Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27d416bc-9599-4e3b-8e42-276f12886dfd/a89f308a3fa3b0ed8b6d13d4a266f212837a0981.roa
File: a89f308a3fa3b0ed8b6d13d4a266f212837a0981.roa (raw, json)
Hash identifier: pnMMMZTX0wlnYagyfkQ4uvHV1wZ8ni+LBOfvYqTsyIo=
Subject key identifier: A9:3F:49:17:5F:DA:EF:AC:8C:69:86:F4:F7:DE:73:1C:EB:F7:1E:DE
Certificate issuer: /CN=d502571a0bec0848866bae47873a9e92f5232d23
Certificate serial: 0C41ED
Authority key identifier: AD:38:E2:4E:88:49:B5:92:EF:F3:8F:D8:3E:E4:35:71:0A:32:5A:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d502571a0bec0848866bae47873a9e92f5232d23.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/27d416bc-9599-4e3b-8e42-276f12886dfd/a89f308a3fa3b0ed8b6d13d4a266f212837a0981.roa
Signing time: Thu 25 May 2023 21:23:55 +0000
ROA not before: Wed 24 May 2023 21:23:55 +0000
ROA not after: Sun 25 May 2025 21:23:55 +0000
asID: 7004
IP address blocks: 170.84.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 803309 (0xc41ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d502571a0bec0848866bae47873a9e92f5232d23
Validity
Not Before: May 24 21:23:55 2023 GMT
Not After : May 25 21:23:55 2025 GMT
Subject: CN=a89f308a3fa3b0ed8b6d13d4a266f212837a0981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:4b:94:c2:c5:39:08:74:51:06:d4:4e:c9:
f8:ab:af:fe:c3:3f:46:bc:dd:6c:d8:46:63:cd:b5:
da:7f:c1:8e:14:58:8c:ba:0f:c7:8c:99:96:bc:80:
ec:35:70:76:6c:eb:5d:44:f7:25:1f:d8:f5:33:2d:
5d:f1:0e:a0:a6:93:b3:41:58:39:47:b3:5e:93:99:
e4:24:6a:f1:3b:c0:3c:55:db:62:84:f5:48:f4:54:
74:2b:aa:ce:e7:ec:0a:21:94:83:f4:e6:c8:45:84:
61:39:ea:36:fb:a5:b5:c7:96:b3:98:4f:ea:63:43:
8e:a0:6d:6d:cf:3c:e9:61:e0:e0:65:53:9d:74:45:
b0:16:5d:51:bb:11:86:94:d8:7e:ae:19:ef:6d:ed:
e5:cb:be:5f:34:14:e6:bc:6c:9e:10:b5:4c:11:1b:
2a:39:a4:b2:77:8a:9d:85:0f:23:3f:32:18:96:38:
a7:2a:74:2d:7c:21:63:41:eb:f5:b2:2e:ae:af:64:
82:ab:63:7a:60:3d:60:df:a9:5a:2a:14:99:8d:2c:
d2:9b:08:e4:b2:cb:b0:2e:79:09:45:ed:8f:e9:07:
9b:f6:8e:ad:7b:76:ac:83:24:e2:78:1a:f4:90:0b:
c5:8c:3e:c6:f7:47:12:0e:0b:95:f3:f9:60:59:9b:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3F:49:17:5F:DA:EF:AC:8C:69:86:F4:F7:DE:73:1C:EB:F7:1E:DE
X509v3 Authority Key Identifier:
keyid:AD:38:E2:4E:88:49:B5:92:EF:F3:8F:D8:3E:E4:35:71:0A:32:5A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d502571a0bec0848866bae47873a9e92f5232d23.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27d416bc-9599-4e3b-8e42-276f12886dfd/a89f308a3fa3b0ed8b6d13d4a266f212837a0981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/27d416bc-9599-4e3b-8e42-276f12886dfd/d502571a0bec0848866bae47873a9e92f5232d23.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.208.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:5b:b5:bb:f2:bd:6c:c2:5f:ae:6c:5a:87:a2:31:ba:3e:87:
f3:69:a5:50:87:5b:b6:31:e2:41:d5:2c:d7:8a:73:fa:6c:86:
26:ed:ea:32:65:6b:f9:39:34:e7:68:bb:f6:45:79:ff:17:bb:
ad:34:93:3c:bf:0b:2f:e6:89:3a:d2:81:31:2a:af:5c:e4:51:
97:d2:7d:88:03:ff:ac:46:f7:e1:2e:f6:59:fe:fe:97:b2:ae:
93:f5:65:d8:72:0e:30:fc:10:f4:95:51:1a:74:3b:08:58:10:
48:4f:7e:9f:63:9a:e6:2c:98:ac:52:cb:48:c6:23:16:bc:e6:
fc:34:23:5a:a0:c4:9e:94:24:eb:2d:4c:cb:1f:f0:8b:58:ab:
d5:83:ff:60:44:1d:e5:54:c8:4d:c3:3b:e8:41:c8:d8:c9:1d:
ee:b3:f3:b7:6b:52:af:35:94:cb:a4:14:39:cc:91:37:ee:6e:
4b:d0:65:14:1e:6d:2c:f8:50:d4:11:09:e5:5b:e9:a1:4f:f8:
0e:5c:50:8c:8c:b5:a8:56:bd:bd:bc:33:12:0d:57:78:5d:80:
b1:e5:b2:4c:16:46:67:98:a0:9e:b2:7e:0e:ac:c0:87:c1:50:
77:6a:fd:f9:eb:55:1f:99:56:f3:37:3d:c6:65:2c:91:a5:92:
85:65:da:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org