Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/dbf27686d2724663003e200b86b106386cf1b7e6.roa
File: dbf27686d2724663003e200b86b106386cf1b7e6.roa (raw, json)
Hash identifier: ebyLFPb3mc0w1EAdRWljCJEZgdVeWIXY50augHsot7Y=
Subject key identifier: E8:AB:31:4C:83:E4:22:DA:B4:C6:E3:59:E5:13:38:3A:6D:01:E2:32
Certificate issuer: /CN=24b9a83a84ed651b0b613359fbb1a875e436316a
Certificate serial: 0BE143
Authority key identifier: 9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/dbf27686d2724663003e200b86b106386cf1b7e6.roa
Signing time: Wed 18 Oct 2023 23:05:54 +0000
ROA not before: Tue 17 Oct 2023 23:05:53 +0000
ROA not after: Sat 18 Oct 2025 23:05:53 +0000
asID: 270149
IP address blocks: 148.208.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778563 (0xbe143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b9a83a84ed651b0b613359fbb1a875e436316a
Validity
Not Before: Oct 17 23:05:53 2023 GMT
Not After : Oct 18 23:05:53 2025 GMT
Subject: CN=dbf27686d2724663003e200b86b106386cf1b7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:01:b4:09:4e:80:12:d9:55:ba:ff:e9:7e:
87:e0:01:9b:3e:c6:7c:b5:fc:96:95:d8:6b:c6:9e:
c3:ae:a1:74:64:c7:2f:8e:ba:34:c5:b0:aa:8a:3e:
27:f9:c8:ec:84:c2:50:6d:a2:51:66:e5:95:4b:45:
6e:cb:8a:b1:41:ac:c0:d1:8f:6e:31:89:ba:de:4d:
06:58:f8:1d:56:4b:8c:5a:67:7b:21:f3:89:50:33:
97:a7:76:95:b6:cf:c1:f4:ff:b5:48:73:6e:d7:8f:
68:c0:d0:45:a2:3b:c5:15:60:90:bb:75:a2:e9:9a:
3a:d7:d3:bd:ff:53:8b:6b:9a:d6:8a:b1:0a:26:9b:
c3:66:ec:d4:a6:63:d3:64:6e:ba:3c:ff:50:53:47:
3a:c5:29:e1:99:45:74:51:a0:78:ce:71:66:5d:00:
82:a1:d4:14:60:be:58:57:6a:5c:ce:ba:90:1b:e5:
b1:9d:9b:b3:27:1e:00:fa:60:8d:88:e9:5e:64:38:
01:20:bb:55:06:ac:00:ff:4f:77:0d:38:2d:2c:3a:
17:27:b9:2c:69:87:57:32:72:0f:3a:28:11:d8:07:
52:f7:a0:62:a2:56:d6:6e:c3:1a:48:0b:c7:80:35:
de:d4:37:0a:a0:e6:16:6b:d7:b5:a2:32:71:60:c4:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AB:31:4C:83:E4:22:DA:B4:C6:E3:59:E5:13:38:3A:6D:01:E2:32
X509v3 Authority Key Identifier:
keyid:9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/dbf27686d2724663003e200b86b106386cf1b7e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/24b9a83a84ed651b0b613359fbb1a875e436316a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.208.159.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:e2:79:1d:88:e6:22:bd:f2:48:4f:3a:e7:03:1b:4b:0e:70:
5d:da:c9:6d:4a:04:65:d5:7b:40:67:2d:ff:e8:01:fb:f3:9d:
cd:dd:41:38:be:ea:38:55:60:58:56:3e:88:a0:b3:9a:70:52:
8d:e9:ed:ca:d7:de:6d:65:f1:dd:ce:74:88:6b:c4:d4:3e:e3:
4f:5b:a5:9a:82:26:6b:5e:6a:77:47:6f:a1:d3:c8:c5:87:10:
72:2f:5a:91:20:5d:88:06:78:48:5e:58:ff:37:1d:35:76:da:
c1:f6:a3:44:cd:25:c8:2e:7a:94:8e:79:ab:aa:4c:1f:63:25:
b5:ac:b2:4c:0c:78:77:99:94:f7:0a:be:96:89:c6:3d:ab:d7:
a1:3a:2d:77:fd:9a:a6:a9:ac:db:60:d5:4e:0b:b7:9c:d5:34:
a9:1d:ac:38:28:48:2d:83:26:51:4a:eb:33:9f:5f:97:72:e1:
72:55:d6:87:f1:9f:d8:3f:c9:b7:25:87:e1:51:d9:f5:d6:30:
1d:b8:80:d5:82:fd:4f:ca:a2:4f:f8:40:fd:0b:7f:25:29:ec:
2b:85:ef:f3:96:4f:4c:23:24:c1:1a:c6:d1:e8:9e:89:12:ff:
9e:93:9b:ad:30:6b:13:f4:de:8c:b7:41:69:5b:ed:24:66:99:
40:d2:5b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 18:30:14 2024 by rpki-client on console-fra.rpki-client.org