Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/b365b498e8e08e2e7a0e6059e77b68211ca2454a.roa
File: b365b498e8e08e2e7a0e6059e77b68211ca2454a.roa (raw, json)
Hash identifier: bD5sfgNDxPQUf9s3MUTqhrHINVWwBkRKB/ZhxUWY2Qo=
Subject key identifier: DC:87:90:1E:8B:39:BC:6B:6F:34:84:40:DC:C8:8C:47:27:70:B9:D1
Certificate issuer: /CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Certificate serial: 19613B
Authority key identifier: 08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/b365b498e8e08e2e7a0e6059e77b68211ca2454a.roa
Signing time: Wed 20 Jul 2022 18:43:25 +0000
ROA not before: Wed 20 Jul 2022 03:00:00 +0000
ROA not after: Sat 20 Jul 2024 03:00:00 +0000
asID: 27717
IP address blocks: 186.167.11.0/24 maxlen: 24
186.167.12.0/23 maxlen: 24
186.167.70.0/23 maxlen: 24
186.167.72.0/22 maxlen: 24
186.167.76.0/23 maxlen: 24
186.167.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1663291 (0x19613b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Validity
Not Before: Jul 20 03:00:00 2022 GMT
Not After : Jul 20 03:00:00 2024 GMT
Subject: CN=b365b498e8e08e2e7a0e6059e77b68211ca2454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9e:e6:f8:90:2e:c7:6b:b0:02:a7:02:ef:e4:
8e:32:2f:08:68:02:70:92:f6:56:ba:ad:8d:fa:76:
cf:e4:7b:03:91:80:9d:a8:7f:61:b4:65:0b:06:3f:
1b:86:36:c9:3c:4f:f6:0e:54:2c:96:9f:c6:9e:68:
68:68:26:91:90:b5:d4:bd:7e:75:be:16:19:37:63:
a4:43:b6:11:a3:c4:32:4b:a0:79:18:6f:04:ef:a8:
13:2a:64:58:0a:d9:f2:71:b7:2c:ef:4e:d0:a4:07:
36:24:41:4b:b1:1e:3c:c7:cd:c3:65:78:ba:3a:ed:
7a:a6:5c:56:da:31:3e:32:3a:47:a9:18:b0:ac:f8:
68:40:be:7a:ab:de:29:7d:77:46:ca:e7:95:ee:9f:
53:40:1e:9a:86:c0:96:61:72:4f:97:1e:61:a0:f3:
90:68:82:85:53:36:48:59:27:ff:83:33:6c:33:b8:
7f:ca:8e:36:3b:c3:88:59:6f:49:07:73:cc:09:85:
6b:aa:ff:90:a8:aa:11:9a:c7:71:de:d7:0a:34:48:
ca:d1:33:1a:d9:a1:94:20:b7:9b:8f:54:94:41:9d:
a0:92:83:73:6d:6a:34:aa:00:2b:b3:a7:43:a8:97:
05:75:84:e5:81:eb:e1:d2:18:62:ba:97:eb:63:33:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:87:90:1E:8B:39:BC:6B:6F:34:84:40:DC:C8:8C:47:27:70:B9:D1
X509v3 Authority Key Identifier:
keyid:08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/b365b498e8e08e2e7a0e6059e77b68211ca2454a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/96fbc1b8c542f9384f9a2004e66a61080248cdc6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.167.11.0-186.167.13.255
186.167.70.0-186.167.78.255
Signature Algorithm: sha256WithRSAEncryption
66:46:d3:33:e5:12:74:00:53:e4:4c:bc:5f:de:b4:8b:60:6a:
a3:4c:e8:e3:1c:87:91:64:a3:a3:ca:ed:b1:7a:62:bb:c3:ab:
8d:86:ab:13:49:4d:0e:e4:1f:2c:ff:ee:50:98:ec:2d:44:a2:
5e:51:82:44:f8:3e:dc:ab:ca:b9:9a:67:b6:e5:d0:cb:90:fa:
76:ac:59:61:e5:e5:0f:9d:3b:ff:9f:e2:af:63:56:8e:27:80:
25:12:c8:d2:1c:cd:dc:7b:05:fa:72:7a:a6:dd:8d:22:3b:40:
da:3d:39:c7:27:d9:4b:00:47:35:78:1a:a9:08:a2:4f:ca:b1:
bd:b0:28:cc:01:2f:6c:14:5c:2b:aa:cb:25:5c:a3:ed:30:53:
58:dc:b6:d5:7a:b9:d6:2e:77:8b:10:81:a8:3c:f8:80:25:82:
bc:4d:e3:94:7b:82:e5:ea:2b:35:fe:14:d6:44:4b:e3:b0:7d:
6c:79:1f:4a:21:d6:9b:26:1e:63:3e:fb:4e:dc:1d:69:4c:bb:
cc:46:b3:57:8c:81:cd:bc:5b:cf:6f:c0:1f:c6:b7:09:ac:37:
cd:35:ef:1e:fa:2d:10:69:91:15:b3:bf:0c:b2:a7:55:78:38:
da:92:4f:25:23:7b:eb:20:61:5e:bf:ec:16:a1:28:af:b1:fc:
35:27:c5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org