32
Signature Algorithm: sha256WithRSAEncryption
00:45:3f:01:56:90:7b:e3:ae:62:23:ae:ac:9d:fa:c8:f2:ed:
7d:ef:95:d0:4f:62:5f:1b:21:14:ac:de:17:33:40:ab:fa:8b:
a7:09:9a:4e:24:c2:4c:2c:7c:e8:4d:0d:17:65:57:6d:9c:b8:
b9:39:04:9b:8e:be:dd:34:d7:2f:91:3b:5b:47:56:33:bc:23:
f6:76:86:66:83:b5:b9:d9:c8:45:a3:0d:1a:d4:95:ba:89:10:
78:a5:61:ec:55:51:8d:69:ee:e9:19:d8:2c:ae:e2:3e:09:4c:
8e:e4:a5:00:67:c5:3c:ea:4a:d6:0d:5a:09:05:96:bc:66:ff:
78:1e:32:39:bd:e3:73:45:d1:83:61:60:3b:8d:82:34:32:0b:
f6:03:ba:b5:c8:ea:51:37:d0:fd:69:e7:98:f6:df:95:83:7c:
12:b6:71:31:a7:f3:cb:99:49:c0:44:6e:f3:55:d5:c3:18:af:
da:8e:3f:eb:96:7d:25:0e:61:71:62:dd:07:ab:da:ea:af:8c:
e7:e8:38:98:bb:5c:00:f9:36:b2:61:b6:6b:85:79:5a:79:9b:
da:92:c4:f3:75:ec:b3:fb:ce:e1:ea:c1:58:5c:e0:f8:a8:63:
f1:73:c3:60:2d:2d:c8:98:7a:21:44:30:b0:40:37:98:2d:99:
d7:a6:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org