Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/7b1a198f062f65410dd59c755dceff0e5c24abc7.roa
File: 7b1a198f062f65410dd59c755dceff0e5c24abc7.roa (raw, json)
Hash identifier: LRDvf1xv7dEexVE0J73JPZkRlt0kd6OZhcY6dN9EFmw=
Subject key identifier: 6F:AC:A6:EF:EF:FB:08:83:46:C8:0C:3A:5B:93:04:05:B0:1A:D0:CB
Certificate issuer: /CN=5b167a71215fda9fbeb96f856a1f2b9c72e00e85
Certificate serial: 28DF7A
Authority key identifier: 21:97:4C:BD:6A:1F:54:3F:50:7C:6C:6C:E8:63:4C:1E:7E:2A:D0:20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b167a71215fda9fbeb96f856a1f2b9c72e00e85.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/7b1a198f062f65410dd59c755dceff0e5c24abc7.roa
Signing time: Thu 11 Apr 2024 21:55:43 +0000
ROA not before: Thu 11 Apr 2024 21:55:43 +0000
ROA not after: Sat 11 Apr 2026 21:55:43 +0000
asID: 6471
IP address blocks: 192.141.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2678650 (0x28df7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b167a71215fda9fbeb96f856a1f2b9c72e00e85
Validity
Not Before: Apr 11 21:55:43 2024 GMT
Not After : Apr 11 21:55:43 2026 GMT
Subject: CN=7b1a198f062f65410dd59c755dceff0e5c24abc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:42:97:a4:57:46:e7:4b:4b:b2:d1:1e:45:
12:69:de:6f:ce:fb:34:72:0b:e9:ef:23:09:cf:9f:
30:eb:ac:79:dd:fb:a9:b4:90:80:34:ea:08:a7:55:
e7:60:c2:6c:cf:7d:6f:59:3c:50:24:b2:d3:c9:d2:
15:a6:4d:78:a2:1d:60:4d:65:ac:12:a7:e8:26:18:
08:7a:5d:6c:86:75:59:42:3a:26:d0:aa:d9:75:ae:
c0:37:fc:76:b5:ab:fa:c1:7b:1a:6e:4f:fa:d7:26:
16:1d:55:8d:3f:97:22:71:34:e0:9f:b6:47:4f:ef:
75:f4:54:3c:fd:fc:62:da:fa:9d:96:7b:3d:a4:e2:
cf:f2:fd:d4:ba:b6:ee:38:5c:4a:f3:78:d1:d5:84:
58:e1:50:e3:a3:15:67:73:61:6d:c5:0f:2f:84:80:
61:9f:22:25:3d:d3:b8:1f:92:f0:ce:b1:9f:71:d7:
8f:bb:51:6b:36:44:c3:ea:55:de:43:ed:e9:03:35:
37:fc:65:17:a2:e6:8b:d6:e4:9a:1e:05:6c:d2:cf:
db:b6:cd:c8:d0:6c:66:3c:20:25:5f:9d:e8:11:a3:
3a:9d:76:35:ff:9e:99:66:10:da:1c:dd:59:3f:c9:
71:f4:d4:4b:2e:fd:a0:02:0f:97:64:b1:aa:2b:23:
1f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AC:A6:EF:EF:FB:08:83:46:C8:0C:3A:5B:93:04:05:B0:1A:D0:CB
X509v3 Authority Key Identifier:
keyid:21:97:4C:BD:6A:1F:54:3F:50:7C:6C:6C:E8:63:4C:1E:7E:2A:D0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b167a71215fda9fbeb96f856a1f2b9c72e00e85.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/7b1a198f062f65410dd59c755dceff0e5c24abc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/5b167a71215fda9fbeb96f856a1f2b9c72e00e85.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.168.0/22
Signature Algorithm: sha256WithRSAEncryption
09:5c:af:58:e3:d0:21:cc:8e:fa:e1:fb:d5:4c:6e:a7:37:69:
22:6b:7a:81:ec:e4:46:35:dc:1d:68:09:78:5b:2b:da:4d:16:
e8:7b:18:0a:c7:94:f1:b6:39:af:fd:12:a7:c4:91:61:84:a2:
73:67:18:6d:c5:c9:08:8b:55:f0:62:2e:9b:29:b5:16:ee:5f:
ce:a3:d0:8e:50:be:a9:68:11:79:21:b8:7d:7f:65:4f:bc:df:
9a:eb:03:be:37:1d:e1:32:1d:92:a1:cd:4e:bf:36:dc:dd:01:
6e:e9:d9:0c:04:39:2d:73:d9:f6:11:1d:a5:3b:91:2f:83:2d:
58:d2:c8:b1:44:14:86:44:00:8f:7f:90:e3:51:35:b7:f5:72:
50:b0:bb:fc:32:db:fd:23:29:d1:58:f6:db:09:71:0c:fb:f5:
16:ab:17:33:0f:43:ab:7a:54:ed:66:1e:b7:74:46:48:ec:68:
eb:98:11:cf:ad:0c:42:aa:e5:16:92:19:a7:0f:f5:da:02:b6:
4b:2a:40:29:b3:d2:1a:f0:9a:64:ed:03:54:35:df:e1:59:2d:
cb:1d:ef:02:60:23:c4:36:45:d8:a7:86:4d:24:de:3a:fb:ff:
99:75:65:55:b7:a6:9f:c7:23:4b:f5:85:c0:7c:45:fb:21:ef:
93:f6:fb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org