Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/d299de1a8f8686920b9351415af36cc68d8490ff.roa
File: d299de1a8f8686920b9351415af36cc68d8490ff.roa (raw, json)
Hash identifier: JVbLikMVu6TfSEg0EzmNz7+al1dhUl1iSgTsxkO2N/o=
Subject key identifier: 64:77:20:36:00:49:6A:8C:89:C4:F7:59:49:29:84:1A:4B:D8:2D:88
Certificate issuer: /CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
Certificate serial: 185A87
Authority key identifier: 7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/d299de1a8f8686920b9351415af36cc68d8490ff.roa
Signing time: Thu 11 Jan 2024 18:09:17 +0000
ROA not before: Thu 11 Jan 2024 18:09:17 +0000
ROA not after: Sun 11 Jan 2026 18:09:17 +0000
asID: 3257
IP address blocks: 170.231.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1596039 (0x185a87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=569d9c53d2d7a2dabbb573b437a4edbd78719117
Validity
Not Before: Jan 11 18:09:17 2024 GMT
Not After : Jan 11 18:09:17 2026 GMT
Subject: CN=d299de1a8f8686920b9351415af36cc68d8490ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:42:5b:c2:2a:88:b8:c9:32:c0:73:08:35:ae:
5d:46:fd:1e:ca:e0:c3:ea:5b:dc:ba:aa:4e:e4:0f:
d5:9e:cd:41:c0:e0:00:7b:b9:31:4d:e0:20:25:74:
87:15:30:b3:bb:46:6b:f6:3e:1d:45:32:8c:4a:d8:
67:5e:5b:fc:db:af:ca:93:0d:48:1b:50:fc:48:79:
51:d6:3f:82:d8:98:d5:38:b2:94:cb:b2:07:d3:be:
07:a6:ab:4d:32:70:d9:e6:89:55:d0:c2:17:40:4c:
04:44:3c:c0:38:f9:bf:87:ef:0d:eb:a2:81:4f:9d:
b2:03:f1:5c:d3:55:76:5f:63:a9:84:47:ee:6b:8d:
fb:36:bc:51:c5:30:b7:0b:be:09:1a:23:60:22:b9:
d4:89:e6:11:72:ec:ec:46:21:c7:b7:d3:6f:10:79:
22:b3:d5:32:8e:ac:66:5f:04:5c:29:89:a6:67:d8:
04:27:2a:58:bc:23:7b:77:1d:74:de:29:2d:03:1e:
b0:a7:5b:92:a6:a5:3f:8e:58:95:8c:03:a9:b4:50:
8a:c2:fc:e1:75:27:24:53:bd:ff:6a:2b:84:14:29:
2e:13:e2:dd:96:a4:ba:b6:86:af:5f:4c:e6:37:dc:
ba:4f:5d:59:ab:a2:6d:4a:6a:ca:3c:8a:59:92:5d:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:20:36:00:49:6A:8C:89:C4:F7:59:49:29:84:1A:4B:D8:2D:88
X509v3 Authority Key Identifier:
keyid:7E:23:73:C2:1C:1C:73:EA:50:DA:EE:CE:10:06:0B:BB:52:C4:C2:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/569d9c53d2d7a2dabbb573b437a4edbd78719117.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/d299de1a8f8686920b9351415af36cc68d8490ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8d7114b0-b656-4c1b-9754-27388538e321/569d9c53d2d7a2dabbb573b437a4edbd78719117.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.250.0/24
Signature Algorithm: sha256WithRSAEncryption
39:fd:36:ea:7d:e8:87:f9:c2:ab:cb:e6:89:38:e3:2b:2a:dd:
69:4a:9f:14:3e:a3:f9:c1:4b:24:7a:e3:5c:8d:a2:ca:52:86:
fc:08:d9:a0:87:37:e9:cf:a3:41:16:40:31:45:ef:92:0e:4b:
49:27:13:d3:8a:6c:ee:d9:a7:0e:30:d0:cc:77:86:15:9e:16:
04:71:ba:69:7b:60:92:52:30:3d:a7:7e:d1:0e:04:7a:af:c5:
fb:17:8e:ce:d0:6d:82:b5:ef:92:98:53:f9:8d:a5:13:04:c9:
5f:50:df:d0:e4:fc:4f:c5:78:6c:d3:f8:37:62:f4:f4:fc:37:
fb:5a:de:ce:c5:dd:93:84:07:62:b3:83:4a:df:6a:15:41:cc:
c5:97:a6:93:84:c1:f7:96:c8:39:89:5e:96:c6:26:e0:e0:62:
56:3a:e6:c3:6d:ab:dd:58:48:69:08:c0:20:d1:5e:8a:7d:22:
c7:27:41:2b:db:80:57:7e:92:95:2d:1e:99:8e:12:40:df:0b:
77:68:48:62:f9:30:fc:b8:15:e5:02:74:11:b6:29:1c:2a:43:
0a:0f:a6:5d:ad:1f:ab:48:e4:03:e9:19:21:d5:f5:2a:06:98:
04:4e:11:6e:26:57:e4:a0:39:dc:2f:18:01:aa:66:10:9f:07:
8c:0e:ed:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 23:43:59 2024 by rpki-client on console-ams.rpki-client.org