Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/8d1fada50faa0d615b94cbd41af6bb88acfdace4.roa
File: 8d1fada50faa0d615b94cbd41af6bb88acfdace4.roa (raw, json)
Hash identifier: JFH9KhBzJDVX6CskCv12Y3JVef3/zzrYoYEYw+8dDl4=
Subject key identifier: C4:9C:9E:98:24:A1:DE:74:EE:5A:4C:46:92:54:D1:62:89:6F:06:14
Certificate issuer: /CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
Certificate serial: 248029
Authority key identifier: 93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/8d1fada50faa0d615b94cbd41af6bb88acfdace4.roa
Signing time: Thu 28 Sep 2023 20:09:30 +0000
ROA not before: Wed 27 Sep 2023 20:09:30 +0000
ROA not after: Sun 28 Sep 2025 20:09:30 +0000
asID: 264668
IP address blocks: 170.244.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2392105 (0x248029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d
Validity
Not Before: Sep 27 20:09:30 2023 GMT
Not After : Sep 28 20:09:30 2025 GMT
Subject: CN=8d1fada50faa0d615b94cbd41af6bb88acfdace4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:80:61:5b:5e:9d:54:10:38:2b:78:4c:12:
1a:e7:b0:8d:39:1a:7c:66:4f:33:39:a2:9c:21:1a:
50:b2:1e:da:5a:c5:2d:42:21:f8:51:13:de:cb:e5:
43:56:d6:68:d7:84:14:7a:2f:3d:16:0c:9d:c6:c1:
dd:8b:38:a6:99:c0:d1:10:da:2d:95:a5:1a:dd:7a:
21:9c:22:cf:f1:64:69:d5:82:87:1a:14:50:98:19:
f3:e8:44:45:cb:6e:69:3c:55:48:4f:9a:06:af:e4:
ae:0f:4c:3a:70:83:68:29:f4:48:05:5b:4a:7d:ed:
e4:db:1e:42:e2:63:92:c6:d6:a0:83:3e:ec:8d:0d:
a7:54:70:34:f8:83:15:24:89:34:2e:b6:d3:33:16:
03:91:e6:98:85:4b:b6:8f:61:86:51:1a:d8:2d:12:
2a:18:f3:82:f9:08:f4:18:41:5c:35:38:1f:c0:7a:
07:1d:c5:01:e8:87:1b:80:e9:ea:ce:50:02:3c:0a:
f8:57:19:50:93:8b:fe:d9:09:73:c5:91:3a:7c:0e:
54:39:b6:11:e6:70:bd:33:09:9d:a6:14:10:ef:c1:
68:db:fd:2e:60:04:13:12:b8:57:34:bc:65:6c:b1:
1a:eb:cf:06:c4:e3:69:86:f9:9b:23:e0:a4:7b:27:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9C:9E:98:24:A1:DE:74:EE:5A:4C:46:92:54:D1:62:89:6F:06:14
X509v3 Authority Key Identifier:
keyid:93:3C:4B:4E:5F:37:14:1F:7D:61:E9:D1:7A:FD:7C:A4:EE:E2:25:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/8d1fada50faa0d615b94cbd41af6bb88acfdace4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/444443eb-6c16-46de-b287-55b9da4d5b05/dc8cfcf6807481e6fba1cf786f2de53fa05d0d2d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:14:99:a6:a7:ed:6d:e5:bc:36:c3:20:1f:a7:da:ad:35:f0:
03:48:ac:30:68:b1:4e:2e:59:0e:c2:c1:8f:4b:74:d7:64:83:
67:b2:f4:0a:1f:09:e7:f5:d8:38:e4:ac:e8:a3:24:e7:13:96:
67:66:04:74:1d:e1:5d:ea:83:09:e6:84:53:96:f8:44:b7:12:
ff:4d:3b:b8:74:98:c6:a6:cf:9b:2c:34:d1:b6:2d:2e:21:eb:
6f:33:90:54:6d:90:db:fa:73:4d:58:ac:b0:a1:e0:de:8e:54:
be:ae:12:e0:5f:23:f7:ba:06:e3:71:41:78:ba:95:09:d4:e7:
93:4d:63:f8:b5:d1:58:87:fb:61:d0:ef:a6:ff:d6:a5:f3:24:
7c:c1:02:99:b4:5e:3d:e2:a4:76:60:8e:57:46:86:af:79:48:
5e:ae:13:93:17:4a:ca:ca:dc:fd:92:c4:e4:a1:27:6f:09:84:
86:fc:a5:36:43:13:01:6e:78:c7:43:5d:c6:d2:ea:f6:a2:28:
f4:28:99:71:c1:59:2c:a8:40:8d:f7:d0:3b:38:83:e0:48:20:
9e:ea:ec:36:e6:9b:cb:1c:d2:43:bf:55:5e:62:ee:bf:9b:b0:
ce:8e:4c:8f:99:97:f9:11:eb:15:8c:da:7f:a7:62:23:2e:ec:
f8:f3:3f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org