Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/ed7fb74c1ca2443f3fc9f7ef4529531d7a06d21c.roa
File: ed7fb74c1ca2443f3fc9f7ef4529531d7a06d21c.roa (raw, json)
Hash identifier: fW1n1fI4+mPEKXenpubhUxwuqAMhFKNraDc+aaPnDIs=
Subject key identifier: 17:00:54:EE:75:FC:6E:AC:70:C7:5B:50:95:D3:9A:F0:44:4A:A6:23
Certificate issuer: /CN=6ff75e9cde86b5c490d171a8993267e23270787a
Certificate serial: 15A4F0
Authority key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/ed7fb74c1ca2443f3fc9f7ef4529531d7a06d21c.roa
Signing time: Tue 05 Sep 2023 22:06:26 +0000
ROA not before: Mon 04 Sep 2023 22:06:26 +0000
ROA not after: Fri 05 Sep 2025 22:06:26 +0000
asID: 14593
IP address blocks: 179.60.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1418480 (0x15a4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff75e9cde86b5c490d171a8993267e23270787a
Validity
Not Before: Sep 4 22:06:26 2023 GMT
Not After : Sep 5 22:06:26 2025 GMT
Subject: CN=ed7fb74c1ca2443f3fc9f7ef4529531d7a06d21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cb:89:b6:21:77:53:5b:b9:f2:6a:92:b7:cf:
8d:d0:8d:34:31:2e:c3:35:cf:6b:c8:54:3d:fb:33:
a6:c0:55:30:2a:29:64:ca:77:bf:bf:82:b8:d2:e7:
72:c7:4b:0b:f7:13:df:b1:dd:a4:84:02:8d:ba:1f:
1d:0b:09:20:6f:94:c9:2c:28:28:eb:17:73:9e:0d:
16:c8:87:96:7b:e6:13:07:35:3c:86:66:ed:dc:70:
f8:8c:14:96:1a:a3:c9:d3:43:60:24:2e:40:23:85:
17:ff:d0:7c:b1:a0:0e:17:41:fb:c8:21:cb:d0:1e:
b9:f4:d8:10:dd:41:9e:38:45:98:8b:c1:fe:2a:21:
cf:6b:57:9e:f9:75:ef:c9:ec:eb:76:7f:38:95:25:
8e:b3:34:75:8c:c4:27:67:8c:7e:85:b2:90:9e:7d:
a6:8a:ee:5c:57:1f:ff:3b:7d:a6:32:eb:26:40:f5:
9f:9a:3d:66:3f:68:3a:02:82:eb:65:37:08:fa:9e:
7d:33:55:40:ae:f9:ed:7e:69:9f:00:cd:be:e3:91:
4e:34:5b:86:e7:41:c9:f3:58:15:4b:83:29:d8:0f:
6d:2a:f8:a7:f4:d2:aa:03:f7:1b:ad:67:49:93:8d:
cf:92:25:2a:2a:f8:28:d2:65:fd:0f:14:bd:65:6b:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:00:54:EE:75:FC:6E:AC:70:C7:5B:50:95:D3:9A:F0:44:4A:A6:23
X509v3 Authority Key Identifier:
keyid:95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/ed7fb74c1ca2443f3fc9f7ef4529531d7a06d21c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.168.0/21
Signature Algorithm: sha256WithRSAEncryption
81:48:72:59:6b:d8:79:f9:f4:e2:ca:6d:c9:73:2a:23:17:fa:
56:71:9e:70:87:79:f8:3f:39:68:1c:4e:0a:e1:85:3d:2b:c2:
68:93:6d:d2:d4:5a:10:02:c2:9a:5b:eb:dd:cf:60:bc:10:9b:
55:4f:5d:a5:2a:e6:18:a4:e1:3e:90:e6:0c:79:8c:42:f9:67:
3a:f3:1a:a4:18:87:de:f9:0c:c3:27:cb:3c:f2:32:a5:64:78:
d5:b9:7b:d9:f5:f5:f5:14:d3:cb:a2:c6:1c:19:1d:ee:7d:8f:
17:91:89:67:e3:e2:68:b8:50:f2:41:11:0c:8a:58:70:d8:4d:
cd:9f:e9:23:cb:23:f3:83:a5:2b:40:b7:26:39:7f:f0:97:05:
de:e9:d7:ef:24:b8:53:f9:51:22:66:21:bb:cc:c0:54:3e:7d:
2b:2a:d2:cb:b2:fe:b4:ee:cf:e7:5d:4f:54:34:3c:0f:db:40:
2a:cf:a3:de:e3:b7:fc:8c:83:98:d1:5e:32:a6:55:24:d2:68:
b4:e2:97:d6:c9:a9:0a:26:c5:91:fe:45:23:f1:ee:ea:74:1b:
b5:43:e6:97:9e:a0:6c:b9:2a:69:f8:90:cc:ae:ad:1f:b1:87:
da:71:44:0e:0e:ad:34:9c:27:b8:ea:76:a5:2c:92:92:dd:12:
1a:bf:f1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:18 2024 by rpki-client on console-ams.rpki-client.org