Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/520225d03c3d89b80d3f2833ece25ac57587cb3e.roa
File: 520225d03c3d89b80d3f2833ece25ac57587cb3e.roa (raw, json)
Hash identifier: lygN9zYINZ7ch2drTJpHD2t640TLCpCVOekbnhH0BYM=
Subject key identifier: AB:37:4A:5D:1F:3E:DE:C0:0D:72:95:02:85:CE:D2:B0:0B:22:86:71
Certificate issuer: /CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Certificate serial: 093233
Authority key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/520225d03c3d89b80d3f2833ece25ac57587cb3e.roa
Signing time: Fri 15 Mar 2024 12:47:38 +0000
ROA not before: Fri 15 Mar 2024 12:47:22 +0000
ROA not after: Thu 15 Mar 2029 12:47:22 +0000
asID: 28509
IP address blocks: 148.245.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 602675 (0x93233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Validity
Not Before: Mar 15 12:47:22 2024 GMT
Not After : Mar 15 12:47:22 2029 GMT
Subject: CN=520225d03c3d89b80d3f2833ece25ac57587cb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5d:db:89:65:6f:96:4c:9c:de:74:4b:a1:3e:
04:6a:2e:47:45:c0:4a:80:4e:6b:36:dd:e1:e6:6e:
8a:58:16:1e:04:58:b4:63:b4:3d:2d:fc:ab:16:d3:
77:99:4b:bc:ea:27:bd:72:9d:89:33:7f:dd:76:8a:
1c:c7:87:d0:a6:db:5f:bf:2b:38:bd:69:fb:97:37:
01:e6:0a:08:b6:83:d1:e4:9a:ff:2a:a7:8a:03:ee:
f3:36:e1:dc:f7:0f:ff:01:ef:27:a9:66:2c:8b:9e:
e8:71:03:6c:2c:d9:09:90:48:21:ed:6b:ea:f4:b2:
ba:7d:3d:f0:cd:19:b5:21:01:83:12:9d:a5:22:fa:
65:59:73:65:af:ee:4b:30:63:1c:80:47:d8:b7:82:
b8:a7:b4:7f:fa:6d:e2:2d:a0:5d:2f:4b:a1:83:45:
3d:4d:1e:16:cc:d5:c6:02:24:00:f1:d7:a3:10:82:
e7:83:1d:37:6d:23:0c:35:d7:b1:d6:94:07:01:ad:
d5:b6:29:3b:06:de:2d:90:4a:06:da:ba:66:24:35:
01:85:fb:7a:43:82:ac:32:6a:90:32:4a:b2:87:9d:
3f:66:ba:43:9a:c0:af:bd:dd:0c:db:d1:f8:01:2e:
3d:b2:78:c9:67:0b:45:24:ff:26:2e:88:52:b0:a1:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:37:4A:5D:1F:3E:DE:C0:0D:72:95:02:85:CE:D2:B0:0B:22:86:71
X509v3 Authority Key Identifier:
keyid:55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/520225d03c3d89b80d3f2833ece25ac57587cb3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.245.246.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:8d:8d:30:83:35:c2:2e:37:39:9d:d7:9d:fb:de:09:c4:b4:
a9:4a:13:68:e2:66:3a:be:33:ad:45:b4:ef:6f:e2:0c:69:e5:
13:69:bf:2d:40:04:0c:db:5d:3b:8f:1d:30:8a:32:bf:90:b2:
a5:3f:af:e0:28:8e:41:db:65:b1:d1:e3:11:51:a1:38:32:30:
ac:f5:15:3b:60:dd:97:55:68:f5:cb:6d:56:a8:1e:7c:6b:cd:
8a:67:de:39:ea:8e:d3:db:03:0a:50:57:2b:4a:03:ed:bb:e8:
dd:f9:b3:a5:af:a5:99:03:fc:1c:da:cc:79:53:14:b6:cb:b1:
c7:b2:1a:a5:d0:30:c2:66:0c:a7:81:c1:72:58:9e:2e:54:4a:
13:43:1d:86:51:10:eb:68:47:a7:f7:d8:57:66:da:0c:a3:27:
8b:36:a9:c2:3f:7c:6e:a0:35:71:b2:a7:23:61:59:c6:13:ea:
95:2c:e1:24:c2:de:9c:82:a4:18:19:d3:74:6b:a4:08:99:03:
d3:38:d9:bb:74:e0:16:6d:0f:eb:72:c6:5f:6d:11:47:1b:67:
95:12:d2:bf:36:56:f7:a7:a8:8f:50:28:a3:4d:49:e2:db:57:
81:97:b9:57:ac:23:bc:48:6d:6c:ec:66:3a:8a:07:69:9e:6e:
43:a6:95:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org