Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/3ebd8c1ccd18926af718252c24a557a83a237824.roa
File: 3ebd8c1ccd18926af718252c24a557a83a237824.roa (raw, json)
Hash identifier: oRcerRhYDXrB12poogG684lyED2g5MxPBdEqYlGNgvo=
Subject key identifier: 75:3A:F2:D9:10:66:C8:58:C8:E7:43:57:A2:54:98:2E:72:B1:7A:E7
Certificate issuer: /CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Certificate serial: 03D348
Authority key identifier: 17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/3ebd8c1ccd18926af718252c24a557a83a237824.roa
Signing time: Tue 12 Sep 2023 18:24:24 +0000
ROA not before: Mon 11 Sep 2023 18:24:24 +0000
ROA not after: Fri 12 Sep 2025 18:24:24 +0000
asID: 263218
IP address blocks: 168.243.80.0/22 maxlen: 24
168.243.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 250696 (0x3d348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=788f9306f5a8edd8721d2c4a293e3450783cdd56
Validity
Not Before: Sep 11 18:24:24 2023 GMT
Not After : Sep 12 18:24:24 2025 GMT
Subject: CN=3ebd8c1ccd18926af718252c24a557a83a237824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:45:03:ce:db:9f:09:d5:8e:89:95:0b:45:
22:ee:6c:d9:d6:23:25:63:6c:a4:8c:b8:d0:82:0c:
ee:62:12:7b:cc:54:72:2b:32:1b:8d:a2:a7:f1:5e:
58:8a:23:25:46:d0:91:02:84:5d:89:60:f1:51:c6:
ef:de:b7:ec:2f:23:1d:57:bd:20:43:b0:7c:70:0c:
4f:7c:57:8a:ed:5a:2b:3f:75:af:37:75:15:38:3d:
86:e7:9d:60:2e:a4:e8:9a:26:e4:32:a7:15:5e:eb:
d6:a0:66:82:3d:0a:93:90:99:9a:eb:01:ec:9f:6c:
72:4e:c5:4a:38:1e:79:c5:12:88:59:01:d5:58:40:
b5:59:0e:59:72:26:f0:14:a8:05:44:ea:42:21:66:
79:1b:ca:83:e8:c0:d9:11:e9:22:ee:d2:bb:e8:34:
92:15:40:b2:3f:99:9b:70:4d:b9:0b:b8:cf:f7:66:
db:a6:c7:0e:f9:47:62:58:37:e0:90:10:cf:9c:fb:
a4:a5:1b:a2:20:28:31:82:21:e3:fb:e0:8b:8a:53:
6b:0f:02:e8:6f:60:22:a3:bd:23:17:ab:a3:1e:9c:
dc:55:df:0d:dd:5c:e2:eb:66:82:8a:0d:94:b4:70:
25:5b:bf:3a:fd:7f:95:cc:ae:bc:cf:fa:7f:9f:67:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3A:F2:D9:10:66:C8:58:C8:E7:43:57:A2:54:98:2E:72:B1:7A:E7
X509v3 Authority Key Identifier:
keyid:17:82:C4:0B:CF:33:4C:FD:C1:6A:57:C8:57:77:30:17:63:D0:1F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/788f9306f5a8edd8721d2c4a293e3450783cdd56.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/3ebd8c1ccd18926af718252c24a557a83a237824.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5706d5e7-09bb-4248-be01-2d9eebe436b2/788f9306f5a8edd8721d2c4a293e3450783cdd56.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.243.80.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:94:5c:6a:0c:11:95:f4:ca:a0:ea:72:e4:ba:74:fa:83:60:
54:36:71:72:9b:53:fb:f1:76:65:ea:c2:d6:b3:f0:2d:fd:3b:
ef:64:e6:14:8d:9f:d7:d7:57:b6:45:b9:d6:f3:17:60:d4:e2:
dc:29:cc:2f:83:f9:ae:90:50:55:cf:31:bc:73:ab:26:87:fc:
8a:4c:1f:ee:bc:4d:1a:bb:b9:1c:c6:f7:a5:eb:ce:0e:f4:10:
83:8e:9d:54:87:47:0c:75:0b:20:31:8d:d8:c9:31:f6:da:74:
65:03:af:52:61:e8:97:a7:9a:69:85:94:b6:65:4b:9f:21:7e:
4c:aa:5b:72:5d:3b:b7:44:ef:c8:f6:dd:1e:0c:be:c5:62:99:
e1:c1:b6:a6:ed:8e:ec:38:7e:7b:d4:01:78:c2:d1:01:cf:4f:
dd:62:9a:8c:8f:5f:3a:3b:62:93:f8:69:d3:e9:fd:61:d0:d9:
0d:83:94:e4:50:38:f9:e5:2e:83:33:ab:54:c3:51:53:e8:6f:
f8:6c:9f:02:23:a2:08:a5:e3:c4:65:9e:bc:eb:12:5b:cb:d3:
12:be:18:00:b9:5a:8c:e8:21:61:0c:7a:22:c5:3b:5d:15:fc:
77:44:fc:bd:1c:1b:87:5f:fa:11:43:43:fd:d4:c2:68:25:bc:
e4:ca:fd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org