Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/0869c33148de00ada4f659f26d4131208983c55c.roa
File: 0869c33148de00ada4f659f26d4131208983c55c.roa (raw, json)
Hash identifier: kskpUnbW2riJInI0yjjwVUqpuXEp1ljbyEzWhYn5q7M=
Subject key identifier: 2F:F7:8D:EE:35:CB:2A:69:AA:2D:01:19:F5:43:9E:A1:1F:E0:BA:38
Certificate issuer: /CN=0f6b8f2a30f1c9159e728a614b3a6695bf89016b
Certificate serial: 2710B7
Authority key identifier: 6A:A1:20:8F:EF:EB:F1:E9:B2:EF:CD:4E:61:8D:DF:E2:68:F7:3E:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f6b8f2a30f1c9159e728a614b3a6695bf89016b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/0869c33148de00ada4f659f26d4131208983c55c.roa
Signing time: Mon 18 Mar 2024 08:30:00 +0000
ROA not before: Mon 18 Mar 2024 08:30:00 +0000
ROA not after: Wed 18 Mar 2026 08:30:00 +0000
asID: 52436
IP address blocks: 179.63.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2560183 (0x2710b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6b8f2a30f1c9159e728a614b3a6695bf89016b
Validity
Not Before: Mar 18 08:30:00 2024 GMT
Not After : Mar 18 08:30:00 2026 GMT
Subject: CN=0869c33148de00ada4f659f26d4131208983c55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2b:bf:87:ea:0e:cb:ce:88:b7:fc:f8:bf:e7:
0a:6d:bc:ab:72:5f:42:54:76:c8:6b:64:ef:3d:69:
d0:7b:6a:cd:91:bf:ac:4d:66:23:b0:80:67:49:13:
b7:df:29:c9:be:40:d6:be:9b:58:a9:a3:93:63:72:
a2:6f:75:f4:92:47:d0:0b:a5:73:54:88:92:f8:c2:
d9:a3:80:ec:b1:e0:c6:64:47:c0:33:b7:47:1a:79:
e4:6c:1a:34:1e:be:53:5d:cc:9e:15:7e:c1:43:2e:
24:55:c8:ac:7a:7d:df:35:6b:e9:9b:08:05:6a:51:
a7:6a:72:19:9c:49:25:91:41:82:5c:e3:1d:46:5a:
39:66:df:c8:7a:5a:6c:97:04:a5:6b:b5:0d:f6:12:
2d:22:b1:78:d9:c1:09:f5:c3:75:4a:4a:1a:0e:dc:
3a:cd:64:ee:0e:e9:ae:ee:cf:47:0e:40:9b:c8:70:
13:be:e1:fc:b3:ab:a6:1f:32:5f:05:1b:99:fd:da:
43:e0:ee:6f:86:6e:23:5a:ff:6e:03:de:b1:68:6e:
54:d8:2d:5d:30:d6:16:a8:20:19:39:5f:86:ea:e4:
9e:70:26:01:dd:8d:8c:4d:80:1f:a3:f1:ae:e6:e4:
69:4b:64:43:7a:d9:61:67:34:95:aa:2a:81:d9:e2:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F7:8D:EE:35:CB:2A:69:AA:2D:01:19:F5:43:9E:A1:1F:E0:BA:38
X509v3 Authority Key Identifier:
keyid:6A:A1:20:8F:EF:EB:F1:E9:B2:EF:CD:4E:61:8D:DF:E2:68:F7:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f6b8f2a30f1c9159e728a614b3a6695bf89016b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/0869c33148de00ada4f659f26d4131208983c55c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/367f4169-935a-47aa-9cca-645e287027eb/0f6b8f2a30f1c9159e728a614b3a6695bf89016b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.63.240.0/22
Signature Algorithm: sha256WithRSAEncryption
d9:0f:5e:b7:58:74:81:f9:05:9a:10:8e:9c:e5:ce:1f:9e:d9:
83:67:b2:c3:9e:68:39:5d:84:a9:88:56:f8:ab:a9:20:a1:0d:
54:8e:83:c1:4b:86:f8:aa:f7:48:5f:39:3b:e3:ff:82:1a:44:
0a:1e:94:3d:3f:91:96:a1:b0:a6:0b:b3:4f:c9:53:b0:6b:a0:
66:f7:09:c4:f6:6b:71:88:0b:bd:fe:7f:e3:23:c4:76:e5:a1:
f3:ec:a0:55:9e:94:62:b4:64:ac:14:bf:d1:1d:79:4d:3b:9e:
d5:1c:6e:d3:59:59:f6:60:9b:c6:5a:ce:40:f9:ac:93:91:3a:
ff:29:d1:22:7f:f1:0c:2d:ca:f3:e5:f1:71:ed:d6:25:0d:85:
c7:64:cd:9d:33:64:2f:cf:1f:54:63:30:69:c9:e4:6f:d4:9a:
11:5a:96:c7:52:87:f7:97:84:de:7e:90:17:65:9c:09:f8:7b:
a6:b2:c6:a9:78:28:45:c4:06:c7:ea:75:da:85:55:9d:07:12:
5e:06:a9:29:be:da:a1:21:97:9d:dd:a0:93:ef:9d:1a:a7:18:
57:f3:54:6c:19:54:b7:31:6e:7b:36:0a:55:4d:45:0f:d8:f6:
b0:86:75:8f:c6:0b:7a:b1:79:a4:44:05:b1:8d:9d:f7:d1:bd:
a0:d9:3d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org