Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/652503c61d9df2dd73b1c50f44589eef8617fc80.roa
File: 652503c61d9df2dd73b1c50f44589eef8617fc80.roa (raw, json)
Hash identifier: XFRh0BQiOV28c5Ym0YMuyyFX4fkV8LMAgfL8jFSn96k=
Subject key identifier: 28:FF:08:52:91:BA:1E:01:F3:5E:F8:43:40:38:A8:47:AC:CA:0E:9D
Certificate issuer: /CN=e23c20ddda6bed03066338dfd5903e3494808052
Certificate serial: 1253DD
Authority key identifier: 20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/652503c61d9df2dd73b1c50f44589eef8617fc80.roa
Signing time: Fri 09 Feb 2024 07:32:17 +0000
ROA not before: Fri 09 Feb 2024 07:32:17 +0000
ROA not after: Sun 08 Feb 2026 07:32:17 +0000
asID: 270047
IP address blocks: 179.0.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1201117 (0x1253dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c20ddda6bed03066338dfd5903e3494808052
Validity
Not Before: Feb 9 07:32:17 2024 GMT
Not After : Feb 8 07:32:17 2026 GMT
Subject: CN=652503c61d9df2dd73b1c50f44589eef8617fc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e4:27:3d:5c:d5:e4:a0:e1:9d:8a:a0:ef:d6:
f1:63:1c:98:ab:b3:3d:2a:67:f3:04:bc:4b:57:36:
f4:c4:70:78:95:dd:c3:78:30:d3:55:7a:0d:7d:22:
0d:b2:e9:e8:16:13:a1:ed:51:e8:75:5b:5b:60:80:
e1:48:68:a6:9a:d2:9b:55:fb:f8:82:7a:1d:e1:40:
dd:88:40:93:f6:84:b9:41:29:28:42:e1:82:ab:e7:
f8:7c:2f:1a:9e:e8:5d:f9:90:c1:fa:08:0d:c8:6c:
63:06:fd:98:98:11:cf:49:08:ac:34:15:b4:e6:31:
6b:70:3c:cd:02:b0:0b:f4:48:43:2e:05:ea:e8:d9:
57:99:e9:3d:f3:7f:6e:df:4b:c7:80:02:02:1e:2f:
fe:69:65:e8:3e:0d:15:7e:5d:0f:7f:91:08:63:af:
80:66:6d:5f:f0:87:5d:38:b0:0a:12:bc:52:95:d0:
bc:4f:e1:5a:01:2f:b0:92:7c:34:16:08:b2:9a:5b:
95:0c:10:01:12:94:3e:a3:39:b8:77:35:d4:28:a1:
32:c9:2d:35:db:a7:c8:52:0a:68:4f:49:11:f7:88:
c3:87:5e:03:ff:03:76:1d:41:55:61:db:14:5e:3a:
96:66:26:37:3c:db:2f:03:15:a4:b7:14:14:16:40:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FF:08:52:91:BA:1E:01:F3:5E:F8:43:40:38:A8:47:AC:CA:0E:9D
X509v3 Authority Key Identifier:
keyid:20:77:18:9E:9E:B9:BD:70:9C:5F:B7:93:80:6E:E7:D4:A2:BF:18:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e23c20ddda6bed03066338dfd5903e3494808052.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/652503c61d9df2dd73b1c50f44589eef8617fc80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3aebd691-f95d-4aeb-bcf3-db67418462b7/e23c20ddda6bed03066338dfd5903e3494808052.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.186.0/23
Signature Algorithm: sha256WithRSAEncryption
87:a1:50:f8:57:34:2a:a8:79:6b:a9:9f:49:57:0b:71:99:36:
e3:bf:f3:8e:e8:f6:cc:17:00:43:cf:27:ae:bd:4f:9c:90:bd:
0b:86:99:ed:41:83:83:f6:04:92:f0:34:59:1b:95:19:ed:94:
2b:72:ba:77:8b:ce:b9:a0:b6:3b:11:69:e2:ae:6b:99:41:c9:
70:67:1f:bd:90:74:58:2c:20:b0:5b:3e:dd:80:ed:19:c0:4c:
2a:ef:7b:e3:ff:e1:a4:f7:3c:2e:3d:c4:48:bc:19:be:af:a9:
02:17:91:0c:7b:22:45:a8:e6:c3:28:0c:5b:ea:8b:f7:c1:f9:
f1:83:93:43:72:59:02:2e:c4:8b:88:41:18:73:65:04:90:1e:
db:82:67:42:74:db:92:36:02:c7:59:6b:b2:b9:59:2c:d8:8d:
cd:98:5a:ea:70:4a:55:a8:52:e8:50:82:ba:58:0b:be:da:a8:
10:cd:83:ce:b7:2d:e0:07:e3:3f:d4:e2:b3:7d:49:6e:28:91:
ff:d9:26:70:34:1c:d7:b7:ae:1b:1c:96:3a:74:27:8d:da:f6:
b8:11:72:9b:dd:08:32:55:e8:be:1e:51:87:22:87:79:0a:06:
b9:2f:dd:a2:2d:a0:81:40:d3:89:8e:0b:e4:f7:59:f0:dd:83:
c7:fd:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org