Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/ab3a96a7aec205b5329712112ce4f5061e391116.roa
File: ab3a96a7aec205b5329712112ce4f5061e391116.roa (raw, json)
Hash identifier: vgRLWARO1FuBRMyuI1Yx27BNkiVQJG+hex7TNgWrmiQ=
Subject key identifier: 5E:2B:C1:7B:A6:B5:1C:77:F2:6E:C0:51:6D:CF:22:80:9F:EB:D2:63
Certificate issuer: /CN=0fe522831a6a9d7d5f746b14f259a0f8a24782ac
Certificate serial: 0D3A46
Authority key identifier: BE:9F:E2:00:87:97:DA:B5:BF:3D:83:4B:72:D2:C7:E8:F0:8E:6D:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fe522831a6a9d7d5f746b14f259a0f8a24782ac.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/ab3a96a7aec205b5329712112ce4f5061e391116.roa
Signing time: Wed 24 Mar 2021 14:31:24 +0000
ROA not before: Wed 24 Mar 2021 14:31:24 +0000
ROA not after: Tue 24 Mar 2026 14:31:24 +0000
asID: 52399
IP address blocks: 168.205.0.0/22 maxlen: 24
170.247.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866886 (0xd3a46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe522831a6a9d7d5f746b14f259a0f8a24782ac
Validity
Not Before: Mar 24 14:31:24 2021 GMT
Not After : Mar 24 14:31:24 2026 GMT
Subject: CN=ab3a96a7aec205b5329712112ce4f5061e391116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:58:49:ef:bb:3e:e2:64:2a:35:80:bc:a9:24:
7c:e0:c3:2e:a3:9f:ea:b9:c3:eb:61:b7:fe:52:06:
b6:5e:e6:8c:e9:b2:68:8e:90:9c:5b:13:16:5c:9a:
48:ef:62:cc:89:f4:a3:a7:42:d0:d1:65:ce:96:cd:
15:d7:71:12:8b:86:7d:0e:5a:b5:50:d2:04:a0:c6:
af:63:8d:d3:5a:fe:2a:29:08:da:b2:90:36:62:3a:
2c:7c:46:46:aa:15:2b:e2:5d:db:e8:36:9e:62:f4:
ea:f8:15:6d:a6:db:9e:84:b1:f1:5f:34:d6:f1:32:
89:cf:08:84:c8:98:80:7e:46:3a:50:21:b1:a0:a5:
00:10:a2:c3:af:07:8f:c6:c0:56:45:7d:a1:a6:4a:
60:b7:41:22:06:66:5f:87:b5:0d:df:4a:a9:a5:3d:
95:eb:a3:fe:68:26:73:f1:8e:c9:9e:92:8d:67:d0:
c1:78:90:e3:ce:bf:75:4e:b9:ff:0c:e4:bc:8d:f7:
64:58:aa:9f:1f:3d:90:9b:ff:76:22:fe:4e:ec:6d:
0c:5b:34:59:28:04:b7:df:54:ba:7f:30:c0:17:94:
cd:b5:9a:f5:05:0d:cb:8f:ff:0b:44:69:e6:7c:e8:
60:d2:32:36:fd:ac:97:d4:28:80:33:37:c7:87:bb:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2B:C1:7B:A6:B5:1C:77:F2:6E:C0:51:6D:CF:22:80:9F:EB:D2:63
X509v3 Authority Key Identifier:
keyid:BE:9F:E2:00:87:97:DA:B5:BF:3D:83:4B:72:D2:C7:E8:F0:8E:6D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fe522831a6a9d7d5f746b14f259a0f8a24782ac.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/ab3a96a7aec205b5329712112ce4f5061e391116.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6233fbf1-3269-496a-a93d-d3f69d73a85a/0fe522831a6a9d7d5f746b14f259a0f8a24782ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.205.0.0/22
170.247.120.0/22
Signature Algorithm: sha256WithRSAEncryption
96:f2:1b:68:ca:41:fe:49:4d:37:fb:50:f2:54:f4:8a:eb:34:
92:74:7a:cd:f6:a7:9a:ed:a9:ee:bb:aa:2e:07:c2:12:f4:d4:
f2:5d:fc:0d:8d:6f:53:e3:7e:ca:ca:3b:4d:4a:1c:3d:a0:34:
29:42:df:44:9b:ce:a5:df:5b:b7:3e:af:96:52:e2:4d:6b:31:
85:23:81:95:aa:df:93:7e:93:95:05:9d:7e:fe:19:f7:ae:8e:
b4:41:26:cd:f7:a7:3c:0d:03:f7:35:21:26:f3:b4:56:95:9d:
bd:37:2a:ab:b9:20:86:d4:4e:76:cd:63:9a:35:30:3f:a7:22:
da:e7:a4:33:d1:b4:ae:07:f2:8c:41:de:83:52:ee:4a:80:6d:
3e:bf:b0:c9:50:28:fd:84:62:33:a5:4e:c9:fc:20:5a:d3:14:
c4:3e:af:2a:73:ce:b9:cb:0d:b8:2f:27:45:f7:3a:a7:33:72:
26:c3:17:9f:ed:3e:05:18:00:3e:b2:c7:76:63:ca:76:df:e4:
3c:06:46:f7:17:f2:ad:f8:11:72:14:1a:93:bc:7a:2d:c8:86:
71:08:30:47:71:da:61:50:31:a6:0e:3b:05:ae:af:b0:50:98:
5b:e4:e8:c7:74:0c:4f:98:9a:3f:48:98:58:14:8a:6b:e7:93:
e8:f8:c5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org