Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63fd9cd9-6349-4d55-82f3-69155590a385/628b6fbbbfb58eb3640e6afde5da168927b32116.roa
File: 628b6fbbbfb58eb3640e6afde5da168927b32116.roa (raw, json)
Hash identifier: kBDS2w1zpEeO4KNhJCmhV0Cpw/2DPaO6aiqVVaP3mFM=
Subject key identifier: 92:9A:0D:AD:95:2D:7B:F4:13:7F:E1:30:14:EB:CC:02:BC:B5:DF:A4
Certificate issuer: /CN=4520cad2b02202800fc6f594ab8b392ad20e8934
Certificate serial: 0303D8
Authority key identifier: 8E:EE:41:CE:A4:CB:F5:1E:32:E2:12:18:C8:ED:CD:0B:80:6F:9B:03
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4520cad2b02202800fc6f594ab8b392ad20e8934.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/63fd9cd9-6349-4d55-82f3-69155590a385/628b6fbbbfb58eb3640e6afde5da168927b32116.roa
Signing time: Wed 24 Mar 2021 14:32:01 +0000
ROA not before: Wed 24 Mar 2021 14:32:01 +0000
ROA not after: Tue 24 Mar 2026 14:32:01 +0000
asID: 269994
IP address blocks: 177.53.120.0/22 maxlen: 24
2803:c1e0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197592 (0x303d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4520cad2b02202800fc6f594ab8b392ad20e8934
Validity
Not Before: Mar 24 14:32:01 2021 GMT
Not After : Mar 24 14:32:01 2026 GMT
Subject: CN=628b6fbbbfb58eb3640e6afde5da168927b32116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0f:40:b6:e0:ee:3c:fc:c9:90:b0:05:d5:8e:
d1:cf:19:d8:8f:63:55:0f:c2:f1:b0:3c:60:bf:24:
0d:56:a7:44:34:70:bf:62:37:c0:68:5b:08:55:2b:
eb:d5:23:fb:2a:4a:b0:5a:5b:5d:c4:34:0d:5c:48:
5c:84:0d:7f:c6:15:c0:38:93:4e:86:d7:86:27:32:
1a:9b:fb:ec:49:32:08:e4:de:ab:10:f5:5e:0b:36:
bb:7f:57:a4:2b:d9:bc:0c:cf:95:53:3b:90:f3:13:
6c:ae:f1:b7:4c:58:0f:c8:1d:48:5c:99:08:0d:4e:
64:01:ca:64:3e:d4:aa:a1:1e:24:bd:50:b6:39:11:
d8:b2:dc:95:ef:7f:78:13:67:01:f9:4d:40:97:05:
5a:1d:01:9d:ec:47:0b:46:18:73:3f:fe:9d:1d:23:
23:d3:71:7f:0e:7b:2f:40:40:31:9f:1b:de:28:6f:
3c:6d:66:b7:bc:34:b5:65:8d:6c:f4:25:90:88:c4:
8f:44:79:0a:43:bb:e1:72:aa:8f:4d:9b:8b:ff:4b:
29:f7:0e:c4:fa:dc:c6:d6:a4:f9:38:ed:f3:97:36:
68:c1:a7:5d:18:ef:a7:90:43:b4:42:2b:2a:ae:05:
68:a5:53:5d:b6:f6:d0:64:e2:57:4d:85:ae:af:a3:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9A:0D:AD:95:2D:7B:F4:13:7F:E1:30:14:EB:CC:02:BC:B5:DF:A4
X509v3 Authority Key Identifier:
keyid:8E:EE:41:CE:A4:CB:F5:1E:32:E2:12:18:C8:ED:CD:0B:80:6F:9B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4520cad2b02202800fc6f594ab8b392ad20e8934.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63fd9cd9-6349-4d55-82f3-69155590a385/628b6fbbbfb58eb3640e6afde5da168927b32116.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/63fd9cd9-6349-4d55-82f3-69155590a385/4520cad2b02202800fc6f594ab8b392ad20e8934.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.53.120.0/22
IPv6:
2803:c1e0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:6b:13:66:cd:b2:81:79:50:67:58:34:f2:b0:e5:22:27:2e:
cd:6e:3e:90:3f:7f:df:cf:36:f6:b6:d7:da:0d:00:94:ea:0e:
fa:33:2d:2c:b2:5a:63:07:8f:1b:cc:38:d1:aa:df:37:38:95:
db:01:d1:a7:2c:32:de:60:ad:79:e3:29:d0:1f:84:57:21:32:
2f:9b:44:f7:d1:a9:2a:02:c1:96:f1:e9:5a:01:16:38:36:73:
9b:1c:b5:d5:b3:8d:7c:82:43:02:2e:a8:98:58:fa:58:d9:66:
ac:e6:d3:db:0b:ad:b3:e6:ee:78:47:ec:a7:1f:07:cd:db:83:
ae:aa:12:f7:e4:6b:b3:7a:78:49:05:1a:a2:b3:45:07:dc:b5:
81:94:31:e8:9f:b4:1a:1c:23:80:71:86:4b:af:cc:93:6c:5d:
27:97:c7:cc:14:d9:4b:18:e7:a2:00:8a:25:55:11:97:2e:fc:
b4:2a:4b:9c:e8:21:84:29:72:11:c2:0c:4f:12:6c:fc:68:96:
b8:5a:96:e8:a4:33:e9:2e:cd:94:0a:07:32:57:8a:eb:9f:6f:
22:77:a6:80:25:79:fd:bf:af:d0:96:cf:c8:c2:f2:bc:c5:31:
91:94:ef:56:15:ca:4c:08:d1:fe:10:a4:e4:90:53:05:6a:37:
62:39:da:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org