Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5705e011-f222-49a7-a128-f3a8f8cc08af/e98c01a24c25a9765cbfb0c9d125163d8efc8e75.roa
File: e98c01a24c25a9765cbfb0c9d125163d8efc8e75.roa (raw, json)
Hash identifier: lBxImeG2kvT6FqMIJkILl8KaXjdyJxSvWZbGS934jvY=
Subject key identifier: F6:DE:CA:94:2E:4D:48:ED:13:1E:12:6A:7E:09:9F:8B:23:26:74:97
Certificate issuer: /CN=292568a9684cf9b94c1f106aeb0a9f2fddb0967d
Certificate serial: 0163
Authority key identifier: CB:5F:1A:40:0B:83:D0:D0:A8:5C:2D:DF:7A:56:53:97:AB:64:C4:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/292568a9684cf9b94c1f106aeb0a9f2fddb0967d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5705e011-f222-49a7-a128-f3a8f8cc08af/e98c01a24c25a9765cbfb0c9d125163d8efc8e75.roa
Signing time: Mon 04 Oct 2021 19:52:22 +0000
ROA not before: Mon 04 Oct 2021 03:00:00 +0000
ROA not after: Wed 04 Oct 2023 03:00:00 +0000
asID: 264703
IP address blocks: 170.0.4.0/22 maxlen: 22
170.81.124.0/22 maxlen: 22
2803:8b40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292568a9684cf9b94c1f106aeb0a9f2fddb0967d
Validity
Not Before: Oct 4 03:00:00 2021 GMT
Not After : Oct 4 03:00:00 2023 GMT
Subject: CN=e98c01a24c25a9765cbfb0c9d125163d8efc8e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:f8:94:c1:c3:85:df:ea:eb:73:53:ab:c3:
2e:19:59:57:df:5c:6a:8e:4f:60:6d:24:a1:15:72:
51:c6:07:92:5a:d7:bf:dc:b5:b5:10:e3:52:65:ab:
c2:2c:11:e0:46:fa:4c:54:a1:88:e2:ad:1f:67:4d:
a3:99:b4:0a:b3:31:f3:4f:f4:20:9d:6c:d5:d2:8b:
bf:a0:ae:d4:b8:8c:4a:91:fe:7c:59:3c:88:81:69:
54:cd:45:bc:3e:43:d2:de:c7:ce:b0:70:91:a8:b2:
c8:7d:96:5d:ec:85:64:bd:79:37:d4:6d:be:e5:34:
20:0a:31:d9:82:b9:07:ec:2f:16:96:b4:d0:5f:32:
5e:7d:91:7a:28:23:ee:b2:50:70:57:85:4b:7d:6f:
16:17:ff:6e:5e:6a:5f:87:41:ac:2c:73:81:60:85:
d0:a9:f6:eb:91:e4:64:a2:3b:06:17:67:08:af:89:
83:8e:87:e1:1b:f2:9e:26:9e:2d:d3:1a:9d:bc:26:
56:ac:cd:c9:87:21:b1:d7:92:b2:9b:2f:fa:6a:06:
34:5b:c6:d5:13:fa:0f:69:27:4d:e7:6e:bf:dc:75:
44:54:38:90:a0:e9:d4:56:8c:8d:b7:02:03:1d:a4:
23:43:69:5b:6e:38:28:1b:cf:8e:22:3a:43:23:29:
e4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DE:CA:94:2E:4D:48:ED:13:1E:12:6A:7E:09:9F:8B:23:26:74:97
X509v3 Authority Key Identifier:
keyid:CB:5F:1A:40:0B:83:D0:D0:A8:5C:2D:DF:7A:56:53:97:AB:64:C4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/292568a9684cf9b94c1f106aeb0a9f2fddb0967d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5705e011-f222-49a7-a128-f3a8f8cc08af/e98c01a24c25a9765cbfb0c9d125163d8efc8e75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5705e011-f222-49a7-a128-f3a8f8cc08af/292568a9684cf9b94c1f106aeb0a9f2fddb0967d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.4.0/22
170.81.124.0/22
IPv6:
2803:8b40::/32
Signature Algorithm: sha256WithRSAEncryption
3f:90:5f:fe:60:f0:48:a4:e8:ae:dd:2c:66:55:d4:d4:db:49:
59:99:d6:88:e6:0d:ec:60:c4:b5:45:d0:ca:92:fb:dc:80:83:
5b:b8:fc:00:7e:f7:3a:04:a8:c3:94:b8:80:5c:94:ae:f8:a1:
db:20:d7:12:aa:e7:0e:62:30:bd:d6:58:c5:cf:c4:dd:06:7e:
80:ca:ec:3c:e9:15:92:bd:88:e1:18:2f:c7:e1:c7:84:c2:eb:
26:06:9b:bc:cd:0d:1e:d7:0f:8e:1c:5c:05:44:bb:90:ec:1f:
90:79:a4:5e:5b:33:39:c9:33:72:de:fa:02:45:5f:9b:b2:2e:
c6:7c:90:e0:72:e9:c2:49:a1:25:08:26:b4:53:ee:6c:a4:a5:
ad:89:76:69:b4:bc:1e:97:ea:24:0e:1f:fa:64:1e:a4:a5:49:
f6:f7:19:a1:ee:67:00:b5:80:64:27:6d:7a:f9:71:a9:28:2c:
a1:e2:76:d1:da:90:6e:c8:81:91:e4:2a:72:f9:32:3b:f3:60:
33:0c:b0:90:36:3a:ed:ad:6f:c2:8f:02:c5:03:19:36:41:64:
d8:a7:89:bd:a7:c5:5c:b6:fb:28:d4:d5:c0:19:e0:85:f3:d2:
34:ba:a3:e5:a8:7a:a2:93:8b:3c:ab:f6:80:d0:7f:f1:3f:6b:
d7:65:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:19 2023 by rpki-client on console-fra.rpki-client.org