Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/46f30c720f0d5d85bd18f731bf0cd0cf0ee01091.roa
File: 46f30c720f0d5d85bd18f731bf0cd0cf0ee01091.roa (raw, json)
Hash identifier: 96WCPSZEzlndzpkMngqW+aCVN4oJMTokF4ay0tGZY/Y=
Subject key identifier: D3:DE:F7:D4:12:99:6E:2B:FE:6E:3B:E5:3E:E6:86:41:2F:CB:CE:8C
Certificate issuer: /CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
Certificate serial: 0DF3E7
Authority key identifier: B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/46f30c720f0d5d85bd18f731bf0cd0cf0ee01091.roa
Signing time: Wed 21 Sep 2022 13:29:52 +0000
ROA not before: Tue 06 Sep 2022 01:52:16 +0000
ROA not after: Fri 06 Sep 2024 01:52:16 +0000
asID: 64139
IP address blocks: 207.248.0.0/24 maxlen: 24
207.248.1.0/24 maxlen: 24
207.248.0.0/23 maxlen: 24
207.248.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914407 (0xdf3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
Validity
Not Before: Sep 6 01:52:16 2022 GMT
Not After : Sep 6 01:52:16 2024 GMT
Subject: CN=46f30c720f0d5d85bd18f731bf0cd0cf0ee01091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:51:d3:af:f1:db:c4:a0:78:b2:37:da:84:08:
12:60:d9:82:bc:c5:ba:88:76:12:f1:b6:79:be:09:
b7:63:72:c8:a3:69:9b:fe:a0:1b:1a:0c:04:53:ce:
bf:ac:61:c0:b9:74:79:90:07:f1:6a:78:a7:60:cd:
09:83:85:be:e1:75:74:3d:16:4a:53:53:2c:99:db:
01:d7:a3:75:fe:e2:be:7b:9f:0b:81:17:6c:3c:73:
5a:f9:70:4d:7c:50:fb:ed:0f:22:9a:dc:68:db:5d:
da:37:f8:f8:5f:c0:d9:ac:c5:8e:ba:e2:da:3d:52:
da:ba:84:58:c1:33:69:47:fd:2b:f5:88:2b:54:32:
a1:61:3e:17:08:3c:eb:76:7f:90:9c:2f:10:21:63:
36:28:09:51:33:42:8f:fe:0a:4d:a6:c9:7c:f5:2b:
1f:a6:ec:95:30:38:03:ea:d8:a4:c3:04:01:41:b6:
b7:63:6f:60:e4:8c:42:51:7e:c5:20:8a:a7:1e:05:
32:2e:78:c4:60:da:c1:a3:e3:34:c5:4f:55:dc:e7:
a7:36:5a:67:27:26:de:69:41:66:82:57:93:47:57:
fc:9e:34:18:d1:b0:e5:ae:d3:df:36:e1:06:c2:bc:
fa:aa:3d:5e:6b:ef:7f:20:39:6b:fc:da:dc:30:97:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DE:F7:D4:12:99:6E:2B:FE:6E:3B:E5:3E:E6:86:41:2F:CB:CE:8C
X509v3 Authority Key Identifier:
keyid:B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/46f30c720f0d5d85bd18f731bf0cd0cf0ee01091.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.0.0-207.248.2.255
Signature Algorithm: sha256WithRSAEncryption
4a:04:e9:8d:6e:96:9d:1a:b4:b4:b8:cd:5f:c1:8c:d5:c0:d5:
3f:db:9d:a6:0c:ff:4b:1c:e3:ac:67:2a:11:16:97:6a:4a:40:
98:a7:07:ca:dd:95:24:a0:22:26:a3:df:47:38:dc:c3:95:ee:
a9:46:cd:a1:e6:49:01:a3:b8:a0:fb:f0:54:24:c2:08:dc:d6:
27:27:29:bc:f9:3c:dc:eb:d2:25:ee:3d:77:4c:be:49:a3:98:
44:dc:be:2c:61:77:ea:92:94:4e:73:54:b5:c1:9b:76:50:dc:
c2:24:65:bf:ca:03:12:71:ea:6a:9b:2b:2d:cc:66:b4:8a:da:
ac:d1:7a:a2:5b:0d:31:de:20:7b:13:a4:de:ce:d4:1c:c0:f4:
01:23:e4:87:5e:2c:28:fb:08:37:9e:98:b1:a4:1c:da:23:e2:
2a:2d:b1:dd:91:a0:c1:7b:06:77:2a:fe:54:70:e2:88:19:92:
3a:79:6d:ad:98:8f:4d:56:af:3e:87:d0:9a:fb:cd:88:fc:30:
ef:47:95:ab:2d:0d:21:49:05:ad:80:30:25:c0:1e:d2:cc:fc:
e3:1b:d7:e6:42:20:75:21:f9:ba:8a:49:7b:9d:e5:0f:c2:02:
f3:76:83:d9:6d:ca:97:9d:fb:c3:f3:61:ef:db:f2:b5:e7:a4:
7e:49:5e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org