Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34fe060b-30b9-4a47-ba3a-c71354f178de/2250dc18ed3c7e51d850c9584fce9a9f78896bfe.roa
File: 2250dc18ed3c7e51d850c9584fce9a9f78896bfe.roa (raw, json)
Hash identifier: Peyifo/MlwY9rYq09ordoRh3iiZtPbqNIzZ6SoMyCrM=
Subject key identifier: F4:26:F6:38:C3:29:3A:64:24:46:0D:41:2E:5F:ED:AD:D9:2A:21:57
Certificate issuer: /CN=e36c5f67b0abefe5c268964d616bd25c0962be24
Certificate serial: 03D35B
Authority key identifier: 65:75:8C:A4:AA:8A:42:F4:91:C4:75:20:E6:44:5E:4C:4B:9C:95:F0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e36c5f67b0abefe5c268964d616bd25c0962be24.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/34fe060b-30b9-4a47-ba3a-c71354f178de/2250dc18ed3c7e51d850c9584fce9a9f78896bfe.roa
Signing time: Wed 24 Mar 2021 14:37:13 +0000
ROA not before: Wed 24 Mar 2021 14:37:12 +0000
ROA not after: Tue 24 Mar 2026 14:37:12 +0000
asID: 264621
IP address blocks: 143.0.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250715 (0x3d35b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e36c5f67b0abefe5c268964d616bd25c0962be24
Validity
Not Before: Mar 24 14:37:12 2021 GMT
Not After : Mar 24 14:37:12 2026 GMT
Subject: CN=2250dc18ed3c7e51d850c9584fce9a9f78896bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:d2:4a:7e:7c:a0:7e:54:99:36:fc:c0:cd:
99:6d:2d:ef:94:1c:48:72:64:78:d5:97:2e:98:42:
ee:fe:a3:89:3f:77:9d:37:ae:e1:d6:af:3a:ee:e0:
d7:3f:e9:b9:29:a5:8c:c9:34:37:e0:62:e2:a4:3a:
de:32:1a:b8:a2:d4:83:97:1c:77:9f:5f:e9:df:d1:
f9:88:f7:a9:ba:4f:c2:22:e7:d0:45:8f:17:66:4d:
f5:40:32:94:44:cf:da:bf:75:da:22:7f:91:99:22:
10:1d:80:fe:2e:bc:57:f8:54:7d:14:c4:cc:bb:ac:
d2:48:48:80:dd:74:66:1a:76:81:ef:5b:35:1d:56:
fd:e4:20:b5:70:9d:32:c7:c0:18:95:f5:b7:ff:94:
57:30:d2:e2:15:28:fe:26:07:33:76:6b:c2:3b:51:
97:db:26:ba:59:92:1e:33:c2:32:fa:38:3c:d5:0b:
15:f3:58:06:5b:58:62:f6:2b:a5:a9:d1:23:08:f0:
a3:4e:ec:97:69:24:43:d0:7e:98:fc:59:e6:97:fe:
b5:a3:8d:35:75:65:99:70:19:6c:5b:2a:fe:b8:83:
03:35:8d:14:f4:34:23:69:03:bb:cc:af:e1:cf:fb:
ac:ab:ae:f3:53:47:e0:3c:fb:11:2e:59:0e:7e:74:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:26:F6:38:C3:29:3A:64:24:46:0D:41:2E:5F:ED:AD:D9:2A:21:57
X509v3 Authority Key Identifier:
keyid:65:75:8C:A4:AA:8A:42:F4:91:C4:75:20:E6:44:5E:4C:4B:9C:95:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e36c5f67b0abefe5c268964d616bd25c0962be24.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34fe060b-30b9-4a47-ba3a-c71354f178de/2250dc18ed3c7e51d850c9584fce9a9f78896bfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/34fe060b-30b9-4a47-ba3a-c71354f178de/e36c5f67b0abefe5c268964d616bd25c0962be24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:01:a5:b4:a8:6d:c6:25:a2:66:32:49:e9:c6:6b:cd:69:fa:
43:8c:92:a0:dc:e7:02:fc:72:83:ca:d9:ac:50:03:04:c4:ff:
20:77:94:1e:e1:69:e2:e7:92:58:9c:9d:56:04:81:41:88:cb:
ae:69:72:75:e2:da:19:61:cb:79:f3:ee:7e:8f:72:df:22:80:
d1:f0:42:2b:d0:5d:ca:6d:59:7c:c4:7d:6a:aa:17:c6:06:12:
08:c2:c1:99:8a:37:ef:8d:f5:4c:ef:e2:77:31:21:f8:60:f9:
89:49:99:9e:20:90:c0:70:be:15:69:ba:20:30:50:39:c5:66:
89:d0:01:bb:f2:71:68:ca:41:38:e1:7b:03:db:32:f8:73:94:
46:77:76:ee:24:dc:57:e7:d5:3b:e0:87:d2:49:a8:6b:9a:cc:
24:a8:d2:a0:29:70:ad:da:a7:4e:50:78:76:90:06:bb:57:d8:
38:4c:c8:d3:93:fc:37:78:1d:45:08:e2:01:86:84:33:f9:64:
69:f7:15:29:5f:21:f9:69:16:c5:bd:3c:f1:48:c6:19:33:44:
14:3e:bc:1f:16:e3:43:ee:2a:dc:80:11:06:54:96:e6:65:cd:
41:13:e5:1d:09:7d:fd:01:ff:e3:32:24:9c:54:b0:58:fb:02:
80:ce:18:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org