Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/4d7dacf4dfa62cf9be5410c3315a33c55e367a56.roa
File: 4d7dacf4dfa62cf9be5410c3315a33c55e367a56.roa (raw, json)
Hash identifier: uYSgCC8XQlU5vuTJNUIdmNUiqZ/taNQUDMZongPcUj0=
Subject key identifier: 79:D2:FA:80:C9:E4:8D:FE:00:8F:85:EB:DA:DF:05:65:68:97:5B:B4
Certificate issuer: /CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
Certificate serial: 0E19B4
Authority key identifier: B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/4d7dacf4dfa62cf9be5410c3315a33c55e367a56.roa
Signing time: Mon 26 Sep 2022 13:46:28 +0000
ROA not before: Tue 06 Sep 2022 01:52:16 +0000
ROA not after: Fri 06 Sep 2024 01:52:16 +0000
asID: 64139
IP address blocks: 207.248.0.0/22 maxlen: 24
207.248.0.0/24 maxlen: 24
207.248.1.0/24 maxlen: 24
207.248.0.0/23 maxlen: 24
207.248.2.0/24 maxlen: 24
207.248.3.0/24 maxlen: 24
207.248.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 924084 (0xe19b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb20dc482e7b13cc67dddf1a92de7cc20166d4a5
Validity
Not Before: Sep 6 01:52:16 2022 GMT
Not After : Sep 6 01:52:16 2024 GMT
Subject: CN=4d7dacf4dfa62cf9be5410c3315a33c55e367a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:c9:5c:43:5c:ef:6d:58:3a:08:81:1f:d6:
2f:85:b2:3e:9b:29:7b:b3:92:f6:56:a2:b5:ae:36:
29:93:45:f0:a3:3c:2e:59:02:70:65:7d:b4:61:68:
06:64:4d:7b:5d:2c:1b:a2:d6:33:ff:f6:d7:19:92:
49:15:1b:d3:a4:1a:19:97:22:f2:22:32:3c:07:7e:
e7:8d:d7:6c:a3:30:ac:67:6f:c6:df:5b:5d:39:2e:
a6:5d:3d:46:e7:c6:10:d6:b5:df:ba:4f:a6:fe:59:
50:2b:13:ba:b3:da:70:f4:4e:a4:72:cc:b5:be:f2:
b0:d5:cb:65:f6:3f:85:4a:6f:e8:fb:d5:4d:53:cc:
a7:53:48:c7:5e:20:02:86:be:52:79:a0:9b:cf:5d:
be:4a:d4:f7:d3:91:44:a5:0e:6f:6e:51:11:db:0a:
13:cd:72:ce:bc:a8:e6:44:c2:d9:4b:4d:28:b2:00:
cb:1c:94:0f:5c:ed:bc:c7:54:ef:22:23:58:42:76:
3c:c1:f3:54:8e:d7:0b:be:9b:f3:ff:e6:a6:2a:a7:
61:11:fc:fb:af:99:e1:05:96:90:f5:5a:e4:f7:c0:
40:85:c7:e8:09:de:ae:0e:b0:87:ec:b4:3a:2b:f8:
29:a3:80:c9:7f:e9:0c:22:cf:57:78:50:af:63:b8:
e1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D2:FA:80:C9:E4:8D:FE:00:8F:85:EB:DA:DF:05:65:68:97:5B:B4
X509v3 Authority Key Identifier:
keyid:B7:A0:31:B6:AB:96:BA:26:36:48:D6:E1:19:93:E9:2C:27:C0:83:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/4d7dacf4dfa62cf9be5410c3315a33c55e367a56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/26a89c02-e90f-41cf-bcea-3fd5f85598bf/bb20dc482e7b13cc67dddf1a92de7cc20166d4a5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.0.0/22
Signature Algorithm: sha256WithRSAEncryption
58:0b:e7:52:cb:2a:03:d5:59:b3:18:17:87:4f:fb:40:05:ad:
7f:c6:31:8a:9c:af:6b:fd:ec:50:b8:92:08:67:7b:e3:24:05:
ba:9c:7e:ec:5c:ce:23:06:85:79:d0:5a:1a:b0:0f:d6:ba:72:
2e:23:4e:48:53:9d:e4:3e:65:68:a6:2b:f4:c2:2f:a4:37:a2:
85:29:7d:0b:a9:5c:49:2f:e0:53:06:c2:46:f6:5b:61:a2:94:
f6:b1:6a:56:d9:1f:87:60:56:5e:42:9c:02:e7:76:a0:98:06:
e9:8d:ad:7f:d6:88:cc:d2:98:0e:fa:62:74:e8:31:00:69:1e:
de:cf:f9:78:df:66:d8:f8:71:e7:37:29:00:32:bd:e7:d5:66:
41:02:8a:c3:9f:9d:47:fc:29:4b:1c:48:64:06:07:23:f3:fe:
c6:53:49:a9:c3:fb:95:fd:94:3e:76:e2:47:e3:36:dd:d6:cc:
00:ff:36:00:fe:1d:db:c0:0e:6e:06:ca:a6:26:57:f8:f4:c7:
09:7d:bc:77:c8:c6:22:5a:92:ce:fd:60:d5:c5:09:c3:75:e8:
c9:24:29:84:47:32:dc:4f:da:56:6d:56:bf:26:d6:d3:cb:b6:
0d:e4:95:39:71:b0:f8:f1:df:60:42:5f:47:9b:8b:9a:28:96:
a9:0f:8d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org