Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/652e238e8e9902928cc6053f4d5e9168388de08a.roa
File: 652e238e8e9902928cc6053f4d5e9168388de08a.roa (raw, json)
Hash identifier: 5NzwQJzXNlZTi6Z6FZD6XbsgjNUobXbWETA74QEekFM=
Subject key identifier: 6E:C4:0D:63:07:68:9B:D8:62:FB:69:79:B2:DD:5A:F7:A6:7B:C4:1E
Certificate issuer: /CN=fa51358f08e5b961b8771fd9e9a858af6e1a4b4c
Certificate serial: 0B2EC6
Authority key identifier: 27:5D:8C:C6:B0:4B:F0:2A:37:A8:B9:45:1A:34:E9:6E:F2:9A:5D:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/652e238e8e9902928cc6053f4d5e9168388de08a.roa
Signing time: Wed 09 Aug 2023 17:37:21 +0000
ROA not before: Tue 08 Aug 2023 17:37:21 +0000
ROA not after: Sat 09 Aug 2025 17:37:21 +0000
asID: 267858
IP address blocks: 170.244.168.0/24 maxlen: 24
170.244.169.0/24 maxlen: 24
170.244.170.0/24 maxlen: 24
170.244.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 732870 (0xb2ec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa51358f08e5b961b8771fd9e9a858af6e1a4b4c
Validity
Not Before: Aug 8 17:37:21 2023 GMT
Not After : Aug 9 17:37:21 2025 GMT
Subject: CN=652e238e8e9902928cc6053f4d5e9168388de08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:29:8e:cb:1b:9a:31:83:89:83:ea:fb:9d:
fc:43:f6:13:fa:e7:d8:44:50:53:04:fb:90:b2:d4:
49:46:ce:94:e3:ad:2a:88:cc:08:7c:1e:e6:04:f5:
0b:9f:3b:9d:b2:3a:68:3e:4a:56:6d:a1:f8:c3:26:
7c:e4:ca:7d:5d:63:4d:27:3c:41:47:99:25:0b:fd:
4a:3c:86:0e:ff:c2:49:2e:60:93:66:70:7c:35:93:
ef:40:1c:a6:3d:47:82:30:81:47:ec:b8:0f:00:9d:
4d:74:23:94:70:cc:c0:06:8a:88:62:0c:a8:f7:44:
b9:70:ec:08:96:6f:35:3d:e4:63:14:c5:7c:32:c4:
22:d9:e5:f6:70:a7:ac:b6:90:50:36:31:8b:03:15:
b3:12:bc:63:2d:b6:07:10:43:c3:96:ca:ec:1c:ae:
b9:5a:67:46:91:a2:45:3d:e4:c3:05:65:aa:d3:f6:
67:7f:b6:29:8b:5e:d4:8c:02:fd:ae:1e:b8:cf:5c:
52:a6:48:03:8a:f8:89:98:e1:48:03:d0:c4:8a:fb:
d7:92:6c:b5:39:30:94:cd:98:2f:aa:e3:c7:64:21:
cf:b4:0b:3d:f1:5c:87:09:f9:ef:50:d3:fd:1a:db:
93:76:e3:af:e7:ec:7a:0b:a6:a1:86:e6:da:f5:9f:
1d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C4:0D:63:07:68:9B:D8:62:FB:69:79:B2:DD:5A:F7:A6:7B:C4:1E
X509v3 Authority Key Identifier:
keyid:27:5D:8C:C6:B0:4B:F0:2A:37:A8:B9:45:1A:34:E9:6E:F2:9A:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/652e238e8e9902928cc6053f4d5e9168388de08a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.168.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:be:a6:a1:0b:be:ec:64:f1:14:e3:e7:e8:bc:96:94:91:55:
7f:08:b3:fd:cd:2d:04:a7:38:ac:4d:51:29:42:ae:59:72:7a:
1a:fe:4e:5d:2c:b0:a3:83:64:f9:cb:ed:9b:28:65:d2:a5:75:
68:8b:90:e1:27:00:f9:93:be:f0:1f:9a:94:8f:f4:4a:4a:51:
e5:c0:be:8f:f2:f2:5e:19:7e:e8:ea:25:26:dc:fb:80:e1:43:
98:b7:e8:7b:c5:df:c0:92:58:5d:06:94:bd:91:38:c0:b3:18:
0c:31:07:c1:27:24:da:e2:33:7a:9e:d2:04:3b:59:9a:86:2c:
be:40:be:94:28:7a:25:78:11:44:25:4e:01:6c:9c:42:03:a4:
c5:32:54:ce:f6:5e:2b:e4:ac:c6:11:fe:57:71:a3:8c:a1:c6:
4e:a8:a5:ca:65:6c:95:f6:8d:1a:88:f4:04:b9:6e:b7:3e:fe:
a4:a3:f2:ae:25:3d:d9:c3:94:14:65:2c:33:a2:b4:b3:f7:99:
a6:b8:24:e6:80:88:44:84:77:05:99:c0:0a:61:0d:0a:4b:b9:
11:62:e8:e4:b5:cc:79:21:7d:98:65:06:68:b3:fb:4e:c1:a5:
cf:b2:7a:63:07:e8:7b:7a:89:3e:ac:cf:45:e5:2b:b5:7d:8e:
bc:41:dc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org