Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/8c8c792c9dd10c11ec70a67bcf2483e3e9c4067a.roa
File: 8c8c792c9dd10c11ec70a67bcf2483e3e9c4067a.roa (raw, json)
Hash identifier: r2RpW8Zm2jOvWKjMZQ16W3RYp4bcJ/fYg2u7jMVrpyE=
Subject key identifier: E8:63:A2:46:2D:1A:F5:2D:A8:AE:17:D9:1D:DE:3C:8A:F2:AD:D9:3A
Certificate issuer: /CN=30415e525ae2a6911d8229a69de6df7b5716b468
Certificate serial: 285AF9
Authority key identifier: AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/8c8c792c9dd10c11ec70a67bcf2483e3e9c4067a.roa
Signing time: Thu 22 Feb 2024 00:19:16 +0000
ROA not before: Thu 22 Feb 2024 00:19:16 +0000
ROA not after: Sun 22 Feb 2026 00:19:16 +0000
asID: 265762
IP address blocks: 128.201.160.0/22 maxlen: 24
128.201.161.0/24 maxlen: 27
128.201.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2644729 (0x285af9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30415e525ae2a6911d8229a69de6df7b5716b468
Validity
Not Before: Feb 22 00:19:16 2024 GMT
Not After : Feb 22 00:19:16 2026 GMT
Subject: CN=8c8c792c9dd10c11ec70a67bcf2483e3e9c4067a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:51:2e:7f:54:92:b0:9c:fa:3b:d9:8f:9a:
d4:8f:1d:8f:86:f9:10:f3:c0:04:43:c1:84:fd:b6:
10:bd:3b:85:52:78:b8:5f:a6:05:3f:5d:36:83:86:
6f:65:28:84:37:03:e7:df:bd:e8:8b:63:fc:61:af:
46:a0:d2:22:f5:71:fa:3e:c5:c1:03:95:cc:ee:c0:
5f:12:4a:09:56:36:20:09:0f:aa:ee:e3:3c:9c:a8:
da:de:1b:0b:8b:77:7c:14:61:e3:6b:9b:13:c9:0e:
8f:42:4e:5c:b4:52:7e:40:59:d1:7c:33:d5:fc:b1:
6d:79:a3:c5:80:1a:9d:c4:b1:f5:08:10:8e:0c:ee:
63:d4:ff:de:55:2c:28:ea:7b:73:1f:03:f2:7a:bd:
97:9d:7f:f0:7c:ae:d3:48:17:31:bb:31:e5:e9:35:
00:43:fd:a1:3f:6b:f6:96:46:9a:e0:60:89:c4:df:
ff:5a:26:8b:cb:bd:d7:40:be:f7:57:d8:6f:97:92:
7b:e0:a9:9b:12:72:b3:21:57:22:46:8f:03:e4:b1:
70:92:d7:f9:15:f9:21:90:e3:23:47:5e:49:3c:49:
b1:1f:2d:75:1b:65:1a:bd:2f:50:e2:dc:a2:f2:eb:
ab:f8:03:24:e7:7c:d4:ac:f3:a8:f6:45:1c:23:bc:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:63:A2:46:2D:1A:F5:2D:A8:AE:17:D9:1D:DE:3C:8A:F2:AD:D9:3A
X509v3 Authority Key Identifier:
keyid:AF:60:BD:49:A3:A8:C1:3E:E3:F8:AC:3C:DE:F7:D3:F4:87:71:B1:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30415e525ae2a6911d8229a69de6df7b5716b468.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/8c8c792c9dd10c11ec70a67bcf2483e3e9c4067a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7383ebd6-fd3e-4d63-a822-e8cd9fa2c29e/30415e525ae2a6911d8229a69de6df7b5716b468.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.160.0/22
Signature Algorithm: sha256WithRSAEncryption
13:94:95:15:08:3e:6e:f8:71:ad:51:b1:aa:56:a6:0e:a0:4a:
be:39:a6:68:54:5d:c8:77:07:91:56:74:94:d1:07:e4:84:41:
11:a3:7f:00:c9:5f:1a:c2:49:87:1e:0a:d1:7b:bb:18:c7:bb:
ff:ef:cb:41:14:d2:19:46:f0:33:ab:99:aa:16:28:e0:68:d5:
6a:55:97:a8:4c:00:d0:e7:fc:52:9d:83:bd:8e:08:eb:80:f9:
fc:6c:78:37:03:0d:ae:42:f4:ea:b4:0a:67:c1:14:ae:5e:2b:
cc:1f:31:33:49:6e:0c:a9:37:7d:5d:35:2e:2e:90:ab:1b:db:
2f:26:fb:a5:6c:22:34:fa:73:b1:df:98:ef:68:c7:6d:ff:68:
38:a5:43:9a:40:42:31:13:b7:64:d5:87:67:15:08:43:7e:51:
f4:dc:ff:03:d8:2f:ec:34:e1:81:ed:6a:bf:83:df:f7:dd:07:
be:69:a9:07:e1:b3:e5:be:90:81:c2:70:bd:83:02:a4:b4:99:
b0:d5:76:e2:ab:64:8d:f6:4e:0f:12:c9:a2:a2:95:40:5e:6f:
9b:e4:1a:7d:46:41:86:08:04:06:18:04:7f:9c:a2:dd:e1:bc:
00:4f:a7:b2:5e:47:87:fd:0c:62:e4:b7:1d:bc:a8:e3:05:83:
e4:d3:a1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org