Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/fcb84183f7ff95503ac44c530c817bfa45604052.roa
File: fcb84183f7ff95503ac44c530c817bfa45604052.roa (raw, json)
Hash identifier: t8THtf/SmTgeNje61RxuVda4OF7vLxWjnkJAwHxmvIE=
Subject key identifier: B0:31:36:3A:46:4D:E6:30:89:AD:C2:9E:5E:13:39:C5:2A:2B:F9:22
Certificate issuer: /CN=24b9a83a84ed651b0b613359fbb1a875e436316a
Certificate serial: 0E8EF7
Authority key identifier: 9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/fcb84183f7ff95503ac44c530c817bfa45604052.roa
Signing time: Sat 10 Feb 2024 02:07:20 +0000
ROA not before: Sat 10 Feb 2024 02:07:20 +0000
ROA not after: Tue 10 Feb 2026 02:07:20 +0000
asID: 270149
IP address blocks: 148.208.112.0/24 maxlen: 24
148.208.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954103 (0xe8ef7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b9a83a84ed651b0b613359fbb1a875e436316a
Validity
Not Before: Feb 10 02:07:20 2024 GMT
Not After : Feb 10 02:07:20 2026 GMT
Subject: CN=fcb84183f7ff95503ac44c530c817bfa45604052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:93:1e:16:4f:3b:43:ae:16:68:8f:fb:38:
f4:ba:57:3a:30:81:fa:38:5b:f1:21:28:69:0e:8c:
db:16:31:b8:68:81:ce:da:15:e1:8c:da:ad:2a:bf:
75:f5:cd:3f:18:d7:01:5b:39:c9:3a:f2:93:a2:39:
cb:6e:37:a7:a0:9d:67:72:ad:74:33:a9:80:ee:11:
45:7c:50:af:76:18:9c:b9:82:a7:ec:a5:66:a6:fc:
7b:fb:72:a2:09:37:3c:2d:45:34:66:c0:99:5a:44:
6d:25:c1:90:fb:f5:89:67:13:69:ff:65:93:01:cb:
ad:47:8b:b8:90:87:75:ac:9f:5f:9f:80:c0:aa:f5:
0b:0b:3f:e3:73:8b:e2:f0:5d:92:38:dd:5b:21:4b:
a5:ba:7a:86:ad:8c:55:f9:e6:92:84:ee:b3:22:1c:
d5:19:04:a9:e4:74:0e:64:6c:ce:ea:98:35:34:16:
b4:a8:01:89:4d:f6:57:da:ae:24:c7:bf:c3:de:8f:
8a:d8:9e:09:38:43:89:b9:3d:13:3a:b7:3c:de:5d:
f9:1a:30:7b:8d:09:5c:61:62:97:fc:9a:56:24:45:
e6:40:70:e0:39:56:a9:7c:c0:a0:7d:88:17:66:60:
39:af:68:33:09:6f:6a:ae:c0:d9:cb:5a:4c:25:f8:
2d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:31:36:3A:46:4D:E6:30:89:AD:C2:9E:5E:13:39:C5:2A:2B:F9:22
X509v3 Authority Key Identifier:
keyid:9D:1F:1D:B8:DF:8B:E2:EE:E7:E2:DE:4D:77:E5:8B:F3:8D:2C:CC:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9a83a84ed651b0b613359fbb1a875e436316a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/fcb84183f7ff95503ac44c530c817bfa45604052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/24b9a83a84ed651b0b613359fbb1a875e436316a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.208.112.0/24
148.208.136.0/24
Signature Algorithm: sha256WithRSAEncryption
35:10:64:cf:be:58:92:e1:db:18:79:51:f9:a7:d9:b5:09:e6:
b8:53:c3:82:a1:2a:0f:12:77:0b:f8:c9:ad:08:5c:94:2a:11:
7e:54:6c:d9:be:5d:61:15:47:2c:f7:85:7e:5d:d5:c0:7d:2e:
6d:51:ae:5b:2e:e6:5e:3f:3a:2c:3a:53:bd:f7:df:ae:e2:17:
3a:04:14:2f:f8:14:b5:17:44:1c:34:c1:f2:1b:bf:28:45:1c:
e3:1e:ad:e5:24:a4:a9:17:a8:a9:80:38:f6:8e:45:c3:51:23:
41:be:30:18:0a:76:62:a2:91:54:ca:9a:4d:3a:4b:2d:a2:4e:
05:7b:d1:4b:6f:b7:90:c0:43:e9:6d:ba:55:3f:c8:90:75:53:
cd:42:8c:1d:a1:5b:19:ec:95:cb:a5:e7:d7:2f:17:af:e7:32:
f2:25:e2:8c:6a:d5:d6:e9:4f:49:b5:63:4d:b8:9d:aa:97:27:
c4:27:5d:71:a8:b6:72:e0:77:76:68:ed:ef:ac:ae:fd:aa:3c:
f8:b4:eb:8c:88:f6:e3:3d:41:f2:88:2d:62:05:d2:dc:84:19:
e5:a1:7a:c3:21:76:c7:51:a9:9e:07:45:13:7c:90:a3:84:94:
bd:e4:84:21:73:21:f0:6f:ec:49:21:87:ba:d1:1c:fe:c9:65:
b2:33:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 16:20:16 2024 by rpki-client on console-ams.rpki-client.org