Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/cbe5e003e25ef5f3969cca3864ef3501f9a4c245.roa
File: cbe5e003e25ef5f3969cca3864ef3501f9a4c245.roa (raw, json)
Hash identifier: Tu1Q2EEXlBEEo5olxe4YWf/jrtFGJUsSgjHocCMokvQ=
Subject key identifier: 05:2E:EA:86:8D:D4:FB:0B:60:96:90:B0:7C:70:46:56:43:9C:4B:D2
Certificate issuer: /CN=677e61affc2207b19cf569eaf59f1aa53af06efd
Certificate serial: 243E27
Authority key identifier: E2:B5:34:5A:B6:AB:EE:BA:07:CB:14:AB:54:F2:AD:0D:E3:E5:97:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/677e61affc2207b19cf569eaf59f1aa53af06efd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/cbe5e003e25ef5f3969cca3864ef3501f9a4c245.roa
Signing time: Wed 15 Nov 2023 22:03:52 +0000
ROA not before: Wed 15 Nov 2023 22:03:52 +0000
ROA not after: Sat 15 Nov 2025 22:03:52 +0000
asID: 28458
IP address blocks: 207.248.114.0/24 maxlen: 24
207.248.115.0/24 maxlen: 24
207.248.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2375207 (0x243e27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677e61affc2207b19cf569eaf59f1aa53af06efd
Validity
Not Before: Nov 15 22:03:52 2023 GMT
Not After : Nov 15 22:03:52 2025 GMT
Subject: CN=cbe5e003e25ef5f3969cca3864ef3501f9a4c245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:f1:50:68:b5:9d:63:b2:ae:ec:4d:4f:c3:
4d:88:07:1a:d2:24:c4:e5:01:ab:03:5a:e0:2e:06:
b0:e0:96:5f:68:d1:2f:6a:94:ee:d9:7d:56:9f:a6:
9b:35:bb:bc:9f:57:8e:8c:37:8f:eb:da:3a:9b:6a:
61:23:fd:e0:53:52:0f:ef:29:f6:1f:8f:f9:87:56:
3c:e9:5c:e8:03:3e:e6:24:4c:9c:8c:86:8d:85:81:
4a:aa:6b:8e:cf:5f:f4:aa:cd:43:f8:71:02:4e:6e:
0a:c5:ef:d1:49:52:2b:1f:6c:2a:30:02:11:58:d4:
2f:f4:36:03:74:3a:89:04:41:c1:18:31:4a:17:42:
f4:a9:6d:16:77:50:4e:01:fb:53:d2:1d:2a:54:d5:
40:49:bb:a3:17:dc:e5:e3:c1:30:6f:ac:a0:50:90:
f5:6f:b9:9b:10:f8:51:4e:07:f6:5a:c2:c3:e5:f8:
94:9d:9c:2a:be:58:9d:d4:84:2c:5c:3d:48:51:06:
1c:1b:8a:c5:3b:fe:62:68:fd:6b:f8:6f:d9:36:2e:
14:ac:8c:55:a4:8c:7c:48:21:d9:15:49:23:c5:eb:
bb:a9:d5:92:e1:a8:d0:2e:64:e8:3f:7b:45:bf:e5:
06:6f:35:77:19:43:f6:b7:3b:97:92:09:6e:9a:63:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:2E:EA:86:8D:D4:FB:0B:60:96:90:B0:7C:70:46:56:43:9C:4B:D2
X509v3 Authority Key Identifier:
keyid:E2:B5:34:5A:B6:AB:EE:BA:07:CB:14:AB:54:F2:AD:0D:E3:E5:97:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/677e61affc2207b19cf569eaf59f1aa53af06efd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/cbe5e003e25ef5f3969cca3864ef3501f9a4c245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8648ad1a-3f4d-4485-8db2-529ee5624a21/677e61affc2207b19cf569eaf59f1aa53af06efd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.248.114.0/23
Signature Algorithm: sha256WithRSAEncryption
20:c8:04:07:89:04:d8:74:1a:a9:3d:37:70:2a:d4:0b:42:4d:
98:11:ea:ce:03:2a:74:57:ee:a2:18:f5:13:73:95:f5:9a:d7:
3e:0a:77:a7:bf:fe:2c:49:a4:95:fc:db:79:58:6f:5a:2b:e1:
2d:72:ff:b9:ec:46:51:a0:62:09:22:ae:1f:4f:91:e3:66:04:
57:04:4c:51:aa:dc:a9:63:8e:96:0d:47:4e:8c:10:9e:b8:31:
5c:c0:95:d9:76:92:3b:f0:b4:82:5e:0c:9a:67:70:1e:1d:b5:
14:22:74:20:84:df:7d:39:fe:a6:6c:81:1e:a2:a4:c3:b3:bd:
70:9f:27:d1:50:94:f1:9a:20:d9:d2:49:bc:cc:d0:cd:ce:8e:
25:2f:b5:cc:f5:07:8b:83:be:34:01:49:07:37:39:8f:fe:f4:
ec:79:86:45:b6:58:9f:40:55:db:e9:6e:dd:4e:b4:3a:89:ad:
cc:a8:97:4e:21:97:06:94:d1:77:e0:d9:8c:7c:06:a1:7e:a4:
3c:b1:85:fe:0d:83:91:ed:40:4c:cf:4e:f1:9b:b2:dd:04:26:
a6:60:8a:2c:09:53:a9:2c:8e:37:19:49:59:6c:f9:b8:b3:99:
86:2f:8d:c4:d9:ee:75:bf:f2:c7:d1:c9:ee:c7:cf:38:b7:c9:
66:93:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org