Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/ddb0dfc1abfc231b9317e80e16e4f91bcd38510c.roa
File: ddb0dfc1abfc231b9317e80e16e4f91bcd38510c.roa (raw, json)
Hash identifier: 0W+QloylrhTbfpvx+Rmzlhg580C53LXRSS1RCVGmvko=
Subject key identifier: 3F:A4:9A:C7:A2:A5:C0:88:7B:F7:CE:80:B6:C9:D6:67:E1:DA:C8:F1
Certificate issuer: /CN=82b667941b9c44cb9ada9b7f66f84f2615467d5d
Certificate serial: 248F28
Authority key identifier: 4A:83:FC:6B:CF:93:2C:05:27:3A:68:A2:CD:F7:F2:46:46:C0:01:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82b667941b9c44cb9ada9b7f66f84f2615467d5d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/ddb0dfc1abfc231b9317e80e16e4f91bcd38510c.roa
Signing time: Tue 10 Oct 2023 17:55:55 +0000
ROA not before: Mon 09 Oct 2023 17:55:55 +0000
ROA not after: Fri 10 Oct 2025 17:55:55 +0000
asID: 265804
IP address blocks: 200.63.108.0/22 maxlen: 24
179.60.236.0/22 maxlen: 24
167.250.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2395944 (0x248f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b667941b9c44cb9ada9b7f66f84f2615467d5d
Validity
Not Before: Oct 9 17:55:55 2023 GMT
Not After : Oct 10 17:55:55 2025 GMT
Subject: CN=ddb0dfc1abfc231b9317e80e16e4f91bcd38510c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:91:bf:4f:ce:f9:73:6f:4c:8e:c0:7e:0c:
66:cf:ca:68:6f:16:7a:b8:18:8c:46:28:04:08:4a:
4c:5b:e5:53:e5:35:0d:c8:88:aa:05:b5:fc:26:1d:
05:0c:50:5c:65:4c:63:3e:8c:31:ad:1d:79:c2:e4:
e2:ed:a7:35:74:b0:19:36:dc:48:b1:a6:88:75:9d:
9a:28:2f:4f:86:f0:85:d1:6e:6f:d0:a2:45:06:a5:
8e:d6:7c:92:f0:0f:ff:ca:0e:5c:4e:e9:d3:29:83:
07:d9:8b:fb:f6:1b:5c:0c:be:91:ce:98:c6:02:8f:
70:c2:9d:7d:cd:68:71:ea:53:99:f2:f6:00:6f:6a:
74:ad:b7:67:39:7e:4a:c2:8a:46:32:ef:bd:b9:0c:
ab:83:5f:69:c6:c9:6f:9e:d2:18:d5:f8:57:91:e0:
a5:4f:b7:87:8d:4a:dc:a1:e9:94:6e:a5:b1:a9:36:
ce:32:08:47:31:8f:5e:b9:ea:f3:7f:4e:54:05:9a:
d6:89:4b:d8:98:ef:4a:55:a1:6b:ad:2e:27:24:0d:
d5:92:ab:70:f4:74:9e:7d:6b:69:96:d3:87:d2:1a:
90:96:f9:8b:16:7d:80:e6:ca:f6:5c:84:b2:f6:a8:
c8:ef:f5:38:8b:11:53:80:02:35:a2:89:90:38:33:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A4:9A:C7:A2:A5:C0:88:7B:F7:CE:80:B6:C9:D6:67:E1:DA:C8:F1
X509v3 Authority Key Identifier:
keyid:4A:83:FC:6B:CF:93:2C:05:27:3A:68:A2:CD:F7:F2:46:46:C0:01:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82b667941b9c44cb9ada9b7f66f84f2615467d5d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/ddb0dfc1abfc231b9317e80e16e4f91bcd38510c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5d9d0e64-df08-4278-ad56-85f69d780ba3/82b667941b9c44cb9ada9b7f66f84f2615467d5d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.168.0/22
179.60.236.0/22
200.63.108.0/22
Signature Algorithm: sha256WithRSAEncryption
26:51:d3:4f:5f:1f:57:49:f2:01:90:b8:a5:2c:61:f4:f1:f0:
73:35:77:ac:89:9f:da:d6:cd:33:f3:4b:df:55:e4:63:65:4d:
c5:03:6d:da:92:bb:25:06:1b:a9:96:1c:0f:4b:c1:4a:5a:1e:
38:20:a8:9a:33:d1:c8:7c:53:15:84:72:fe:72:b1:1a:dc:76:
dd:3f:86:74:6f:91:fe:89:a4:00:80:ee:cf:75:d4:e3:e4:f7:
48:85:74:aa:27:dd:42:fe:92:3c:82:c4:f0:7b:d4:f0:c7:93:
ba:ed:74:4b:58:d8:38:56:bf:34:77:01:f7:1f:79:08:4c:14:
78:1b:57:eb:c5:a8:f6:b2:5d:6a:63:10:48:f8:e7:ea:dd:19:
35:f9:5d:cb:bc:e1:6d:5b:47:25:79:22:56:ac:70:18:4c:fb:
ea:ef:b0:0d:45:4b:61:4a:70:20:61:d8:10:40:f0:a1:90:e9:
1f:95:b4:b7:3c:aa:01:8c:e0:90:60:f3:a6:a1:98:a7:1f:d2:
a1:0e:87:6a:d3:48:36:0b:0e:0a:6d:aa:bb:7e:ae:42:3f:74:
da:58:05:66:e6:5d:bf:47:3b:77:8e:2b:25:db:a9:6b:27:60:
43:9c:6f:fd:88:fb:d1:8f:44:10:3c:f8:f1:d2:e0:28:ea:03:
c2:d5:81:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org