Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/e170ffb4a95e1dce684735ba480c174a106bf031.roa
File: e170ffb4a95e1dce684735ba480c174a106bf031.roa (raw, json)
Hash identifier: 4bXnValm+3OCrBkF3bekLeiRTvdkJwuqpFuGA++Y2Qw=
Subject key identifier: 9C:BD:72:AD:E5:84:32:5C:5F:38:9F:E3:C8:AF:99:B0:0B:83:1C:87
Certificate issuer: /CN=2ba6696fb31d1cc69120e7388063ab6feeda983b
Certificate serial: 14F74A
Authority key identifier: B0:84:1F:46:D3:F0:05:65:CE:4C:D9:C5:6F:9F:2E:4B:2C:62:77:61
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ba6696fb31d1cc69120e7388063ab6feeda983b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/e170ffb4a95e1dce684735ba480c174a106bf031.roa
Signing time: Mon 30 Jan 2023 19:28:33 +0000
ROA not before: Tue 23 Mar 2021 14:44:32 +0000
ROA not after: Tue 24 Mar 2026 14:44:32 +0000
asID: 2708
IP address blocks: 148.214.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1374026 (0x14f74a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba6696fb31d1cc69120e7388063ab6feeda983b
Validity
Not Before: Mar 23 14:44:32 2021 GMT
Not After : Mar 24 14:44:32 2026 GMT
Subject: CN=e170ffb4a95e1dce684735ba480c174a106bf031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9a:30:0f:af:7c:f6:6e:bb:45:af:ef:fc:fa:
7c:71:40:73:ca:92:cb:b4:36:79:d8:3b:62:63:ae:
42:2e:8b:3b:dc:1d:fa:11:2f:b0:92:f8:74:b5:b8:
89:bf:dc:1c:1a:71:7d:08:12:6f:2f:e1:3e:f6:0b:
aa:3b:dc:06:1f:e5:f1:53:2b:ae:49:8f:59:5e:11:
0c:69:a3:1a:08:6b:92:b0:04:b9:da:42:5b:88:f1:
40:31:d5:39:dc:9e:8d:50:12:e0:3f:84:15:bf:05:
a7:93:1e:9c:af:1c:2e:90:69:00:88:d9:87:16:0c:
cd:29:6c:eb:2a:58:5d:c2:4d:9b:4c:8a:52:c3:af:
65:af:51:7b:03:88:55:70:f5:e2:43:4b:44:78:95:
bc:62:5a:aa:d7:f8:e4:1c:6d:89:e6:21:7b:56:1e:
16:04:fd:c3:e3:33:81:43:71:43:8c:9f:49:7b:47:
6b:b3:5a:d1:d2:fe:50:6f:bd:f2:bc:eb:8c:ca:cd:
98:67:6a:80:a2:9f:eb:bf:f9:b0:d8:20:20:f1:b0:
d1:10:90:5c:a3:11:c8:16:31:61:5c:5e:28:2c:41:
cc:76:cd:0d:a6:7b:4a:0f:e2:58:6b:2a:d6:8c:ae:
c7:68:35:6a:ac:9b:05:25:96:d9:28:73:a6:ab:bf:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BD:72:AD:E5:84:32:5C:5F:38:9F:E3:C8:AF:99:B0:0B:83:1C:87
X509v3 Authority Key Identifier:
keyid:B0:84:1F:46:D3:F0:05:65:CE:4C:D9:C5:6F:9F:2E:4B:2C:62:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ba6696fb31d1cc69120e7388063ab6feeda983b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/e170ffb4a95e1dce684735ba480c174a106bf031.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/63f32743-4f96-4b54-aa8f-b5ed206c0ce3/2ba6696fb31d1cc69120e7388063ab6feeda983b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.214.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:cd:42:7b:00:9f:94:bf:59:4b:c5:73:68:51:59:b3:7c:67:
1a:7f:87:09:c5:0c:20:df:74:33:70:75:51:5c:dc:40:84:39:
4b:3c:34:17:28:b3:a5:dc:60:87:4b:d7:eb:91:29:10:55:69:
52:ca:4f:9b:25:8f:fd:99:4f:3e:4a:82:a9:5e:e2:a7:2b:cc:
b1:66:62:78:39:be:40:c7:5e:f3:b2:64:85:6d:b1:ba:ec:72:
29:fc:bc:41:ac:e2:b0:45:46:b0:ab:b5:3e:cc:86:d4:01:40:
4c:01:36:a6:43:2d:c2:a0:23:38:0f:6b:97:6a:08:3d:74:ff:
35:98:62:f1:d1:ba:e3:7a:c8:40:72:1b:52:97:51:7c:9e:09:
84:be:f1:90:fa:bb:9b:3d:9c:66:96:d8:63:2c:4e:c3:d6:58:
24:ee:e5:3a:92:39:e6:8e:c6:25:d9:57:c9:64:2f:d5:4c:b1:
b6:28:17:a7:fd:65:6e:57:86:35:f1:cd:8f:ab:ac:3f:2a:08:
4d:34:79:c0:5d:59:9e:83:da:bc:11:25:de:a2:79:c6:1b:96:
48:24:e7:62:5a:03:94:ad:26:9d:f1:65:78:83:66:d3:19:54:
8b:01:5e:f0:da:67:32:4f:63:3f:3b:9c:4f:92:b0:b5:99:a5:
16:9b:de:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org