Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/8ba3b41344db12064b16276caccebf950250436e.roa
File: 8ba3b41344db12064b16276caccebf950250436e.roa (raw, json)
Hash identifier: bOfSh+zPudgu9TWdnODtxnW5EyJ+F/5remgnjfVLjFs=
Subject key identifier: DC:8C:F3:8B:E0:75:29:6E:ED:F2:1B:6E:D6:86:A2:63:B1:F6:CE:CD
Certificate issuer: /CN=dd92f04e17c84c39ce37b3e765b1e0b50fafe64c
Certificate serial: 049710
Authority key identifier: 5F:31:3B:E9:18:28:48:AB:DC:81:17:CD:E2:A1:03:7F:D0:5F:8F:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd92f04e17c84c39ce37b3e765b1e0b50fafe64c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/8ba3b41344db12064b16276caccebf950250436e.roa
Signing time: Wed 16 Aug 2023 22:49:22 +0000
ROA not before: Tue 15 Aug 2023 22:49:22 +0000
ROA not after: Sat 16 Aug 2025 22:49:22 +0000
asID: 22411
IP address blocks: 170.239.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 300816 (0x49710)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd92f04e17c84c39ce37b3e765b1e0b50fafe64c
Validity
Not Before: Aug 15 22:49:22 2023 GMT
Not After : Aug 16 22:49:22 2025 GMT
Subject: CN=8ba3b41344db12064b16276caccebf950250436e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2e:db:5b:64:4f:e9:58:2b:2b:17:a6:11:17:
00:88:1e:6c:b5:a8:e2:59:59:a8:21:ba:44:d3:12:
61:d4:64:2a:5d:94:34:bb:30:9e:b5:9e:65:9c:1b:
68:27:54:24:5a:d7:23:e8:29:6d:b0:cd:66:c4:50:
a7:dd:62:c8:63:6a:0c:68:d0:f2:f8:57:a2:6d:b6:
2e:fa:5e:ab:f9:f7:ee:8a:6e:2b:ab:dc:85:8b:d3:
7e:e2:18:4e:80:55:41:83:3a:df:d2:00:86:58:16:
fd:72:f9:ea:45:10:91:5e:98:ef:27:0a:40:ff:e9:
56:45:01:d3:d4:75:4b:5b:62:a8:83:71:1c:31:ee:
26:db:7b:71:40:7d:ac:0e:13:fe:25:5d:cc:25:06:
0e:56:b1:d3:48:9d:96:ce:b9:9f:c2:98:6f:65:04:
4b:b1:01:88:a3:71:78:11:6b:79:ec:f2:8b:c4:5b:
97:32:30:60:ad:80:08:09:bf:54:b5:4f:23:bf:04:
9a:60:98:62:d1:bb:86:f1:34:a1:80:53:c6:ef:cb:
50:c1:14:94:f3:4f:8c:39:f1:1b:71:59:d2:90:28:
db:47:f9:fa:34:f8:ea:88:40:db:fa:5e:01:1a:e5:
4a:46:e5:6a:52:10:5a:3c:7d:74:e2:a4:91:61:ae:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8C:F3:8B:E0:75:29:6E:ED:F2:1B:6E:D6:86:A2:63:B1:F6:CE:CD
X509v3 Authority Key Identifier:
keyid:5F:31:3B:E9:18:28:48:AB:DC:81:17:CD:E2:A1:03:7F:D0:5F:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd92f04e17c84c39ce37b3e765b1e0b50fafe64c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/8ba3b41344db12064b16276caccebf950250436e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58669d13-dbd2-448f-8616-af9319be2baf/dd92f04e17c84c39ce37b3e765b1e0b50fafe64c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.100.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:f6:9d:bf:3c:17:36:84:b9:52:34:34:55:7c:cc:99:6d:e0:
f6:7b:64:72:2d:93:a7:2e:c6:c1:72:1a:47:3d:bf:32:3c:f8:
bd:1a:39:cb:d6:27:1a:12:4c:df:24:f1:f8:2e:d0:04:6e:77:
70:a0:c0:39:9d:4c:3b:47:4d:9f:f1:f1:8d:86:e9:e9:14:46:
d5:f5:7b:55:e7:1e:5d:b2:01:79:ee:45:a8:19:49:22:9c:12:
ec:52:98:7b:01:45:30:b9:a5:2f:e0:63:ea:e8:77:81:8c:f4:
ff:5c:80:d0:8e:82:bd:04:01:a1:4b:5c:05:0d:16:6e:69:c1:
62:8b:06:19:18:a0:48:93:26:af:cd:24:44:db:ec:00:63:da:
e6:88:66:32:ed:4c:59:77:ba:8f:e9:3e:0d:34:5d:47:d1:84:
ed:de:a7:23:85:fd:27:bb:5d:45:5a:a7:6b:6c:b7:d3:b2:5d:
f7:f8:bd:07:ea:b5:a6:84:c7:09:5e:af:15:cb:41:0a:a2:0a:
ec:c0:31:97:2d:7e:85:da:22:bf:8a:13:34:22:45:fa:7c:4d:
55:f5:b6:81:cb:82:83:e5:09:bb:f0:b9:4b:e0:9b:79:44:41:
a6:1b:99:c7:24:c8:bb:ad:ad:ef:4a:92:cb:e0:e2:6a:39:b4:
1a:7c:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org