Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/33c80c3ddbd98c0b621a200085de5dff733a073d.roa
File: 33c80c3ddbd98c0b621a200085de5dff733a073d.roa (raw, json)
Hash identifier: YuScZsqZs6ZUXB8Ya3k9u3+BA1WO1hiYUbd/2E9VScU=
Subject key identifier: 50:EC:2A:40:96:7D:F5:35:06:20:E8:AD:4D:D4:30:14:79:DD:77:FE
Certificate issuer: /CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
Certificate serial: 249385
Authority key identifier: 4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/33c80c3ddbd98c0b621a200085de5dff733a073d.roa
Signing time: Thu 07 Sep 2023 07:59:20 +0000
ROA not before: Wed 06 Sep 2023 07:59:20 +0000
ROA not after: Sun 07 Sep 2025 07:59:20 +0000
asID: 273045
IP address blocks: 179.60.148.0/24 maxlen: 24
179.60.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2397061 (0x249385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08e8921a29ec1eae940cc6e9659da39a16312ca2
Validity
Not Before: Sep 6 07:59:20 2023 GMT
Not After : Sep 7 07:59:20 2025 GMT
Subject: CN=33c80c3ddbd98c0b621a200085de5dff733a073d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:35:c4:73:87:6e:b1:a0:ea:55:03:83:27:
36:de:c6:53:86:52:f2:9d:1e:28:0e:9e:fa:83:b4:
85:4f:42:a6:e0:a3:e6:7c:0e:67:34:d2:11:ed:df:
46:af:0c:10:d8:21:37:cd:e4:fb:b2:71:b6:e8:9a:
d4:7a:dd:e5:3e:4d:95:51:78:e3:78:17:64:9c:9a:
35:3b:fd:5b:bb:61:47:cd:c9:24:2c:70:7f:2f:4c:
ed:72:ec:5f:f1:1f:1e:21:54:16:6d:5c:00:18:ca:
ae:40:60:af:cf:97:8c:f9:33:10:f0:a1:9f:1c:ef:
61:99:af:52:99:77:06:dc:35:42:8d:96:58:56:ae:
64:4b:c9:db:d4:e1:f4:0b:0f:c5:7f:d3:ec:d8:1d:
4d:f8:ed:a6:17:e5:b3:ff:f6:47:2e:f5:6c:c5:7b:
ea:05:13:77:7a:f4:35:5a:3a:8c:e0:35:92:65:a2:
e7:15:2b:62:dc:72:29:57:f2:68:11:3a:16:fc:80:
8f:2d:94:c6:8d:38:28:14:18:d0:8e:4b:66:4c:0b:
d2:59:04:a9:70:48:9a:00:05:2a:5e:65:c4:05:90:
9d:8a:85:42:21:05:f0:f5:6e:a8:b6:ef:11:0b:84:
9f:b3:0b:e8:c2:b8:3d:73:85:30:4c:1b:af:90:10:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EC:2A:40:96:7D:F5:35:06:20:E8:AD:4D:D4:30:14:79:DD:77:FE
X509v3 Authority Key Identifier:
keyid:4F:4F:96:00:9E:1A:8C:D7:B2:8D:94:D3:96:FF:27:51:66:A7:C0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08e8921a29ec1eae940cc6e9659da39a16312ca2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/33c80c3ddbd98c0b621a200085de5dff733a073d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43e404e5-f491-43dd-a73d-f380ff206019/08e8921a29ec1eae940cc6e9659da39a16312ca2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.60.148.0/24
179.60.151.0/24
Signature Algorithm: sha256WithRSAEncryption
66:5d:b9:5d:7b:26:5e:2d:0b:73:d2:2f:d6:8c:0e:d5:11:28:
0a:97:27:64:21:7d:53:6c:1d:14:bf:67:eb:4d:33:81:08:be:
2a:d2:c0:4c:cf:a1:bb:74:c4:9d:c1:54:63:db:91:90:d6:26:
1e:cb:8d:36:25:03:82:bd:1a:ca:95:13:98:7c:11:6c:7c:48:
24:cd:c7:9a:9e:8f:ee:18:c5:7e:78:8d:eb:9b:1b:ed:c1:b1:
46:b5:5a:b5:a6:80:67:d3:3e:0d:fb:35:a9:69:5c:aa:8f:8f:
ba:b5:5b:ec:79:b1:86:6d:ab:19:b7:25:a4:05:99:74:88:c6:
d0:5b:6e:04:f7:54:78:e6:fc:c0:e5:e3:41:b0:a4:7e:ef:85:
a3:c1:66:19:39:33:f4:53:4a:c8:41:4c:a3:8c:c3:ba:12:1e:
6b:e8:3c:4d:04:59:23:4f:f8:89:05:27:fb:87:06:5c:97:1a:
4d:bd:e2:95:44:e0:cc:d5:fe:43:fe:b6:2d:65:bb:ae:9c:51:
28:7a:80:0d:60:1b:11:41:7c:6d:84:2f:fd:e7:8b:54:88:4d:
9f:73:7f:cf:24:58:18:69:85:7a:9e:f9:1a:53:82:1e:cc:7a:
73:5b:49:15:b1:0a:a9:59:fe:86:17:d3:02:06:6e:3c:1c:b4:
eb:c0:0a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org