Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58b5572e-186d-45a2-befc-1d8198ccb0ef/59357577d2e066583402d174d372d6b4ecce9cac.roa
File: 59357577d2e066583402d174d372d6b4ecce9cac.roa (raw, json)
Hash identifier: jO6LEfEwfhW9ioEoDRz0E0+DQMPe28woYKklLrErjsg=
Subject key identifier: 30:DA:88:C6:3F:65:45:8B:51:2D:E8:F0:8D:B1:6D:DB:A4:5E:68:B0
Certificate issuer: /CN=31f7d90f87abc957ae462a5c64745f034ad84794
Certificate serial: 0B94A6
Authority key identifier: 08:43:83:AC:1D:A9:FC:0A:68:28:FC:18:1A:46:0F:A9:B5:4E:2B:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31f7d90f87abc957ae462a5c64745f034ad84794.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58b5572e-186d-45a2-befc-1d8198ccb0ef/59357577d2e066583402d174d372d6b4ecce9cac.roa
Signing time: Wed 24 Mar 2021 14:45:33 +0000
ROA not before: Wed 24 Mar 2021 14:45:31 +0000
ROA not after: Tue 24 Mar 2026 14:45:31 +0000
asID: 264783
IP address blocks: 168.194.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 758950 (0xb94a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31f7d90f87abc957ae462a5c64745f034ad84794
Validity
Not Before: Mar 24 14:45:31 2021 GMT
Not After : Mar 24 14:45:31 2026 GMT
Subject: CN=59357577d2e066583402d174d372d6b4ecce9cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2f:ce:36:ec:bb:86:38:8f:f7:50:e8:ac:f4:
e9:e8:b1:63:05:0d:85:1d:85:14:9d:ea:43:e7:aa:
a3:eb:1f:05:4c:91:ce:53:79:04:7b:ec:3e:8e:a9:
b3:a2:e0:9c:9e:6c:88:bb:e8:54:33:86:66:87:e0:
b9:a8:e1:1b:e9:15:12:c7:8a:df:19:6b:dd:65:53:
2a:1c:a3:7e:4f:9d:79:2f:dd:89:9b:9c:be:d7:2e:
a8:9a:d6:d5:f7:a2:69:5d:06:71:69:63:81:69:6b:
45:41:4a:b9:12:7c:16:c0:27:e8:59:5c:b4:c9:09:
29:7b:2f:49:7b:2d:5a:de:5d:40:47:35:47:fe:ce:
fa:c7:c2:a9:b2:56:e8:32:47:e9:88:51:32:93:9a:
3a:fc:ce:fc:62:60:ef:09:e3:6a:06:67:94:c0:cb:
ca:f2:3d:e5:8f:a8:93:f7:09:a8:65:1d:c3:5e:44:
f2:5d:2c:53:6a:33:76:fc:e8:06:fa:90:ad:2c:af:
0a:30:62:a2:bb:9a:f5:a9:05:86:eb:54:c0:53:97:
65:0c:a1:53:35:a4:34:1f:5f:73:d5:25:2a:b8:35:
47:40:02:ef:b0:52:82:21:1b:95:c6:77:76:cf:7c:
b7:2e:43:f3:a2:d6:e6:c2:3e:9c:4a:05:b0:58:4c:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:DA:88:C6:3F:65:45:8B:51:2D:E8:F0:8D:B1:6D:DB:A4:5E:68:B0
X509v3 Authority Key Identifier:
keyid:08:43:83:AC:1D:A9:FC:0A:68:28:FC:18:1A:46:0F:A9:B5:4E:2B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/31f7d90f87abc957ae462a5c64745f034ad84794.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58b5572e-186d-45a2-befc-1d8198ccb0ef/59357577d2e066583402d174d372d6b4ecce9cac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58b5572e-186d-45a2-befc-1d8198ccb0ef/31f7d90f87abc957ae462a5c64745f034ad84794.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:23:a0:a0:ce:f6:59:2c:e0:d5:c2:a9:bc:4a:8c:21:2a:b4:
ee:ff:19:38:3e:44:4b:49:93:03:49:be:6f:bf:94:f3:dc:92:
7d:21:c4:a3:63:a4:3a:25:c8:91:90:40:94:31:9e:16:29:fd:
a8:91:2b:0b:60:e3:04:bf:e2:34:22:4e:14:e8:9e:7d:04:6b:
9d:02:09:55:57:87:fb:ff:4f:49:66:ef:e3:c2:a3:2b:fc:b4:
09:4e:a4:b9:c0:65:24:75:e2:07:22:75:9f:cd:2f:95:59:ca:
49:ce:1b:7b:c8:3d:80:22:60:c4:4f:45:44:e0:03:ba:e6:32:
27:e0:d1:bb:6c:d6:2e:d5:81:90:9e:8f:45:fd:ad:8e:a8:07:
1b:5c:e5:c7:57:ae:4c:d1:69:7c:d3:7d:64:77:b7:dd:75:58:
ff:52:b7:aa:d0:30:08:7e:ef:54:29:1e:05:1a:55:59:c9:57:
05:d8:6a:cf:fb:8e:e2:b7:ce:b1:11:75:eb:51:ad:ba:62:1d:
5d:44:7f:0f:bf:b7:cd:51:a9:69:ec:37:e3:75:3f:45:98:7e:
8d:03:9d:19:77:bd:55:12:6c:60:bd:79:1d:e4:62:66:fe:b8:
2a:cf:71:35:b4:0e:c5:fe:b5:87:ef:06:0d:12:89:ce:6e:76:
5d:5c:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org