Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4eb4c967-adef-4a8b-97f5-5a4eea1bb06e/fdd95c47f490acafe4d1c86d4f61635b8d0e216f.roa
File: fdd95c47f490acafe4d1c86d4f61635b8d0e216f.roa (raw, json)
Hash identifier: WmtaROuRdVsoEnWvFheIkB+Lw4dPT4HZzgZKPZrPRGA=
Subject key identifier: 36:D8:8D:4C:0B:FB:47:42:35:4A:2D:54:D4:4F:ED:63:A9:7E:F3:50
Certificate issuer: /CN=5dcb01bde4e84f9294668f40efb6ad53fedf909a
Certificate serial: 02AB5F
Authority key identifier: 63:97:22:2A:83:8B:79:1B:EB:DE:3B:D1:FE:8B:C8:72:FB:02:40:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dcb01bde4e84f9294668f40efb6ad53fedf909a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4eb4c967-adef-4a8b-97f5-5a4eea1bb06e/fdd95c47f490acafe4d1c86d4f61635b8d0e216f.roa
Signing time: Mon 10 Jul 2023 22:30:18 +0000
ROA not before: Sun 09 Jul 2023 22:30:18 +0000
ROA not after: Thu 10 Jul 2025 22:30:18 +0000
asID: 265636
IP address blocks: 190.2.216.0/21 maxlen: 24
170.245.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174943 (0x2ab5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcb01bde4e84f9294668f40efb6ad53fedf909a
Validity
Not Before: Jul 9 22:30:18 2023 GMT
Not After : Jul 10 22:30:18 2025 GMT
Subject: CN=fdd95c47f490acafe4d1c86d4f61635b8d0e216f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:9a:66:55:10:ee:0b:f4:22:81:2b:d8:b3:
77:a2:72:e7:01:14:56:b2:d3:22:48:71:22:5b:a0:
1e:65:93:59:0d:a6:f5:b5:00:49:03:90:29:c7:08:
e0:1e:4f:de:80:37:80:11:ec:b6:21:a1:31:76:27:
bf:a4:56:04:81:f9:95:ae:76:89:aa:64:2c:e2:44:
37:33:9d:e4:7c:4d:d0:79:4c:c0:75:15:1e:0b:00:
cf:96:27:10:79:1d:64:c9:f3:18:20:0e:a9:77:23:
72:68:22:74:5c:c3:bd:5d:64:50:df:7f:12:09:db:
3e:b5:7a:60:76:01:16:50:3b:fb:a2:5d:a6:d1:f0:
c8:17:3e:f2:0a:df:cb:d2:89:d1:c0:b5:9f:c5:92:
b6:5a:c9:f6:5f:f3:6c:1b:d8:74:9f:5d:2a:60:23:
b7:38:32:53:d5:8d:be:68:8c:cf:24:d7:ab:79:5a:
75:5f:f8:f1:29:b6:99:25:a2:69:7c:90:8c:d0:ab:
5b:cf:ba:60:c1:52:e2:9b:54:1f:5f:a8:60:0e:ed:
9a:67:3e:ea:34:af:fd:be:7e:94:0e:5e:75:e1:30:
68:b1:e9:00:07:be:72:3d:75:42:79:3f:ea:16:bc:
1d:c2:64:21:9d:0b:b8:49:6d:08:4a:da:0d:82:2d:
c8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D8:8D:4C:0B:FB:47:42:35:4A:2D:54:D4:4F:ED:63:A9:7E:F3:50
X509v3 Authority Key Identifier:
keyid:63:97:22:2A:83:8B:79:1B:EB:DE:3B:D1:FE:8B:C8:72:FB:02:40:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dcb01bde4e84f9294668f40efb6ad53fedf909a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4eb4c967-adef-4a8b-97f5-5a4eea1bb06e/fdd95c47f490acafe4d1c86d4f61635b8d0e216f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4eb4c967-adef-4a8b-97f5-5a4eea1bb06e/5dcb01bde4e84f9294668f40efb6ad53fedf909a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.240.0/22
190.2.216.0/21
Signature Algorithm: sha256WithRSAEncryption
02:ba:59:7c:e6:1d:ef:51:30:b5:6e:5a:5e:43:a3:3e:a5:14:
21:ac:fb:9c:75:7a:81:e9:29:50:46:8e:fe:9c:08:d3:d1:cc:
65:a5:ea:41:87:b4:f9:8a:da:fc:91:7e:90:10:f6:ba:ee:7e:
e8:f8:45:8b:23:92:d9:bc:64:7c:a8:f0:e1:d4:6a:70:2c:5d:
1f:76:f4:28:70:93:73:85:67:24:40:61:5d:b4:d5:b8:be:b1:
9e:cf:f7:a6:dd:34:b1:2b:9f:dc:be:a6:90:17:96:36:5b:23:
bc:b4:b1:5e:33:de:f9:fa:7c:4b:b1:86:aa:27:37:82:2e:ae:
87:bf:83:62:52:f4:62:7e:0d:3e:f0:db:e1:97:ac:f7:49:77:
b0:39:ab:64:97:58:b1:b1:23:29:47:38:25:57:4c:62:4f:17:
2d:f1:e9:72:80:a8:80:a9:39:30:f6:d7:81:c7:3d:31:1f:f7:
f5:36:bc:df:fd:b6:df:40:c8:1e:c4:e4:da:76:08:5f:3c:78:
e4:87:7b:ff:14:ff:b5:bf:7a:84:70:d5:66:4b:53:d4:da:73:
b7:a1:97:e2:fc:2a:fe:b0:d8:f7:f9:31:aa:90:83:43:35:e6:
47:ed:a5:d5:63:7c:3d:20:3f:b9:44:a2:1d:10:14:b9:29:7a:
9b:3c:51:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org