Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/15c7921c9c8a245e6eb7c1469eede28bb02be25e.roa
File: 15c7921c9c8a245e6eb7c1469eede28bb02be25e.roa (raw, json)
Hash identifier: OdY6AabpMUz4ifCIHOjU+z3i4/nxA/8hg5nv25mjESs=
Subject key identifier: 25:B0:0A:75:8F:44:32:3D:15:9A:1A:7C:C1:FE:00:72:36:A7:BD:BE
Certificate issuer: /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial: 093602
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/15c7921c9c8a245e6eb7c1469eede28bb02be25e.roa
Signing time: Fri 15 Mar 2024 12:47:40 +0000
ROA not before: Fri 15 Mar 2024 12:47:22 +0000
ROA not after: Thu 15 Mar 2029 12:47:22 +0000
asID: 28506
IP address blocks: 148.245.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603650 (0x93602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Validity
Not Before: Mar 15 12:47:22 2024 GMT
Not After : Mar 15 12:47:22 2029 GMT
Subject: CN=15c7921c9c8a245e6eb7c1469eede28bb02be25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:d1:39:81:2f:8d:5d:ef:38:f4:fa:e1:a9:
6e:fb:6d:2d:a7:15:3e:4a:1d:0f:c1:b1:d4:93:72:
41:86:2f:75:3e:93:64:75:e2:e5:05:a7:7c:5b:e3:
92:92:d8:02:a9:a4:9c:49:6a:ed:a4:bc:e8:9f:b4:
df:cd:ab:d5:6d:e2:75:c0:15:63:c9:80:c6:07:40:
86:b7:c9:e9:93:f1:69:6a:63:79:d8:a7:ba:2a:ef:
09:9e:43:b5:30:cd:09:02:f2:ec:cb:0f:b6:46:9d:
7c:cb:c2:11:c0:93:04:c3:39:44:a0:d6:c3:2e:dd:
4a:bd:05:bb:cb:f8:b2:de:f6:32:c4:29:36:75:86:
7b:42:e2:e4:d4:8f:09:f2:58:b4:25:89:d3:de:6c:
b0:4b:ef:ac:37:ea:4d:8e:54:4c:8c:40:1d:07:ce:
28:14:d9:c3:0b:b5:f7:b3:6b:f0:fe:d3:ea:17:da:
dc:61:59:93:b5:3f:1d:6c:c9:08:fc:77:5d:7f:54:
cf:aa:6c:04:20:4a:cc:8e:55:af:fd:76:5e:8f:54:
38:3c:23:1a:ac:de:a1:be:8e:c5:a7:16:62:cc:c6:
58:eb:02:df:5b:4d:1c:af:44:5c:40:e0:34:12:91:
84:ce:8c:63:58:aa:fa:c3:2a:61:96:48:e8:db:af:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B0:0A:75:8F:44:32:3D:15:9A:1A:7C:C1:FE:00:72:36:A7:BD:BE
X509v3 Authority Key Identifier:
keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/15c7921c9c8a245e6eb7c1469eede28bb02be25e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.245.248.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:97:35:41:6e:a6:fb:6a:9d:75:53:ea:43:1b:4e:5e:63:16:
70:c2:74:03:ac:98:aa:79:8b:d7:f5:ca:6f:71:37:30:c5:f4:
0e:73:f9:0e:a1:47:fc:6b:0b:a6:76:ad:69:6e:86:b1:29:e3:
98:39:d1:b4:9f:98:7e:61:38:31:f3:10:ef:e0:2e:c7:27:0c:
53:6d:56:30:ce:f2:1b:02:3e:02:9d:a3:bb:72:93:53:da:c3:
71:63:ce:f5:4f:1e:7d:4c:27:57:3b:79:cd:70:58:55:16:ba:
5d:82:de:93:19:db:78:81:3d:35:98:c4:46:a4:9b:d2:ab:cc:
63:cf:59:bf:df:11:bb:96:d7:80:0a:be:55:39:7d:95:bc:58:
44:f0:f9:bb:32:eb:e4:b8:88:bc:de:ae:e8:a2:d4:97:a0:86:
37:1e:73:5d:4d:6b:bf:4d:ce:18:83:ed:45:b9:3e:36:08:ad:
fc:cd:c8:b1:dd:45:90:cf:c3:93:a0:35:2b:31:48:ec:32:1f:
b5:71:c9:16:2f:68:8c:0e:06:f2:63:24:d0:dc:6e:1c:56:bd:
5a:ee:39:36:61:65:58:29:98:59:9c:fe:2a:e8:4c:b9:0c:1b:
b7:de:a2:62:a6:47:5d:89:35:19:fd:5a:92:2b:8e:53:ab:b6:
30:2f:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org