Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/1bd2eb3a5fd84c9c2c6c303fd17e05f194c2152e.roa
File: 1bd2eb3a5fd84c9c2c6c303fd17e05f194c2152e.roa (raw, json)
Hash identifier: YoAeArkutAi//61OfJrVasrkJpvxy5Ehw1ZQw4FbnnQ=
Subject key identifier: C1:7B:7F:96:F9:8C:BC:E4:BE:12:C5:4E:E7:DC:0E:8B:B0:0A:79:A4
Certificate issuer: /CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Certificate serial: 15CC56
Authority key identifier: 84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/1bd2eb3a5fd84c9c2c6c303fd17e05f194c2152e.roa
Signing time: Fri 14 Apr 2023 13:55:35 +0000
ROA not before: Thu 13 Apr 2023 13:54:56 +0000
ROA not after: Mon 14 Apr 2025 13:54:56 +0000
asID: 265639
IP address blocks: 170.246.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1428566 (0x15cc56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501f1f0f3a2acdfd121143683d0a9cfc1657da67
Validity
Not Before: Apr 13 13:54:56 2023 GMT
Not After : Apr 14 13:54:56 2025 GMT
Subject: CN=1bd2eb3a5fd84c9c2c6c303fd17e05f194c2152e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:d4:95:0b:38:94:11:ba:4c:01:ef:f8:88:
ca:5d:ed:d4:80:d7:cd:c3:cc:c2:bc:fa:d8:4f:d3:
20:ec:4d:1d:13:7d:1e:20:fe:64:ec:ec:fe:41:6f:
81:ca:7a:0a:53:f0:04:33:41:65:35:e3:41:ec:e1:
e9:00:22:f3:f9:61:ac:6e:f8:5b:19:4c:32:7a:f5:
9c:d9:9c:a0:ca:a7:dd:57:a5:bf:ab:cd:1d:07:e1:
21:46:24:0d:1b:6b:ed:2b:10:5a:c3:85:e0:9d:72:
7f:5d:6f:ef:de:02:38:3a:b3:ff:c3:b8:e3:76:97:
4d:7a:f8:50:8a:be:00:46:e1:b2:a0:8f:1c:5e:1e:
9c:9b:da:07:e3:b9:01:27:57:5e:72:c9:ec:af:64:
07:aa:11:88:a5:ff:17:d6:a9:5c:57:79:5b:a9:ab:
e9:32:f0:99:c2:a5:56:8f:a9:4a:92:e6:0c:d0:da:
9f:e0:fe:20:97:8f:57:46:72:48:e4:5b:06:72:54:
fb:00:bd:a7:e0:1c:9f:83:4d:74:0c:18:d3:21:01:
ac:38:c3:02:3d:81:76:ff:a3:1a:37:9a:3b:6c:89:
df:4d:d0:b4:c7:d3:2a:2b:1a:44:81:79:67:b5:99:
b0:56:25:ce:44:fd:31:6f:e7:c1:a6:07:25:bf:70:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7B:7F:96:F9:8C:BC:E4:BE:12:C5:4E:E7:DC:0E:8B:B0:0A:79:A4
X509v3 Authority Key Identifier:
keyid:84:BD:EC:58:F9:86:DC:3D:C5:51:DC:CC:FD:B4:B5:CE:4E:BF:A7:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/501f1f0f3a2acdfd121143683d0a9cfc1657da67.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/1bd2eb3a5fd84c9c2c6c303fd17e05f194c2152e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/86d8f1c3-a727-4065-91d3-350bc3db5ba4/501f1f0f3a2acdfd121143683d0a9cfc1657da67.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.88.0/24
Signature Algorithm: sha256WithRSAEncryption
22:4d:a9:98:18:d0:e0:42:12:7f:e5:1e:d9:1b:1f:cd:88:7e:
91:d5:8e:19:d5:f0:cc:63:b2:ef:72:6a:c5:a0:b8:02:0d:0f:
07:03:48:5b:5d:7f:9c:76:bc:5a:d5:d2:4a:9c:e0:1d:cd:ce:
02:02:1c:fd:52:eb:37:3a:47:a8:92:f4:25:cb:b1:73:5a:90:
9d:10:70:6e:80:16:59:5a:3f:58:a9:f6:4d:2e:b5:13:d4:71:
22:60:0e:a9:51:dc:9c:55:8e:64:75:76:f9:47:94:fc:6f:e0:
4a:c3:ac:1b:66:d0:98:e7:12:7d:fb:aa:b7:25:79:61:de:84:
89:28:5a:5c:3f:8a:19:60:11:64:8b:b9:4b:70:ba:a8:f1:01:
64:46:42:a5:8d:1d:b0:d8:c6:d6:5f:c1:be:6e:ab:dc:2a:a6:
8d:fd:3a:94:63:71:a3:f8:e5:94:96:97:e4:a4:70:6a:ef:4c:
44:23:4d:99:3a:dc:04:f7:7b:d4:0f:a7:98:ed:28:a6:ef:bc:
a2:62:ca:38:60:1d:45:8e:d7:e4:28:db:d8:32:76:59:03:04:
32:01:b5:1b:9e:90:ad:2b:d9:bc:52:0c:82:73:5a:b9:b9:de:
ec:94:92:c2:c2:73:06:2c:64:63:05:cd:2b:5e:a1:a6:03:f8:
fe:79:56:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org