Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/e4704b6fe67f1e4f582edd656a9478dd57cfdbda.roa
File: e4704b6fe67f1e4f582edd656a9478dd57cfdbda.roa (raw, json)
Hash identifier: SoTbWf+5SblQG2y+lhuFvxeUkgbF5X2bodIzkf+bQCA=
Subject key identifier: FE:3D:FD:97:33:9A:56:65:87:67:32:EC:A2:1F:16:CB:57:D9:9E:9E
Certificate issuer: /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial: 085DFC
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/e4704b6fe67f1e4f582edd656a9478dd57cfdbda.roa
Signing time: Tue 27 Feb 2024 00:48:24 +0000
ROA not before: Tue 27 Feb 2024 00:48:23 +0000
ROA not after: Fri 27 Feb 2026 00:48:23 +0000
asID: 6503
IP address blocks: 148.245.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548348 (0x85dfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Validity
Not Before: Feb 27 00:48:23 2024 GMT
Not After : Feb 27 00:48:23 2026 GMT
Subject: CN=e4704b6fe67f1e4f582edd656a9478dd57cfdbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:51:b7:df:82:27:13:04:93:4d:9c:71:7f:
d7:d1:64:6d:20:df:78:dd:73:10:f7:d8:7a:e1:d7:
75:b6:61:32:07:c1:67:0b:98:af:68:f8:75:71:f1:
af:bd:57:97:25:f3:d2:41:d3:4d:a6:3d:23:91:f1:
6f:28:ec:ef:de:05:37:34:fb:a0:7b:29:77:f6:d8:
53:fc:7f:dd:8c:fd:2d:29:ec:fc:a1:52:2d:0d:aa:
59:2d:a8:13:68:65:29:75:63:a6:a0:9d:70:1e:8b:
4b:8c:94:a7:93:20:cc:59:27:b4:66:2c:43:df:20:
c0:33:80:d1:c7:62:44:b5:85:f6:b2:4d:05:9d:bc:
a4:69:16:87:2b:38:8d:b8:75:f5:57:b8:f0:67:50:
d2:1c:f6:06:9e:88:76:be:3e:eb:11:b5:6d:1a:27:
71:14:8e:41:56:dd:54:28:cf:19:4a:38:ff:bc:e1:
46:64:d5:99:3c:2c:bd:c2:68:74:fa:a7:6a:2e:3d:
72:39:ec:67:55:2c:f1:d3:a5:2d:2c:97:ff:c1:74:
4d:47:d2:89:4e:f4:1f:74:e6:47:98:5c:81:ee:db:
d0:ce:81:37:4c:7a:db:28:90:2c:ae:d1:fa:89:2b:
8b:c2:1a:f8:37:0c:8a:9b:30:34:ad:82:db:bf:73:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3D:FD:97:33:9A:56:65:87:67:32:EC:A2:1F:16:CB:57:D9:9E:9E
X509v3 Authority Key Identifier:
keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/e4704b6fe67f1e4f582edd656a9478dd57cfdbda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:38:1d:96:d3:6c:0f:b7:b9:27:85:56:d1:cc:e0:19:26:a8:
35:f4:4a:ec:35:81:ae:e1:26:01:97:e4:25:22:ac:f6:cc:60:
04:3a:72:0a:3a:9b:7d:9f:d3:bf:76:7e:81:c7:84:81:fd:78:
5a:00:a0:1e:d0:de:48:b6:c5:2b:e7:11:df:2e:0a:d0:66:79:
d5:aa:97:0b:32:2e:ef:76:09:0e:75:9e:dc:bf:75:ef:2b:37:
8a:bd:b3:92:93:d3:43:3b:fd:02:17:67:3e:a9:6e:39:a8:51:
37:47:00:a4:d1:70:f3:21:68:d3:b1:9b:fc:d9:a5:dc:b8:c5:
c0:cc:84:79:ef:7e:3f:da:1f:35:7f:35:eb:b5:90:5d:66:c6:
54:37:47:9a:a3:e2:e8:2a:51:e6:50:87:13:c3:e2:f7:9c:3c:
5a:be:0e:c1:5e:b3:1c:dd:f5:1a:d8:22:dd:71:85:d1:00:5b:
64:ab:f2:f9:51:0e:d6:e4:af:1f:fe:f6:56:34:7b:54:f2:8d:
52:e7:4b:2e:17:82:d4:8a:fc:45:19:27:a6:cc:18:dd:52:43:
38:5a:b7:ad:7b:5b:48:75:3d:ba:22:97:20:a2:bc:f9:65:c4:
9a:b6:fd:11:43:8c:17:46:f0:c0:7a:38:f5:c8:51:4f:07:ec:
78:46:92:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:15:27 2024 by rpki-client on console-ams.rpki-client.org