Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/10b9ddd3044aaf97ea572203e1a3e60b6e0f31e9.roa
File: 10b9ddd3044aaf97ea572203e1a3e60b6e0f31e9.roa (raw, json)
Hash identifier: QE2m7UIFJFPQXA7Zt/T5z1Ii/MdSMJsTfLGdxi6b5T8=
Subject key identifier: 44:99:CE:7F:8F:E7:BA:AF:AD:42:43:A3:F1:61:38:CF:8A:49:8C:C1
Certificate issuer: /CN=82541385988cb3666d0f41117745c9d3b4df8827
Certificate serial: 07B9A5
Authority key identifier: D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/10b9ddd3044aaf97ea572203e1a3e60b6e0f31e9.roa
Signing time: Tue 20 Feb 2024 11:45:19 +0000
ROA not before: Tue 20 Feb 2024 11:45:19 +0000
ROA not after: Fri 20 Feb 2026 11:45:19 +0000
asID: 272366
IP address blocks: 201.158.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506277 (0x7b9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82541385988cb3666d0f41117745c9d3b4df8827
Validity
Not Before: Feb 20 11:45:19 2024 GMT
Not After : Feb 20 11:45:19 2026 GMT
Subject: CN=10b9ddd3044aaf97ea572203e1a3e60b6e0f31e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:41:65:d3:e1:5a:88:25:7a:8a:a9:bd:93:2e:
23:64:bd:66:d7:22:44:24:c5:e2:50:57:b0:a4:64:
dc:5c:45:a3:4c:16:39:25:9a:b3:a6:c8:5d:88:93:
a4:63:ec:05:40:82:bc:bb:59:08:7c:4c:13:ad:d5:
1d:cb:ca:b7:1b:1c:6b:79:eb:28:a5:f5:b0:ff:b0:
a4:15:de:9a:25:c2:b8:c1:5f:49:3b:e3:8e:2c:8c:
1a:da:ba:72:15:fb:81:4c:00:01:91:25:99:a5:21:
68:06:8c:7b:b6:6b:6d:99:69:e3:f5:95:66:22:88:
14:b3:23:77:06:a8:39:74:76:86:89:fc:42:7f:26:
ec:80:a4:93:d0:c0:e2:12:10:e2:2f:0c:42:c5:92:
5c:f1:fe:96:81:56:98:4c:78:7e:b5:9f:8f:00:28:
ec:16:fc:ba:6e:61:c9:d4:6e:ea:4f:7c:63:ac:74:
39:63:04:32:93:d7:61:aa:b4:04:66:21:6c:ff:b3:
b2:c7:85:6d:4d:9a:5d:a4:b4:e5:c6:b4:f9:4c:f0:
dd:f7:6a:fc:92:19:5d:af:de:2f:45:44:40:37:1a:
ea:9d:a0:e3:de:c6:16:4f:b5:cc:ee:db:a2:ef:7a:
5c:14:75:b9:2c:cb:e8:44:2b:8d:49:60:d6:f8:f6:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:99:CE:7F:8F:E7:BA:AF:AD:42:43:A3:F1:61:38:CF:8A:49:8C:C1
X509v3 Authority Key Identifier:
keyid:D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/10b9ddd3044aaf97ea572203e1a3e60b6e0f31e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/82541385988cb3666d0f41117745c9d3b4df8827.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.98.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b0:11:98:0c:fe:90:2a:3b:e1:3b:7c:66:ac:58:49:90:9c:
c3:3f:42:09:b3:83:2a:d8:a8:39:22:6c:c3:a7:28:53:16:0a:
