Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/264fe28ad06e704d22c6ee4cb728f8354da04dc4.roa
File: 264fe28ad06e704d22c6ee4cb728f8354da04dc4.roa (raw, json)
Hash identifier: Pzlnbk+ALZ7SsZs6mLs/1TaIc7sbZxl2OdgaU3OuxZ4=
Subject key identifier: 99:D8:6D:75:19:BB:24:93:86:00:34:27:CE:BF:F2:26:9D:8E:CB:7D
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 11AF69
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/264fe28ad06e704d22c6ee4cb728f8354da04dc4.roa
Signing time: Mon 27 Nov 2023 20:12:21 +0000
ROA not before: Mon 27 Nov 2023 20:12:21 +0000
ROA not after: Thu 27 Nov 2025 20:12:21 +0000
asID: 52444
IP address blocks: 179.40.69.0/24 maxlen: 24
179.40.70.0/24 maxlen: 24
186.38.42.0/24 maxlen: 24
201.251.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1159017 (0x11af69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 27 20:12:21 2023 GMT
Not After : Nov 27 20:12:21 2025 GMT
Subject: CN=264fe28ad06e704d22c6ee4cb728f8354da04dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:da:6d:dd:52:3f:b1:16:08:0b:e7:ac:20:d9:
29:d9:fe:d8:4b:f4:96:72:0d:8d:e0:9c:ab:bf:fc:
9d:6c:78:ff:5b:7d:90:92:c3:bc:12:4f:4f:51:94:
00:d7:53:44:4a:23:84:a5:3d:c5:67:f2:3f:c6:5b:
a6:55:6a:ec:fd:94:d8:29:05:36:a2:c7:64:54:44:
b2:2f:43:13:a8:45:37:cc:c1:8c:2c:64:de:fb:12:
ec:d6:14:24:db:c2:75:75:87:1e:ee:f3:25:a7:93:
fa:e7:ff:5a:44:6e:ff:3f:3b:92:da:81:51:38:1c:
01:f1:78:a8:af:f2:92:21:d9:67:f1:c1:81:62:65:
b1:f0:c0:e4:bc:a3:ac:dd:61:d4:25:fc:22:09:e9:
a9:2e:27:74:00:bd:fc:04:be:fe:8f:a9:68:f4:1d:
07:b3:9f:53:e3:0a:cd:d8:50:9b:84:2a:b3:4b:08:
d5:71:93:3c:ff:51:b6:5e:97:b0:58:83:fd:c2:14:
f5:ba:5e:83:6d:59:45:a3:56:c1:e4:5c:16:c6:73:
2b:05:77:f7:e1:0d:39:3b:dd:fc:25:32:6b:a7:80:
8f:16:33:7e:6d:c2:48:2b:f5:5c:e0:70:b8:e9:b1:
e0:47:03:dd:34:19:26:cf:47:9e:ba:6f:56:f0:89:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D8:6D:75:19:BB:24:93:86:00:34:27:CE:BF:F2:26:9D:8E:CB:7D
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/264fe28ad06e704d22c6ee4cb728f8354da04dc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.40.69.0-179.40.70.255
186.38.42.0/24
201.251.168.0/24
Signature Algorithm: sha256WithRSAEncryption
08:af:3d:d8:f6:cd:71:05:63:2f:2a:aa:b9:3c:e9:83:24:15:
f3:a3:7c:21:51:ee:b7:f0:02:39:d5:24:3e:41:df:71:30:1d:
22:aa:2f:a6:3c:80:0f:f0:fd:8a:e0:2b:63:91:e9:e4:67:25:
93:41:91:e8:09:98:53:d6:7c:ed:41:17:38:7f:f8:dc:dc:06:
27:bd:a4:76:b4:0b:99:e3:94:b4:bf:db:79:da:c0:82:c6:d3:
82:29:bc:c4:f9:1e:c5:db:93:25:c3:cb:f5:97:00:df:22:18:
32:48:0b:e1:ec:c3:d6:40:a3:a6:33:64:ce:b8:80:69:ff:08:
1a:51:05:11:2f:eb:f2:17:4e:04:bd:bc:75:30:b3:db:a0:61:
fd:17:b6:93:5a:dc:e4:0e:34:89:26:27:63:89:a3:f5:82:33:
d8:44:4c:f3:c0:fe:35:0e:c3:b2:ae:fe:3e:d4:40:d7:2c:98:
3e:d7:12:de:64:b7:20:8f:66:1e:62:a2:c8:40:41:43:66:01:
d4:fd:e6:98:87:d9:2b:a1:4b:e8:eb:6c:7d:32:29:7b:10:fd:
c6:d3:9e:e3:e6:23:78:f9:09:8c:ac:3f:f4:3f:f4:6c:50:bb:
36:96:53:6a:ef:85:dd:eb:74:98:bc:2b:fc:5d:a4:cd:39:a0:
48:ee:3a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org