Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/2a3ff213985e6020240d46c496289b6ef05becb6.roa
File: 2a3ff213985e6020240d46c496289b6ef05becb6.roa (raw, json)
Hash identifier: D3kxerqVtD7+JxsWhGA6NklVs2UqtBtHBl46wJ0ssiU=
Subject key identifier: A9:F1:CB:32:34:B4:2B:F1:A1:17:34:B6:CA:DC:40:17:F3:57:BA:0E
Certificate issuer: /CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
Certificate serial: 20EBE4
Authority key identifier: 0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/2a3ff213985e6020240d46c496289b6ef05becb6.roa
Signing time: Mon 26 Jun 2023 16:09:05 +0000
ROA not before: Sun 25 Jun 2023 16:09:05 +0000
ROA not after: Thu 26 Jun 2025 16:09:05 +0000
asID: 52471
IP address blocks: 103.8.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157540 (0x20ebe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
Validity
Not Before: Jun 25 16:09:05 2023 GMT
Not After : Jun 26 16:09:05 2025 GMT
Subject: CN=2a3ff213985e6020240d46c496289b6ef05becb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:74:ea:d2:e0:bd:d4:a4:da:04:ab:ba:9f:
b8:b4:2f:89:9a:db:ff:89:fa:0e:04:bc:5f:a2:15:
ea:df:52:84:b8:8c:13:c3:ce:0f:c2:6f:b9:de:03:
d1:47:94:9c:ca:de:9f:73:26:8c:59:9b:eb:08:ae:
24:dd:05:58:83:0b:75:6e:0d:58:c8:f2:e2:c3:6a:
97:8b:28:eb:6f:8a:a7:7f:24:52:00:41:bd:a4:a3:
73:a3:77:16:6d:90:5f:b9:3f:ee:9e:b4:a7:87:f9:
aa:3f:7f:d4:a5:68:9d:8e:10:12:77:ff:56:0d:0b:
9f:21:cc:ef:1e:d7:b5:44:19:8b:5b:60:2e:f2:bd:
75:9c:10:89:d8:d9:01:5c:5d:ce:70:4f:a4:8e:71:
c7:fd:59:5f:13:6f:05:c3:59:04:c5:d7:98:8f:01:
50:d5:e0:7d:24:b0:b7:2b:69:6d:08:9c:1f:74:eb:
99:6e:ce:82:b0:4b:5b:a2:54:28:4c:da:6b:48:58:
57:44:68:52:d2:f5:0b:98:2b:40:0b:26:9a:1b:e5:
72:a9:25:16:f9:05:38:6f:fd:75:e2:8d:8d:27:b6:
6d:50:5a:d9:9b:be:75:40:69:6e:5a:db:7a:b8:d6:
d9:b0:75:40:90:33:e0:64:e4:1e:7b:84:15:e4:93:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F1:CB:32:34:B4:2B:F1:A1:17:34:B6:CA:DC:40:17:F3:57:BA:0E
X509v3 Authority Key Identifier:
keyid:0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/2a3ff213985e6020240d46c496289b6ef05becb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.8.92.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:5d:7f:f1:62:64:ca:86:72:59:ff:b9:2d:0d:45:a9:59:c7:
7e:93:98:94:f3:7f:b5:e0:03:91:e5:66:d7:11:a1:43:f0:2e:
e0:9d:ee:17:20:6c:8d:60:2a:e6:9d:d6:44:c0:7c:f2:ec:fa:
ac:ef:e4:2a:62:b6:d4:6c:ef:e4:58:61:4d:73:00:6c:a4:42:
48:40:b6:6d:23:b8:dd:6b:11:92:6e:08:66:2e:dc:60:d6:8f:
43:7a:90:6f:e1:cf:b7:a8:38:3c:10:21:a1:85:e1:55:33:29:
58:72:be:9f:40:3e:75:ce:94:48:16:b3:31:f6:08:41:0f:ac:
fd:6a:90:f1:43:f5:3b:0f:a3:22:e9:c2:6e:eb:7c:bd:18:ee:
1e:5d:ce:ba:12:45:f6:98:8c:b0:dc:c4:76:8a:1d:fd:2f:87:
77:ef:c8:6a:06:96:58:d2:a0:d8:c0:e8:1d:87:0c:b6:db:06:
d6:d0:d7:c8:3d:b1:9f:0d:93:e4:18:4a:5b:87:ba:64:d9:14:
35:7e:f2:ea:71:f5:ab:8d:4f:19:fc:d4:7e:96:37:07:b2:a0:
8f:18:44:0b:f7:80:b8:e6:dc:f4:52:ed:a6:3c:70:fa:e4:8e:
78:88:54:85:d2:02:27:f5:f4:5d:84:b8:27:35:7d:bd:07:ee:
3f:c6:d7:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org