Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/57861bc24fb862d054a5cc7f30fa06de3c5a5133.roa
File: 57861bc24fb862d054a5cc7f30fa06de3c5a5133.roa (raw, json)
Hash identifier: jkEWxzUcM/kd1Sy9gnBGK4hE+rcRxD6x/8yUTgQ03qs=
Subject key identifier: B6:67:A7:15:8B:C3:5A:7E:F1:CF:C5:63:87:EE:E5:32:7D:F3:72:C7
Certificate issuer: /CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Certificate serial: 11E339
Authority key identifier: B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/57861bc24fb862d054a5cc7f30fa06de3c5a5133.roa
Signing time: Tue 07 Nov 2023 07:30:02 +0000
ROA not before: Tue 07 Nov 2023 07:30:02 +0000
ROA not after: Thu 06 Nov 2025 07:30:02 +0000
asID: 265504
IP address blocks: 168.0.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1172281 (0x11e339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3873abfe81c29cb5a21e15a0599b6e8172d85a
Validity
Not Before: Nov 7 07:30:02 2023 GMT
Not After : Nov 6 07:30:02 2025 GMT
Subject: CN=57861bc24fb862d054a5cc7f30fa06de3c5a5133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:a5:64:03:b2:75:eb:9b:7a:36:ac:c8:8c:
9a:44:18:d4:94:a8:ce:85:a5:f7:ef:ff:71:b5:31:
56:50:4f:fe:a6:2f:b9:d5:2c:5a:27:5c:a5:67:6d:
8d:c2:6e:ec:5f:da:d7:6d:56:e5:55:f0:dc:0b:2b:
64:00:d7:0d:43:9b:8d:b9:42:17:31:62:5a:23:a4:
68:77:c8:02:73:d1:45:90:4a:d8:57:6a:d8:ff:4e:
be:24:97:ba:ac:ff:a2:82:97:d0:a8:07:75:e6:10:
35:f1:cb:16:4e:f0:b7:cf:88:f7:70:0e:a9:24:f6:
a7:0e:be:ad:db:5e:30:95:59:9d:43:9a:91:e3:9a:
57:25:09:d7:bd:f6:c1:92:da:e6:52:f8:cf:ed:00:
5f:0b:6d:02:ef:20:29:08:13:11:62:aa:47:bd:38:
79:f2:43:bc:17:55:43:7a:7c:f0:f6:9a:2a:12:d6:
07:3f:3c:73:9e:33:57:f3:30:3e:4c:c8:bc:3b:6f:
9b:fa:17:20:85:6a:ce:27:a3:60:35:c7:a6:d4:a3:
3c:98:1d:56:ae:5e:79:3e:91:00:6e:6a:45:ab:e3:
30:52:c8:b1:af:d4:85:16:4e:5c:85:1e:3d:dc:bf:
4f:18:3a:62:46:f5:5d:6f:7d:8d:75:9c:f0:12:0b:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:67:A7:15:8B:C3:5A:7E:F1:CF:C5:63:87:EE:E5:32:7D:F3:72:C7
X509v3 Authority Key Identifier:
keyid:B8:9E:D2:A2:9B:C4:99:9F:E9:79:0B:E5:07:4E:E6:C7:23:E1:78:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/57861bc24fb862d054a5cc7f30fa06de3c5a5133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/623e0869-0843-4faf-8ca1-062087c0d32e/ec3873abfe81c29cb5a21e15a0599b6e8172d85a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.221.0/24
Signature Algorithm: sha256WithRSAEncryption
01:73:54:52:51:f3:4a:4d:94:ed:8b:29:78:82:86:cb:21:01:
13:e6:f8:11:0c:c8:fb:d4:79:7c:fe:5a:7a:b9:20:03:6e:6a:
81:1d:42:1e:92:31:f5:8f:1c:80:f1:33:84:89:6e:be:94:5d:
7c:bb:c7:7d:9d:76:87:5d:a5:ce:22:b4:da:e0:79:1c:59:8f:
ef:eb:c2:f7:29:7b:4b:42:74:f0:80:f4:96:f6:50:31:d0:f0:
c3:4e:c4:cd:a5:8f:90:17:c0:08:ae:10:e3:43:67:65:72:5a:
c0:cd:bb:ed:3f:90:19:66:9d:6c:6b:02:c6:9c:3c:dc:53:d2:
c3:ac:ec:2c:8c:dd:97:e7:7b:ea:c7:e0:57:89:43:f7:aa:c1:
39:db:bf:b2:cf:93:90:ac:89:4a:c2:ce:2c:7a:44:f3:5b:e2:
6f:79:b2:e1:91:ff:3c:36:d0:5d:91:84:9f:67:ec:68:0e:25:
98:43:5d:5a:dc:3d:90:51:32:fc:d9:01:99:9e:d0:6f:05:83:
e3:fd:b2:14:55:c6:31:66:ba:82:ff:56:44:23:5e:6c:c2:d5:
16:81:58:29:bc:4f:87:07:04:3d:ff:d9:6d:59:a5:c0:77:6d:
18:2f:8e:00:4c:0e:17:b7:77:4e:7b:61:95:57:c9:19:c3:e4:
09:39:43:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org