Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/ec3f1e181bac2127c7c3ac076e88c362a950d4a0.roa
File: ec3f1e181bac2127c7c3ac076e88c362a950d4a0.roa (raw, json)
Hash identifier: N7Wa/gUDL+rnYah7/LoR85O5m3E00ozNClRt2BhTE5w=
Subject key identifier: B8:FF:8E:2C:1A:DC:94:E3:8A:4D:B1:66:30:00:43:9C:0D:36:30:20
Certificate issuer: /CN=6a87731fd0e709e012a794d3f86ae26c7c73db79
Certificate serial: 171B23
Authority key identifier: D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a87731fd0e709e012a794d3f86ae26c7c73db79.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/ec3f1e181bac2127c7c3ac076e88c362a950d4a0.roa
Signing time: Thu 16 Mar 2023 00:18:18 +0000
ROA not before: Fri 01 Apr 2022 03:00:00 +0000
ROA not after: Sun 02 Apr 2034 03:00:00 +0000
asID: 52505
IP address blocks: 152.231.16.0/21 maxlen: 24
2803:ee80::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1514275 (0x171b23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a87731fd0e709e012a794d3f86ae26c7c73db79
Validity
Not Before: Apr 1 03:00:00 2022 GMT
Not After : Apr 2 03:00:00 2034 GMT
Subject: CN=ec3f1e181bac2127c7c3ac076e88c362a950d4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0a:80:49:1e:09:ea:93:ee:9b:27:13:2e:c5:
ca:a8:31:3b:44:a4:d8:a9:bc:db:ab:89:7c:e6:43:
6e:61:a6:69:2c:b0:00:46:aa:2c:34:59:2d:0a:02:
6d:de:d2:9f:6b:60:be:89:03:90:20:58:6a:8d:38:
90:5f:60:b5:75:c8:42:50:e4:a0:f8:63:d9:78:9a:
b6:8f:78:91:0a:74:b2:31:fa:00:74:13:5f:3a:5e:
09:cb:58:91:48:9a:92:a7:a4:48:63:8d:e2:b7:31:
f9:ea:e2:28:ff:a7:1e:16:37:d0:7f:4f:2f:4f:41:
64:3d:2f:c8:a2:da:45:be:73:9a:e7:63:25:8c:8a:
6d:5a:68:19:1c:aa:5c:88:6a:1c:e5:78:af:bc:98:
d4:48:70:0f:2d:a6:83:35:ec:ee:72:da:e3:06:f3:
a3:12:d1:46:67:d6:69:c7:3b:fd:a4:aa:ed:eb:5f:
ba:d0:8c:a4:d5:ec:e3:df:31:5f:ab:74:29:3d:77:
8a:7c:0d:57:23:af:7f:b3:5d:4b:6b:bb:08:ec:a5:
9b:60:e1:37:bc:4b:58:37:a7:e2:6f:0e:9e:9e:70:
f3:78:85:1b:a2:a0:ce:4b:bd:4f:d1:ca:99:44:77:
f9:ef:07:7a:39:bd:25:5b:ab:84:77:1e:3d:b2:93:
00:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FF:8E:2C:1A:DC:94:E3:8A:4D:B1:66:30:00:43:9C:0D:36:30:20
X509v3 Authority Key Identifier:
keyid:D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a87731fd0e709e012a794d3f86ae26c7c73db79.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/ec3f1e181bac2127c7c3ac076e88c362a950d4a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/6a87731fd0e709e012a794d3f86ae26c7c73db79.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.16.0/21
IPv6:
2803:ee80::/32
Signature Algorithm: sha256WithRSAEncryption
0e:34:95:dd:d1:9b:a7:2c:95:1e:c2:fd:74:29:ab:1c:4a:78:
01:b6:d9:32:b5:d7:00:fa:fa:c3:a8:93:5e:75:00:06:ad:b8:
bc:21:b6:3f:d8:00:86:c3:f5:b1:38:60:33:6a:05:23:7c:f5:
22:a6:4a:aa:5d:54:40:e5:0c:5d:41:b1:71:0d:66:ed:6d:44:
88:9d:29:92:09:7e:5c:1f:4d:12:f5:86:33:82:75:03:d1:84:
1e:ce:e9:0d:cd:7a:15:0c:4a:ca:f4:bf:d7:33:b7:e5:23:38:
d5:fe:18:02:73:d0:c7:75:fd:20:5e:df:ba:1a:bc:8f:aa:84:
34:34:50:e8:aa:69:cf:a4:dc:21:6b:ee:93:86:4a:00:fc:f9:
26:29:65:2a:da:68:22:0b:a3:cd:11:ee:2f:c6:db:16:77:50:
1f:67:41:86:02:f9:6c:3a:98:cb:52:1e:0e:dc:b3:00:16:67:
11:3f:6f:22:20:11:c0:b5:2f:b4:e5:9e:bf:1a:63:2c:63:d6:
13:2e:36:34:5a:ac:3a:94:50:59:23:9a:04:47:55:b0:21:00:
dd:98:1d:1a:d5:be:f0:aa:ee:07:15:33:42:c3:83:36:f6:ea:
cf:d8:43:4d:a6:d7:76:3d:c6:64:54:80:f8:c9:01:a7:b8:16:
fa:32:ef:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org