Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/7d54a356fec489ca4c3bc3ed100fd2cc5544c67d.roa
File: 7d54a356fec489ca4c3bc3ed100fd2cc5544c67d.roa (raw, json)
Hash identifier: uoQZ+yNYB3meMac9ssAsJsHMUAo13dbf4sFmbZE1bDE=
Subject key identifier: 6B:F5:B9:BF:23:41:88:55:34:70:40:27:71:A9:B2:1A:89:21:A7:9B
Certificate issuer: /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial: 083C61
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/7d54a356fec489ca4c3bc3ed100fd2cc5544c67d.roa
Signing time: Tue 27 Feb 2024 00:40:57 +0000
ROA not before: Tue 27 Feb 2024 00:40:50 +0000
ROA not after: Tue 27 Feb 2029 00:40:50 +0000
asID: 22011
IP address blocks: 148.243.66.0/24 maxlen: 24
148.243.67.0/24 maxlen: 24
148.243.68.0/24 maxlen: 24
148.243.69.0/24 maxlen: 24
148.243.70.0/24 maxlen: 24
148.243.71.0/24 maxlen: 24
148.243.72.0/24 maxlen: 24
148.243.73.0/24 maxlen: 24
148.243.74.0/24 maxlen: 24
148.243.75.0/24 maxlen: 24
148.243.76.0/24 maxlen: 24
148.243.77.0/24 maxlen: 24
148.243.78.0/24 maxlen: 24
148.243.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539745 (0x83c61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Validity
Not Before: Feb 27 00:40:50 2024 GMT
Not After : Feb 27 00:40:50 2029 GMT
Subject: CN=7d54a356fec489ca4c3bc3ed100fd2cc5544c67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:12:53:2c:59:bd:eb:2b:6a:b1:04:2a:96:
64:58:96:02:0b:fb:23:8b:2a:d3:70:6a:ed:85:f8:
58:e5:4e:93:b3:03:ff:de:f6:62:e5:a0:df:b8:18:
a0:d8:1d:35:03:7c:1a:62:e0:fc:dd:60:4d:f3:2b:
56:78:bd:7b:d8:11:39:15:2f:ee:27:68:c9:9c:6c:
fd:bf:2b:68:29:3c:1a:31:70:52:fd:3f:32:0c:57:
c9:8c:29:42:bf:be:b3:41:3c:83:97:8a:b2:42:a5:
e7:b5:38:6e:d8:20:4b:54:80:3e:68:b3:c9:57:c9:
11:af:75:8c:be:b2:8f:e4:38:e5:41:34:70:ba:96:
f4:9d:c2:d0:a4:7c:95:e1:12:b2:88:7c:4a:b7:85:
13:8c:5b:bc:d7:9b:d3:c8:03:31:82:41:2e:44:e2:
0b:dd:90:0d:dc:47:9d:39:71:a0:05:37:1a:f6:b1:
e7:c4:dc:53:48:79:fd:53:8f:d5:4d:a5:e2:27:8c:
e4:76:dd:21:c8:9c:fc:95:d3:d6:fc:90:a6:90:0f:
68:7c:12:72:25:3e:38:46:2e:87:0b:96:9b:14:4c:
4f:28:5b:8d:43:bf:bf:fb:b4:1d:de:ad:d1:f4:eb:
52:e3:31:2f:5c:eb:9d:3b:ab:1e:bc:b9:2e:3d:56:
07:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F5:B9:BF:23:41:88:55:34:70:40:27:71:A9:B2:1A:89:21:A7:9B
X509v3 Authority Key Identifier:
keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/7d54a356fec489ca4c3bc3ed100fd2cc5544c67d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.243.66.0-148.243.79.255
Signature Algorithm: sha256WithRSAEncryption
70:56:29:be:57:6a:49:bc:9d:ac:91:b7:5d:9b:57:84:c9:15:
f9:12:0f:63:b0:0f:b2:c9:7d:6b:0b:bb:10:32:65:82:f7:67:
02:ae:b9:e9:e5:bd:8c:d5:23:3c:7c:e1:88:cd:04:81:46:5b:
56:78:72:c5:eb:76:d0:64:f0:ac:5f:50:68:57:53:a9:7e:9d:
19:7d:ae:03:2a:1b:80:91:af:27:18:7f:ab:3b:fa:de:8d:0b:
20:66:53:ce:92:10:55:40:b3:f9:bd:a0:97:1c:e2:1e:8b:8e:
85:ef:4e:bd:20:3c:71:96:0f:de:64:16:81:83:53:d2:dd:66:
53:3f:aa:4f:09:b4:6f:81:d1:ec:3e:43:b9:64:c3:95:23:48:
f9:d1:35:3d:9e:9b:81:b7:55:25:ac:84:ad:c1:d3:5b:97:bd:
2b:4b:c3:a3:2a:05:f8:1f:76:e5:54:e8:75:59:42:57:62:d2:
a7:e6:ad:61:0c:dc:9c:38:41:64:bf:11:f6:14:06:81:98:97:
a2:cd:82:4c:b8:d9:09:60:d0:a0:29:43:ba:a8:e3:81:a3:1b:
99:df:2c:49:3a:f4:9d:19:57:4f:69:10:b9:10:f4:aa:98:d2:
19:c1:f8:53:0d:87:8a:15:50:a2:2b:86:fe:07:1c:42:5c:e5:
f1:88:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:00:18 2024 by rpki-client on console-fra.rpki-client.org