Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/fc7b00217625a36a81f285d34d6c1a7da65b94a1.roa
File: fc7b00217625a36a81f285d34d6c1a7da65b94a1.roa (raw, json)
Hash identifier: LvBw2+KLGbiVHCTMKXa0fu64Pez0pXj+R8DGtM8XGcI=
Subject key identifier: FA:00:3B:1C:B1:D7:C6:0E:76:86:91:55:51:19:C0:88:92:FC:84:41
Certificate issuer: /CN=5b167a71215fda9fbeb96f856a1f2b9c72e00e85
Certificate serial: 28AD7E
Authority key identifier: 21:97:4C:BD:6A:1F:54:3F:50:7C:6C:6C:E8:63:4C:1E:7E:2A:D0:20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b167a71215fda9fbeb96f856a1f2b9c72e00e85.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/fc7b00217625a36a81f285d34d6c1a7da65b94a1.roa
Signing time: Thu 04 Apr 2024 21:37:06 +0000
ROA not before: Thu 04 Apr 2024 21:37:06 +0000
ROA not after: Sat 04 Apr 2026 21:37:06 +0000
asID: 6471
IP address blocks: 192.141.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2665854 (0x28ad7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b167a71215fda9fbeb96f856a1f2b9c72e00e85
Validity
Not Before: Apr 4 21:37:06 2024 GMT
Not After : Apr 4 21:37:06 2026 GMT
Subject: CN=fc7b00217625a36a81f285d34d6c1a7da65b94a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:1a:11:0c:bd:08:a2:4c:86:44:e7:2d:f7:
ee:4c:ea:a5:32:a3:7e:92:37:bf:ac:7a:5d:b3:a1:
31:fa:50:04:ab:7e:37:b5:1a:36:cb:d2:93:b3:d2:
9d:a6:40:b5:38:da:84:ce:53:91:6a:87:ea:69:b1:
9a:b8:99:40:70:00:95:cb:74:46:c7:25:60:7d:c9:
37:3b:99:e2:d6:fd:37:20:b9:3a:93:17:07:d2:21:
10:24:7f:44:37:13:11:ef:cb:ac:ef:2d:5f:b6:6b:
99:7b:20:67:79:f9:eb:60:67:d9:23:11:96:33:82:
e9:95:1e:62:d6:92:9a:00:d5:ad:44:17:77:8a:32:
95:e0:fe:ad:63:4a:b3:4e:1f:f8:b8:80:b1:15:99:
da:5e:a5:eb:06:63:9a:c7:cc:8a:4d:84:08:53:4e:
e5:dd:15:e2:05:77:83:e5:15:ab:3f:c8:6b:fc:65:
1d:7a:11:3d:48:08:13:cc:a2:82:3e:2e:05:db:34:
d4:a4:0a:59:b5:b1:c0:2f:cb:78:9b:c8:88:05:d4:
f0:89:79:58:05:df:db:33:ac:0c:d5:10:88:98:7e:
d6:5e:a6:4f:68:f1:a7:d8:cf:49:d2:01:2c:a4:8f:
05:2c:54:0c:ce:59:c5:66:32:32:40:f9:55:ac:0f:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:00:3B:1C:B1:D7:C6:0E:76:86:91:55:51:19:C0:88:92:FC:84:41
X509v3 Authority Key Identifier:
keyid:21:97:4C:BD:6A:1F:54:3F:50:7C:6C:6C:E8:63:4C:1E:7E:2A:D0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b167a71215fda9fbeb96f856a1f2b9c72e00e85.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/fc7b00217625a36a81f285d34d6c1a7da65b94a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65afb993-9cea-4f8c-855c-1570ec06e64c/5b167a71215fda9fbeb96f856a1f2b9c72e00e85.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.168.0/22
Signature Algorithm: sha256WithRSAEncryption
74:aa:fe:fe:30:26:87:34:5e:ce:3a:36:69:aa:80:95:2e:86:
03:a0:65:e4:5f:6d:ba:d6:52:c1:d6:de:41:7f:e4:6d:3e:68:
79:c3:d4:ae:c8:24:3e:c4:0a:40:9c:83:62:19:1a:03:2d:a3:
7c:72:c5:00:f6:fe:4c:49:16:6e:1b:f3:80:cc:7d:60:7f:68:
4a:14:fc:4b:91:91:fb:61:1c:94:e2:c8:ae:b1:14:59:30:61:
f0:f2:27:36:3a:10:59:28:66:7a:65:5b:a2:ec:a9:a9:c1:0b:
45:b4:1e:09:c4:99:b7:69:06:48:97:eb:44:48:5c:ae:27:99:
42:c1:39:50:cd:6f:d2:33:a2:6c:ff:d0:55:92:32:79:2c:95:
3e:50:fd:68:24:36:04:e6:15:5f:c1:b1:7b:c1:b2:0a:b7:60:
1f:3b:cf:17:2c:8b:b3:71:05:6f:51:f7:0d:d6:34:7b:f2:f9:
af:6a:59:b9:45:b6:ab:b5:a0:98:6f:fc:10:f7:f5:c9:5f:d8:
fe:a7:f6:7e:04:aa:fa:b3:08:78:ec:74:ee:36:73:ef:e0:42:
b7:cd:3c:0b:a5:1d:b1:2c:09:36:03:a6:11:ed:3a:c7:39:3e:
8f:51:df:5c:5f:07:7f:43:7f:b3:65:18:c6:99:54:77:7f:d2:
5f:b3:1f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-ams.rpki-client.org