Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/c9d5cb0aea1e73cd83733059348300a785c2a765.roa
File: c9d5cb0aea1e73cd83733059348300a785c2a765.roa (raw, json)
Hash identifier: q25+5qQZFxWIBu+TpFDq9JDlaV69i5EnMrOKTvnIlRA=
Subject key identifier: 4A:C5:D4:44:EA:28:E1:3E:D0:AF:62:C5:60:21:E2:30:8B:5E:4C:CD
Certificate issuer: /CN=6ff75e9cde86b5c490d171a8993267e23270787a
Certificate serial: 178D3F
Authority key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/c9d5cb0aea1e73cd83733059348300a785c2a765.roa
Signing time: Thu 16 Nov 2023 21:09:34 +0000
ROA not before: Thu 16 Nov 2023 21:09:33 +0000
ROA not after: Sun 16 Nov 2025 21:09:33 +0000
asID: 14593
IP address blocks: 148.222.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1543487 (0x178d3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff75e9cde86b5c490d171a8993267e23270787a
Validity
Not Before: Nov 16 21:09:33 2023 GMT
Not After : Nov 16 21:09:33 2025 GMT
Subject: CN=c9d5cb0aea1e73cd83733059348300a785c2a765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1f:a6:1c:5a:7d:99:6e:e3:ae:bb:a7:37:15:
fd:59:f4:29:77:06:f9:2b:e5:96:d2:7e:76:21:30:
a7:b4:50:f0:5e:48:6a:31:a5:14:4c:7f:e6:7c:a9:
50:b3:de:2d:a8:83:3a:c9:87:3e:f6:ef:93:e9:f3:
59:96:20:c5:3b:f2:a7:a7:39:0d:d3:f5:a8:c0:fd:
10:6f:13:69:e3:f0:b6:4b:82:fd:16:9c:c5:26:d1:
3f:0d:04:ad:97:bb:59:8e:b7:51:77:50:63:23:93:
05:e6:2c:1c:39:da:92:98:3a:e9:1d:bd:94:1e:c1:
04:93:9c:a3:82:17:31:96:93:fd:e4:ca:a3:9c:5d:
f2:ec:65:39:7f:b7:e2:64:18:d6:5b:a0:b9:82:f5:
c6:c8:50:ed:ce:f0:7b:df:f0:6c:21:46:e0:16:7c:
33:f8:ef:2a:57:61:33:e1:9c:f3:e8:a4:7f:4c:d0:
57:c6:a6:06:f5:55:b2:0e:ca:8d:69:88:d5:db:f3:
c8:7c:37:7c:2d:6f:ff:c0:2b:7b:ef:e7:17:42:5c:
d9:c9:00:15:37:90:7d:58:82:a9:b9:33:36:ad:9c:
96:a2:10:c3:93:c7:76:68:49:6b:49:1b:3b:4c:68:
20:9a:4e:5a:a3:5f:0b:7c:e5:fe:64:19:7c:3d:53:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C5:D4:44:EA:28:E1:3E:D0:AF:62:C5:60:21:E2:30:8B:5E:4C:CD
X509v3 Authority Key Identifier:
keyid:95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/c9d5cb0aea1e73cd83733059348300a785c2a765.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.128.0/21
Signature Algorithm: sha256WithRSAEncryption
55:5f:84:d1:b6:dd:df:2d:d6:f4:81:d4:d7:cb:d2:ec:0b:91:
06:e6:39:a5:9c:c9:b8:91:40:3f:16:a3:f0:66:6a:e3:bc:77:
74:1b:ae:54:f3:2a:15:11:6d:b4:67:46:e3:f6:dd:81:12:6e:
a8:be:50:92:96:31:bd:a4:9f:e3:6c:67:8b:23:88:8e:b9:40:
b1:12:c4:ae:ed:3e:d4:65:08:0d:19:00:71:ac:b8:9d:d1:ce:
2e:4d:46:f7:7e:21:02:47:de:20:5c:75:a2:52:f5:8e:a7:91:
e3:4e:ba:d7:bf:07:51:52:83:ce:7d:fc:a4:87:cb:dd:c9:1f:
48:a6:fd:0a:da:d1:7e:3e:97:de:98:88:be:e1:1d:68:b6:47:
a7:32:a0:bd:dd:e3:08:65:4b:d2:45:a6:08:b0:2e:80:08:09:
c7:fd:bb:6b:db:2e:ab:c6:0c:df:c0:0e:1c:72:a4:05:b4:e7:
a7:d8:4a:16:ee:3d:79:38:93:e9:a9:d0:5c:9f:45:ab:f1:cc:
8f:8f:c3:b3:54:9b:f7:da:f7:7b:b6:3f:36:41:b8:7a:00:d3:
bc:cb:9e:90:89:ca:5b:4b:62:81:37:79:bd:4b:0d:55:67:bd:
4e:fd:51:78:b1:87:d7:18:2d:8d:b6:c5:44:05:15:18:66:d5:
02:df:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org