Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/68e2fb552b5c384b927564a608d431784d7001ad.roa
File: 68e2fb552b5c384b927564a608d431784d7001ad.roa (raw, json)
Hash identifier: wYa3zAnZE06jK25+SScIvcHEloSZ9C6tEaaxv7jB1yc=
Subject key identifier: 85:A2:DF:50:83:23:16:B6:3E:72:6E:E4:F9:77:0E:F4:C7:3B:81:64
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 0364BA
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/68e2fb552b5c384b927564a608d431784d7001ad.roa
Signing time: Tue 11 Jul 2023 12:50:13 +0000
ROA not before: Mon 10 Jul 2023 12:50:13 +0000
ROA not after: Fri 11 Jul 2025 12:50:13 +0000
asID: 16629
IP address blocks: 179.8.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222394 (0x364ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 12:50:13 2023 GMT
Not After : Jul 11 12:50:13 2025 GMT
Subject: CN=68e2fb552b5c384b927564a608d431784d7001ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:41:9a:0d:fb:af:b4:cc:50:6f:e3:3a:32:
61:c5:fe:55:2d:a1:25:80:b8:8d:6e:59:ac:9a:24:
67:a0:e4:51:e1:60:df:71:01:4c:c9:bb:7e:c5:1d:
9c:f2:50:99:fd:7a:6c:31:10:40:8c:ec:a1:07:2f:
21:97:42:ae:b7:86:de:f7:51:10:fc:bf:7f:09:e5:
40:32:4c:b7:3d:79:5f:5d:cd:8f:ba:e1:ab:bd:72:
71:75:f2:8f:cb:e6:ee:6d:cc:08:f5:e5:42:99:15:
5a:67:3e:0f:10:8e:58:4b:7e:eb:25:18:e8:f4:aa:
a1:b7:87:69:a6:58:91:06:4f:26:a7:7d:8a:eb:23:
2f:ca:3b:1c:b2:80:3f:c8:0c:29:0e:b4:6a:13:fa:
80:7f:ab:14:c5:c2:c3:ef:e4:ba:2e:9c:88:06:a7:
4d:16:c5:f7:3b:b7:a7:b3:b1:a9:bb:30:7a:b8:c4:
8f:30:e0:f9:6f:eb:93:a1:31:a5:9c:da:da:a3:3b:
e1:f3:f9:b3:fb:38:31:49:b6:1b:94:c9:40:96:1d:
71:e4:a9:b7:d5:42:0d:38:88:a9:95:ed:73:a6:3f:
3c:0b:12:5f:2d:ac:a6:f6:10:c8:3f:1b:2d:6f:b4:
ff:2d:b4:b3:8f:a6:c8:e9:43:40:32:9d:a3:ca:0f:
b7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A2:DF:50:83:23:16:B6:3E:72:6E:E4:F9:77:0E:F4:C7:3B:81:64
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/68e2fb552b5c384b927564a608d431784d7001ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.8.0.0/15
Signature Algorithm: sha256WithRSAEncryption
86:0a:0c:25:26:ee:e8:80:33:24:2c:0c:d8:a7:b6:65:1a:ca:
75:7d:4a:de:23:49:72:83:6a:e8:9f:c2:b4:b3:dc:82:21:04:
d5:a6:da:8e:ad:2f:1a:36:c5:90:58:63:e9:d2:4b:c5:fe:9c:
0f:69:ff:93:ef:d9:92:9a:df:af:06:12:c0:77:54:5c:70:82:
bb:0b:1d:84:03:68:75:61:fa:f5:ef:8f:49:14:b3:78:41:4a:
2e:21:f1:3b:9b:d6:2b:57:25:ab:6a:0c:03:46:8a:d6:42:32:
5d:fe:a8:ef:24:02:38:17:5d:b7:14:d7:6f:7c:9a:85:c3:3e:
d0:ed:ac:1b:20:9c:70:e6:e8:16:c1:da:c6:50:a7:44:51:07:
28:15:bb:20:72:cc:e5:a9:64:bd:e5:be:5f:9f:1f:b4:45:82:
93:d4:fa:5a:00:3f:7e:e6:18:86:69:6b:1a:1c:5a:3f:1b:69:
07:95:89:eb:a7:ee:0b:2b:95:72:29:06:1f:3a:41:9f:4c:9a:
28:a6:82:b3:b8:69:2c:06:a5:49:d5:6f:41:47:35:ea:7b:9b:
00:8d:f5:bf:13:cd:d0:fa:e4:76:76:14:78:50:d6:a5:6e:02:
50:3d:e5:81:b6:f5:42:02:83:2a:8a:4a:7e:d4:b6:8d:39:c8:
d7:32:4e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org