Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8b12919b-96e8-4319-b142-ddbb3268b3e3/39b5b53a42aa423816f5d86846dfe3d389cb1f98.roa
File: 39b5b53a42aa423816f5d86846dfe3d389cb1f98.roa (raw, json)
Hash identifier: CqJLuQwRv4Of5ZQu36cO/fiwVLwkWJayI78ccItdVOA=
Subject key identifier: 66:75:9F:DF:22:6F:D2:B7:0A:25:8F:18:49:DA:FA:F1:C2:60:64:A1
Certificate issuer: /CN=43060d1236e15e448512a328b3ac27a6c12b2370
Certificate serial: 05276A
Authority key identifier: 3C:D6:58:74:2A:E9:AA:DC:08:3D:18:79:42:71:49:61:47:D7:A6:3B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43060d1236e15e448512a328b3ac27a6c12b2370.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8b12919b-96e8-4319-b142-ddbb3268b3e3/39b5b53a42aa423816f5d86846dfe3d389cb1f98.roa
Signing time: Wed 24 Mar 2021 14:30:27 +0000
ROA not before: Wed 24 Mar 2021 14:30:27 +0000
ROA not after: Tue 24 Mar 2026 14:30:27 +0000
asID: 264702
IP address blocks: 170.0.84.0/24 maxlen: 24
170.0.85.0/24 maxlen: 24
170.0.86.0/24 maxlen: 24
170.0.87.0/24 maxlen: 24
2803:b40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337770 (0x5276a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43060d1236e15e448512a328b3ac27a6c12b2370
Validity
Not Before: Mar 24 14:30:27 2021 GMT
Not After : Mar 24 14:30:27 2026 GMT
Subject: CN=39b5b53a42aa423816f5d86846dfe3d389cb1f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:00:a5:40:22:a9:92:c5:86:c7:1a:4a:28:
f9:d9:4c:e7:05:fc:a6:75:39:53:23:18:47:67:b0:
e8:96:91:c8:cb:69:6e:18:2e:5e:9b:b7:85:0e:01:
9d:20:e5:5f:c7:5d:64:17:25:b3:8a:1a:34:88:07:
8c:4d:50:26:4d:cd:fd:38:d5:fb:2e:4a:57:48:f6:
b3:46:34:a0:a7:50:aa:e5:01:4a:73:3c:1d:24:df:
11:96:c5:cf:aa:d5:a7:36:96:14:fe:2d:40:3d:b8:
c4:5d:e2:a4:42:3e:d4:0c:ac:7a:cb:e6:d9:20:e7:
4c:b5:79:50:c0:58:14:27:85:df:05:f0:62:85:06:
cb:e6:c5:69:8d:12:7c:27:ba:84:64:12:07:34:d4:
15:9d:50:ec:98:66:0a:f5:78:79:77:b1:46:f6:40:
2b:90:7c:df:3c:3f:a3:37:0d:f6:18:3c:fc:c4:6f:
97:b8:78:c4:38:e3:71:19:51:60:e6:31:f8:d0:aa:
5e:03:41:6b:76:64:82:82:f0:94:54:00:f0:79:10:
d4:ed:cf:cd:51:e2:9d:11:7f:e6:11:68:90:02:19:
57:95:b6:8e:96:00:a3:05:42:56:92:de:9a:16:6b:
50:64:cc:17:fd:a8:a7:56:c3:e6:9f:f2:94:4d:11:
e4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:75:9F:DF:22:6F:D2:B7:0A:25:8F:18:49:DA:FA:F1:C2:60:64:A1
X509v3 Authority Key Identifier:
keyid:3C:D6:58:74:2A:E9:AA:DC:08:3D:18:79:42:71:49:61:47:D7:A6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43060d1236e15e448512a328b3ac27a6c12b2370.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8b12919b-96e8-4319-b142-ddbb3268b3e3/39b5b53a42aa423816f5d86846dfe3d389cb1f98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8b12919b-96e8-4319-b142-ddbb3268b3e3/43060d1236e15e448512a328b3ac27a6c12b2370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.84.0/22
IPv6:
2803:b40::/32
Signature Algorithm: sha256WithRSAEncryption
05:2a:bb:e0:94:39:a6:d6:08:8f:81:7d:d6:fe:15:bd:d6:fd:
b0:24:21:be:80:c1:3d:6f:c1:f5:b3:1b:6a:1b:da:15:55:15:
50:50:e2:1e:c8:12:ac:ea:ec:cb:0e:ed:ef:2a:30:f3:cb:e0:
2b:13:72:81:7e:a4:5a:63:23:94:71:c4:0e:b6:8e:2a:bc:df:
08:81:99:1c:db:00:3f:bf:61:de:ab:8f:e3:9d:7b:89:36:ff:
70:18:7a:98:e8:d2:21:f4:c0:cd:d6:cf:11:5b:85:e3:3e:4b:
2d:84:f1:0c:a8:db:06:b9:a8:43:de:f3:3d:7e:0d:2e:6a:cd:
ac:2a:c7:17:54:35:85:f4:bc:50:cc:4e:30:93:c4:71:58:b6:
b4:00:04:03:bd:16:38:07:10:e4:79:8d:32:12:2f:79:09:2e:
36:9e:03:ba:63:db:be:18:b5:59:11:2d:1f:20:0f:f1:2e:3a:
d1:51:0c:29:85:8d:8f:fb:f1:e6:f0:e5:1f:cf:13:1d:eb:57:
67:98:5f:20:56:4c:ef:08:a8:e7:b8:e5:de:73:21:32:6f:05:
b0:fb:45:37:2e:b1:49:35:53:81:cf:86:fe:6a:74:c8:bf:12:
f8:6d:7b:92:53:4f:b2:bb:16:14:d7:a4:b0:c6:3e:f8:8f:bd:
3d:60:65:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org