fa:28:bc:a1:08:05:5e:20:cb:35:08:20:ea:97:cb:13:ec:60:
3d:e1:59:f4:02:95:70:5e:f5:06:70:62:74:5f:c7:df:62:67:
bd:ae:81:3a:87:eb:43:19:f1:d3:f8:84:7f:54:27:9e:12:ad:
c4:9f:17:fb:7f:d1:27:42:ad:5a:6a:69:d0:45:c7:fc:c5:7f:
be:08:c7:57:62:bd:bf:45:94:31:a2:c4:0f:89:eb:49:6f:f1:
2e:ff:d7:3f:96:92:7f:c9:cb:c6:cf:e8:47:bb:f6:29:e0:cb:
98:84:da:08:6c:6d:cd:a3:86:b2:e8:61:31:d8:ba:c7:29:d6:
51:e8:a9:f1:97:86:7d:8a:96:b9:9e:aa:8b:59:78:b1:8f:a6:
7a:0a:56:db:44:7c:3d:d2:94:dc:e7:86:70:f9:a8:0c:c6:0e:
3e:9d:2f:5c:d9:74:af:a6:e6:6b:62:97:68:bf:3d:10:9e:68:
11:07:74:71:49:ef:04:33:85:98:9e:da:3c:16:c6:f7:e8:34:
7c:be:b4:19:7f:36:d0:e0:32:d4:ab:78:e0:42:33:ad:a4:a8:
1f:98:49:b0
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDB7mlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDgy
NTQxMzg1OTg4Y2IzNjY2ZDBmNDExMTc3NDVjOWQzYjRkZjg4MjcwHhcNMjQwMjIw
MTE0NTE5WhcNMjYwMjIwMTE0NTE5WjAzMTEwLwYDVQQDEygxMGI5ZGRkMzA0NGFh
Zjk3ZWE1NzIyMDNlMWEzZTYwYjZlMGYzMWU5MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA4UFl0+FaiCV6iqm9ky4jZL1m1yJEJMXiUFewpGTcXEWjTBY5
JZqzpshdiJOkY+wFQIK8u1kIfEwTrdUdy8q3GxxreesopfWw/7CkFd6aJcK4wV9J
O+OOLIwa2rpyFfuBTAABkSWZpSFoBox7tmttmWnj9ZVmIogUsyN3Bqg5dHaGifxC
fybsgKST0MDiEhDiLwxCxZJc8f6WgVaYTHh+tZ+PACjsFvy6bmHJ1G7qT3xjrHQ5
YwQyk9dhqrQEZiFs/7Oyx4VtTZpdpLTlxrT5TPDd92r8khldr94vRURANxrqnaDj
3sYWT7XM7tui73pcFHW5LMvoRCuNSWDW+PbKYwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFESZzn+P57qvrUJDo/FhOM+KSYzBMB8GA1UdIwQYMBaAFNEbJML7ZZQgMgZO
AuWCSpVxvCEGMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvODI1NDEz
ODU5ODhjYjM2NjZkMGY0MTExNzc0NWM5ZDNiNGRmODgyNy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzdkMGYwZDUtOTFkZi00YmE2LWJjZWItMGE4YjU4
Njc1MGYxLzEwYjlkZGQzMDQ0YWFmOTdlYTU3MjIwM2UxYTNlNjBiNmUwZjMxZTku
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zN2QwZjBkNS05MWRmLTRiYTYtYmNlYi0wYThi
NTg2NzUwZjEvODI1NDEzODU5ODhjYjM2NjZkMGY0MTExNzc0NWM5ZDNiNGRmODgy
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAMmeYjANBgkqhkiG9w0BAQsFAAOCAQEAF7ARmAz+kCo74Tt8
ZqxYSZCcwz9CCbODKtioOSJsw6coUxYK+ii8oQgFXiDLNQgg6pfLE+xgPeFZ9AKV
cF71BnBidF/H32Jnva6BOofrQxnx0/iEf1QnnhKtxJ8X+3/RJ0KtWmpp0EXH/MV/
vgjHV2K9v0WUMaLED4nrSW/xLv/XP5aSf8nLxs/oR7v2KeDLmITaCGxtzaOGsuhh
Mdi6xynWUeip8ZeGfYqWuZ6qi1l4sY+megpW20R8PdKU3OeGcPmoDMYOPp0vXNl0
r6bma2KXaL89EJ5oEQd0cUnvBDOFmJ7aPBbG9+g0fL60GX820OAy1Kt44EIzraSo
H5hJsA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org