Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58b77454-be68-4a10-ae8a-807b5780e5ab/4171f47a8c0102fd78566646f70cf6e33c4af2ff.roa
File: 4171f47a8c0102fd78566646f70cf6e33c4af2ff.roa (raw, json)
Hash identifier: Imrui+oKj6CnMuRYgXQXrX9e8JnObJ59V2T5PBirxvE=
Subject key identifier: 82:3C:A3:17:96:A1:3D:2A:04:70:D9:FB:12:C3:10:82:72:D0:92:05
Certificate issuer: /CN=e6b4b548334653f969c7aae8b5a382cfecc3eb6c
Certificate serial: 1E680F
Authority key identifier: 8A:90:D7:46:77:27:3C:70:36:51:3C:A0:01:9F:D6:51:F2:98:C0:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6b4b548334653f969c7aae8b5a382cfecc3eb6c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58b77454-be68-4a10-ae8a-807b5780e5ab/4171f47a8c0102fd78566646f70cf6e33c4af2ff.roa
Signing time: Fri 24 Mar 2023 08:30:29 +0000
ROA not before: Thu 23 Mar 2023 08:30:29 +0000
ROA not after: Sat 22 Mar 2025 08:30:29 +0000
asID: 18747
IP address blocks: 131.108.68.0/24 maxlen: 24
131.108.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1992719 (0x1e680f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6b4b548334653f969c7aae8b5a382cfecc3eb6c
Validity
Not Before: Mar 23 08:30:29 2023 GMT
Not After : Mar 22 08:30:29 2025 GMT
Subject: CN=4171f47a8c0102fd78566646f70cf6e33c4af2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:45:dd:ce:46:be:bb:c7:3e:ce:02:3b:67:
4a:75:87:ba:ed:59:92:5e:c4:e3:ca:62:f3:7d:ec:
f2:b8:5a:a3:63:a7:31:ca:02:8b:cb:7f:0a:32:bb:
2d:f9:51:fe:82:bd:59:4d:64:23:02:c2:74:0f:15:
6d:5d:fe:a1:d4:a7:80:d6:45:25:81:89:e0:2c:31:
e9:c8:47:fc:a9:61:ed:1f:45:90:84:f6:5f:cf:30:
5f:1f:e4:35:31:7e:cc:e0:d6:d4:99:36:8c:e9:20:
f5:80:b4:16:7a:5d:37:65:e2:25:48:06:86:8a:97:
32:9f:67:b2:3c:31:d2:c5:97:70:ae:6d:31:91:9c:
a6:5f:c6:c8:ea:a4:42:21:df:df:b5:d9:a1:84:3d:
00:10:b5:16:74:3c:eb:59:5d:f2:88:7b:0d:30:6d:
c7:6c:86:f9:03:f0:90:04:08:47:7d:7b:6d:43:4a:
c2:0c:6e:31:58:82:8f:b3:c7:c0:75:f6:61:ee:45:
2c:75:5c:f9:71:fd:25:fc:76:97:5a:a5:3b:69:b7:
4b:3d:d2:cb:64:d3:fc:c9:d9:48:aa:5f:8d:b5:ed:
b8:a8:bf:44:86:d4:f6:b7:02:58:31:8f:6e:3c:9c:
71:84:e3:63:04:58:37:6d:58:74:47:a7:50:fe:79:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3C:A3:17:96:A1:3D:2A:04:70:D9:FB:12:C3:10:82:72:D0:92:05
X509v3 Authority Key Identifier:
keyid:8A:90:D7:46:77:27:3C:70:36:51:3C:A0:01:9F:D6:51:F2:98:C0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6b4b548334653f969c7aae8b5a382cfecc3eb6c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58b77454-be68-4a10-ae8a-807b5780e5ab/4171f47a8c0102fd78566646f70cf6e33c4af2ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58b77454-be68-4a10-ae8a-807b5780e5ab/e6b4b548334653f969c7aae8b5a382cfecc3eb6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.68.0/23
Signature Algorithm: sha256WithRSAEncryption
60:78:0d:f3:cc:0c:5b:3b:0a:2d:de:aa:0b:d7:3e:0d:58:86:
82:fb:1b:8f:90:a8:55:bf:4c:eb:69:4c:0c:e7:14:a0:7e:c2:
d7:20:f1:77:c5:87:90:17:c7:6c:d6:2e:fa:7f:4e:d2:81:14:
72:1e:76:d9:35:de:66:9d:84:25:50:08:ce:07:82:93:b8:3c:
91:9c:58:fa:9c:1b:a2:dd:5a:e5:49:11:f8:10:f6:b2:35:10:
f6:f0:03:c0:d8:71:e3:2d:7d:4d:1a:0d:50:ad:18:24:9f:87:
e3:53:46:d3:c7:7a:14:a7:c2:ca:97:4c:bc:dc:ab:2a:4e:6f:
8c:db:5a:c9:f5:d9:13:df:22:86:51:c4:2e:a1:8f:87:e8:46:
47:fb:5c:20:ee:8f:86:0a:0c:ed:53:54:dc:fa:f1:41:6c:e8:
56:a2:ce:fb:f5:a8:de:f9:a0:bb:91:2b:59:2b:ed:20:7c:79:
0b:bf:f7:d8:2f:ac:7b:1d:3e:d3:73:f5:ae:25:cd:44:a8:2f:
d0:5b:b8:00:ac:60:0f:6c:66:33:4b:c7:97:d4:3b:da:7d:c7:
a4:f0:64:5a:37:bd:0d:97:cc:c1:33:dc:78:d2:e7:6a:67:d9:
4d:cb:a4:59:f0:cf:60:fb:2b:fd:ed:2b:70:14:45:b4:0d:63:
75:5c:87:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org