Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/5bc9729c2786935a76096594bc0a7c6e16e0d08d.roa
File: 5bc9729c2786935a76096594bc0a7c6e16e0d08d.roa (raw, json)
Hash identifier: jCBR8B1s+42ojMZ74JZ50gKZ9y6m7ZKOtmHwV9Z4G9U=
Subject key identifier: 83:AF:E7:C8:E1:10:75:70:DC:53:1B:22:BA:05:A5:CF:63:E7:1F:0E
Certificate issuer: /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial: 086601
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/5bc9729c2786935a76096594bc0a7c6e16e0d08d.roa
Signing time: Tue 27 Feb 2024 00:51:59 +0000
ROA not before: Tue 27 Feb 2024 00:51:59 +0000
ROA not after: Fri 27 Feb 2026 00:51:59 +0000
asID: 11172
IP address blocks: 148.245.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550401 (0x86601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Validity
Not Before: Feb 27 00:51:59 2024 GMT
Not After : Feb 27 00:51:59 2026 GMT
Subject: CN=5bc9729c2786935a76096594bc0a7c6e16e0d08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:4f:99:81:ec:5b:89:3d:d9:3a:69:3f:f1:
5d:58:25:28:91:d6:0f:c5:a0:4a:ec:12:3f:de:6d:
96:f6:93:a6:54:be:f4:98:ba:c4:3f:cc:c3:d0:4d:
37:88:9b:be:b1:ae:de:8a:1a:d3:cb:c3:65:b0:38:
3e:2f:9c:68:21:23:3a:2b:fc:01:f9:0b:fa:a2:15:
7c:41:a6:ca:8e:b0:fe:c7:05:59:c3:26:e2:29:81:
1a:89:5a:b6:cb:f5:c3:1f:37:ee:c4:68:f0:2f:9e:
71:99:b2:4f:1d:e7:94:ab:53:00:4d:c5:bb:42:02:
34:8b:7f:1a:29:87:1b:64:7e:0e:1a:d3:71:93:59:
ca:93:d1:da:89:57:38:c7:b8:3a:45:08:81:2e:6f:
a6:de:2e:9c:f0:79:17:44:48:d7:aa:70:c2:6c:e5:
82:46:f8:89:cc:b7:83:78:6a:71:57:5a:93:23:d9:
a8:0f:14:46:d2:a4:72:9f:c3:f4:1b:8b:da:b6:db:
7e:af:f0:c2:35:51:e4:4a:d4:b8:3d:3c:90:8e:79:
7d:54:1a:36:4c:19:94:ad:10:c3:13:f9:b9:bc:a1:
6e:ca:e7:8b:95:a6:05:aa:90:7a:e2:fb:9e:b4:ce:
f9:af:a5:ad:16:dd:a6:72:01:ef:a5:93:3e:97:f9:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AF:E7:C8:E1:10:75:70:DC:53:1B:22:BA:05:A5:CF:63:E7:1F:0E
X509v3 Authority Key Identifier:
keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/5bc9729c2786935a76096594bc0a7c6e16e0d08d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.245.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:29:bf:1b:21:ff:59:73:ba:00:14:dd:b3:fe:89:46:d6:ad:
16:9d:04:72:23:84:34:0e:59:f1:20:9b:bb:22:dd:63:1f:ae:
07:d9:9e:e8:6b:4f:a6:7d:b4:97:e0:e0:8c:f0:09:59:2d:66:
57:cc:19:74:aa:02:7d:e6:51:19:83:ff:ff:7c:d0:2e:35:72:
92:4a:4a:78:80:78:3a:29:4c:65:83:95:c0:3f:b9:38:58:4a:
7a:fa:7c:ad:14:45:c1:7c:72:99:77:18:c6:26:14:92:3a:8d:
6f:24:e9:cd:4d:d9:ed:67:09:59:a6:0a:63:2e:15:db:f0:6c:
94:bd:40:4f:d9:b7:fc:75:b1:29:10:8b:56:b9:06:97:13:e6:
70:29:98:cc:08:b0:56:9c:19:61:86:64:dd:59:ec:9f:8b:80:
77:5a:d1:e3:53:fe:f0:3b:53:85:d8:a7:02:a2:06:ae:40:84:
11:da:36:15:88:49:f5:23:b8:68:08:61:e1:76:f0:c1:1b:94:
3d:08:0c:42:a2:42:87:dd:8e:bb:79:2d:2a:4f:f9:da:79:01:
dd:71:c5:18:4c:fb:84:51:a5:50:47:c0:0d:c9:2c:5d:a9:ab:
1e:9a:9e:1e:6d:5a:aa:f0:bd:c5:57:28:89:71:8d:94:3f:f5:
9b:26:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:15:27 2024 by rpki-client on console-ams.rpki-client.org