Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27644c4f-083b-4264-a95f-89b13ee1dd66/ce95f25582b767e379297f472b6b83fd918d3ad9.roa
File: ce95f25582b767e379297f472b6b83fd918d3ad9.roa (raw, json)
Hash identifier: XSjA9Hs14tna0//n77NdqQgr56sUv/Q3NtG9DCkzQjE=
Subject key identifier: EE:66:47:11:57:A6:D8:47:38:C4:03:F2:FD:80:F2:62:BC:C2:98:35
Certificate issuer: /CN=2ee860d7ae057539e895d1293eae7aad56d34c53
Certificate serial: 1AC28C
Authority key identifier: 46:38:C8:83:DB:1C:FA:4A:03:22:D2:2B:65:57:8B:1B:34:5D:7A:91
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee860d7ae057539e895d1293eae7aad56d34c53.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/27644c4f-083b-4264-a95f-89b13ee1dd66/ce95f25582b767e379297f472b6b83fd918d3ad9.roa
Signing time: Mon 12 Sep 2022 21:41:40 +0000
ROA not before: Mon 12 Sep 2022 21:39:36 +0000
ROA not after: Thu 12 Sep 2024 21:39:36 +0000
asID: 265746
IP address blocks: 128.201.168.0/22 maxlen: 22
128.201.168.0/23 maxlen: 23
128.201.170.0/23 maxlen: 23
128.201.168.0/24 maxlen: 24
128.201.169.0/24 maxlen: 24
128.201.170.0/24 maxlen: 24
128.201.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1753740 (0x1ac28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ee860d7ae057539e895d1293eae7aad56d34c53
Validity
Not Before: Sep 12 21:39:36 2022 GMT
Not After : Sep 12 21:39:36 2024 GMT
Subject: CN=ce95f25582b767e379297f472b6b83fd918d3ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fc:ab:37:c3:37:1b:ff:6e:61:16:39:1a:8e:
d5:cf:7c:7c:42:ff:30:07:8a:42:ab:fc:c4:94:60:
0e:df:fd:02:fa:38:a5:e4:fe:48:70:37:d1:2e:ba:
d0:93:5e:c3:41:ac:f1:45:b9:ce:6e:44:bb:d4:ed:
e2:70:4c:95:10:81:be:45:03:55:e3:2c:d3:e6:1c:
87:4a:ff:ce:33:58:f2:b6:89:8f:a2:06:93:ca:27:
b3:e2:fc:9d:42:83:6c:d1:85:47:c8:b0:e0:35:ac:
d4:a7:c8:eb:49:fd:3f:50:c8:d2:aa:ba:86:b3:5e:
bc:e6:be:b5:bc:f3:ad:40:71:4e:21:88:69:b0:48:
ac:8b:d8:a3:4d:e6:2e:de:00:cc:90:1c:32:3a:40:
af:48:e2:27:9e:85:87:6b:fa:0c:71:ae:8b:96:69:
78:09:72:7d:63:af:e0:49:90:b2:51:cc:40:35:f5:
23:75:d6:2f:ed:cb:67:06:14:f9:b3:28:d0:8b:57:
41:d4:54:3a:28:28:6b:49:5e:50:62:16:10:06:77:
01:6b:01:b5:15:64:f6:2f:93:62:59:f2:83:53:5d:
33:a6:ef:5b:9b:e1:38:62:1b:73:5a:5d:dd:5a:c8:
04:86:b8:e6:79:25:42:c3:97:d8:31:3e:c7:97:c9:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:66:47:11:57:A6:D8:47:38:C4:03:F2:FD:80:F2:62:BC:C2:98:35
X509v3 Authority Key Identifier:
keyid:46:38:C8:83:DB:1C:FA:4A:03:22:D2:2B:65:57:8B:1B:34:5D:7A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee860d7ae057539e895d1293eae7aad56d34c53.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27644c4f-083b-4264-a95f-89b13ee1dd66/ce95f25582b767e379297f472b6b83fd918d3ad9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/27644c4f-083b-4264-a95f-89b13ee1dd66/2ee860d7ae057539e895d1293eae7aad56d34c53.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:ca:f2:9c:b4:9f:f0:f0:84:58:4b:d2:1b:1d:bf:6d:33:1c:
72:7e:4a:d4:b0:4e:a0:2b:ad:db:c3:fc:60:7a:c1:07:f0:ba:
7b:95:4b:9a:12:14:30:f0:34:e1:7f:6a:3e:c3:70:d0:f1:43:
be:c7:d5:4c:43:2f:54:5c:bb:39:50:ad:c3:53:75:ae:ee:d9:
b4:64:3e:83:cf:eb:4b:68:9d:e9:97:1c:1e:40:60:2e:6d:1a:
c8:63:e0:88:0c:fc:a1:17:7f:7c:e3:92:2d:5c:46:a2:ab:99:
ae:d5:ce:13:cc:b3:52:d4:28:13:35:1f:e6:df:70:ea:09:3f:
20:2b:b3:33:00:d7:5c:ed:95:e2:da:03:70:1e:c9:2b:9d:11:
0c:9f:bb:e5:c1:60:e3:72:0e:ba:42:d6:67:3b:7f:de:2a:1c:
63:66:fd:71:5c:43:b1:63:ac:f7:63:13:93:9d:81:69:f1:10:
d0:04:28:d8:a7:18:8c:75:93:20:8a:03:08:02:e7:89:ac:f9:
b3:f9:64:c4:40:c5:01:cd:e9:8b:a5:34:e8:34:f6:44:5d:0f:
65:19:b7:cf:24:7c:3f:4b:72:33:cf:94:95:a0:4f:c6:fe:f9:
02:99:32:12:a5:6b:9d:41:a8:43:13:13:db:c9:bd:cf:8c:02:
07:4e:bb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org