Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/f88f0b878c787ec22b221799c66ab8d06dba3b16.roa
File: f88f0b878c787ec22b221799c66ab8d06dba3b16.roa (raw, json)
Hash identifier: SOxtEERxagS1svW3j9fw2J4AoD03JOiGW5ofV/YFPi4=
Subject key identifier: A6:30:51:A2:B3:B5:C8:74:BD:D1:6B:1B:29:47:9F:53:7D:14:05:2D
Certificate issuer: /CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Certificate serial: 085077
Authority key identifier: 9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/f88f0b878c787ec22b221799c66ab8d06dba3b16.roa
Signing time: Tue 27 Feb 2024 00:45:25 +0000
ROA not before: Tue 27 Feb 2024 00:45:25 +0000
ROA not after: Fri 27 Feb 2026 00:45:25 +0000
asID: 28492
IP address blocks: 148.245.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544887 (0x85077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
Validity
Not Before: Feb 27 00:45:25 2024 GMT
Not After : Feb 27 00:45:25 2026 GMT
Subject: CN=f88f0b878c787ec22b221799c66ab8d06dba3b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:60:0d:73:7e:14:a9:46:82:ba:8a:db:ae:
bc:8a:2c:5e:aa:21:0e:c8:1f:46:15:0f:3c:1d:6e:
34:81:e2:4c:3f:ff:27:9a:b7:03:04:67:c9:e6:32:
6c:36:c1:8f:7c:09:53:f1:2a:5a:cf:0f:88:d5:b6:
e3:1f:f8:f0:a5:2b:73:7c:a5:05:c8:d4:ba:a2:34:
2a:cb:7c:d2:2c:e1:46:49:92:d2:3b:c1:4c:4a:fa:
4d:57:ad:f8:74:da:e6:44:a5:4f:fe:a5:e3:5b:1d:
05:9a:69:91:00:eb:28:d8:08:38:26:df:4e:0e:28:
7b:50:5d:92:b0:19:47:9f:75:e5:84:01:e5:71:b8:
77:62:70:00:c5:5e:ed:57:a2:fe:76:fd:27:60:0d:
66:be:fa:53:7d:e6:6a:6c:2a:4c:5d:5d:f1:e2:e3:
4e:fe:ce:39:a0:af:0c:90:b8:6a:ac:87:71:84:ba:
2e:8b:09:38:8d:ff:b8:18:ac:7b:b6:35:0e:e0:ed:
12:ef:19:a8:be:38:e5:31:ea:a2:3d:06:4e:98:33:
ed:01:ce:38:dc:da:64:0f:57:56:66:ff:94:23:bc:
4b:93:d7:ce:15:fd:0b:61:3c:70:61:81:b6:62:05:
e8:d5:d0:cd:26:0f:a7:43:bf:22:47:c5:9e:56:a4:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:30:51:A2:B3:B5:C8:74:BD:D1:6B:1B:29:47:9F:53:7D:14:05:2D
X509v3 Authority Key Identifier:
keyid:9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/f88f0b878c787ec22b221799c66ab8d06dba3b16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.245.122.0/24
Signature Algorithm: sha256WithRSAEncryption
86:44:5e:bb:c4:a4:b7:0f:b3:f9:30:b1:b7:84:e7:d0:43:8f:
09:63:8f:02:f6:2a:30:25:ee:64:8f:cb:8d:ef:6b:34:fb:95:
fc:13:47:51:c3:12:9d:74:8e:b1:f9:10:92:10:17:62:d8:60:
98:8e:47:25:be:d7:59:6c:5e:fd:c4:26:b3:a5:02:e6:a1:81:
ba:ba:01:be:70:30:7f:4c:41:1e:a7:ea:17:24:8e:46:62:4c:
28:96:5a:0d:8a:56:df:2f:98:ec:ce:1f:e8:b9:4c:c4:c8:41:
51:cd:cd:6f:9e:f6:1c:0e:9d:c0:95:8d:ca:e8:b7:e8:b3:9f:
a4:f8:94:49:65:f5:1b:5b:39:8c:c3:24:68:36:ba:eb:e5:b5:
42:37:af:cc:96:51:55:03:fb:62:9e:b3:9f:63:d4:f8:70:57:
9f:03:09:4f:11:9e:ab:9f:dd:a1:78:6b:3a:67:b4:c5:8a:f3:
53:c2:cb:91:58:16:a4:92:89:25:82:fe:6c:51:8a:22:78:c8:
df:06:38:ee:b0:b7:29:e1:b2:97:b0:c5:5f:b3:e4:a2:5f:78:
0d:79:d0:fc:58:ab:aa:7f:ec:05:4c:8b:c5:ec:93:ab:0b:9c:
cd:6f:c2:66:82:fb:85:ab:91:94:72:20:7f:6f:64:c7:d6:e5:
3b:68:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 16:00:18 2024 by rpki-client on console-fra.rpki-client.org