Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9a85f41078c02b9cc3a716fe6097026a0e4ff6b3.roa
File: 9a85f41078c02b9cc3a716fe6097026a0e4ff6b3.roa (raw, json)
Hash identifier: /rN4FdtEXaM7bpHV1xBkpNUhKbVsvEr54mqH90H9fgI=
Subject key identifier: C3:2C:0A:3C:41:55:B6:A8:1C:16:FF:53:B1:62:F1:68:FF:67:FC:3E
Certificate issuer: /CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
Certificate serial: 2B4ECF
Authority key identifier: 2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9a85f41078c02b9cc3a716fe6097026a0e4ff6b3.roa
Signing time: Thu 15 Feb 2024 21:18:52 +0000
ROA not before: Thu 15 Feb 2024 21:18:29 +0000
ROA not after: Thu 15 Feb 2029 21:18:29 +0000
asID: 396982
IP address blocks: 170.247.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2838223 (0x2b4ecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
Validity
Not Before: Feb 15 21:18:29 2024 GMT
Not After : Feb 15 21:18:29 2029 GMT
Subject: CN=9a85f41078c02b9cc3a716fe6097026a0e4ff6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:1e:f0:29:52:7d:9e:f3:96:ea:c7:62:74:
94:cb:17:4e:15:65:f4:61:d8:ee:45:e2:e8:5d:89:
0a:44:cb:9a:60:a6:e8:1c:73:68:e6:b2:f4:df:bd:
76:67:b9:ec:af:7b:49:32:49:94:7f:f2:7a:97:4a:
21:25:a4:3e:7d:93:f7:56:8e:55:33:a6:6d:f8:bc:
14:c3:97:56:fe:bd:91:06:96:68:42:d8:c8:41:de:
1c:ec:cc:d4:77:e8:ed:4c:ec:94:52:e2:48:7e:5c:
cd:dd:1a:e8:93:f8:06:8d:45:9f:2a:f2:cc:88:dd:
b9:7b:f6:73:2a:cc:fe:31:ea:ae:d6:c4:99:b0:d6:
93:1e:32:42:a4:af:bd:eb:e8:5e:b7:04:f5:b2:bd:
f9:f1:33:45:15:af:63:eb:b9:74:b4:fb:5d:92:6f:
2b:72:d0:fe:ac:fd:bd:67:bc:9c:3e:2d:71:a2:18:
ad:7b:0d:dd:8e:95:3b:6a:f6:79:34:06:4e:06:98:
31:18:a1:52:6e:1b:d2:8b:ac:39:4d:8e:be:df:a1:
c0:c0:cb:6b:12:04:f8:75:5d:46:e1:c1:1d:18:ac:
bc:07:39:db:82:c3:5a:56:9c:a8:af:1c:03:15:cd:
0e:bf:09:c2:68:37:fb:6a:3e:36:13:05:51:91:69:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2C:0A:3C:41:55:B6:A8:1C:16:FF:53:B1:62:F1:68:FF:67:FC:3E
X509v3 Authority Key Identifier:
keyid:2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9a85f41078c02b9cc3a716fe6097026a0e4ff6b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.171.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ab:c8:70:d2:1f:48:68:3c:42:63:08:1f:cf:39:cc:ce:31:
80:ea:ca:b9:87:20:52:93:66:6a:75:e6:8d:44:01:a7:09:46:
94:74:72:99:14:28:a7:82:44:f9:0f:dc:c7:f2:90:39:ad:0b:
b0:50:33:5d:52:26:47:5a:2f:d5:88:29:d2:2b:ce:6e:79:86:
b0:63:b5:10:9a:b0:43:b4:df:a9:18:88:5a:9a:46:cb:38:6f:
ab:3d:de:a2:9d:a1:f2:b5:e3:2c:f4:22:ac:dc:6b:fa:47:88:
ad:a6:d6:37:e4:58:e7:a9:58:09:9a:c5:54:e5:7f:8b:7c:2d:
68:2b:5d:8d:a7:3a:a2:10:58:c4:93:6f:44:7a:ad:36:9f:04:
cf:c7:1f:5a:79:8e:2d:60:0c:0c:17:22:20:3c:27:ca:b6:0f:
df:5a:a5:bc:96:f7:69:ec:c5:32:6f:c7:5c:49:79:46:55:97:
f2:6c:16:77:77:7f:26:e8:2a:64:3e:64:d2:74:47:a6:1e:61:
e4:56:08:0a:a0:7a:e0:5a:5a:6d:dc:c5:bf:aa:c0:40:a1:e8:
12:7c:e1:1d:ec:66:7a:13:de:d6:f8:6d:d7:d0:fe:02:c7:14:
e7:37:d1:c4:ad:4e:70:7a:49:6f:91:c0:d9:cf:28:f3:0f:50:
61:38:c3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org