Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/27f6c7180dab88bd186cf45a6df8501aa396b48d.roa
File: 27f6c7180dab88bd186cf45a6df8501aa396b48d.roa (raw, json)
Hash identifier: UC5kTJAYd8iKHTqy5bfndl7HV0o7imnO3s4ofn4Qv0U=
Subject key identifier: 64:46:B9:EB:2A:78:BE:4C:5F:B3:30:30:85:48:48:93:EB:59:E4:91
Certificate issuer: /CN=7e5ad0382aaf9a61199883acec8acb56379f4413
Certificate serial: 258B6F
Authority key identifier: 13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/27f6c7180dab88bd186cf45a6df8501aa396b48d.roa
Signing time: Sun 10 Dec 2023 07:30:01 +0000
ROA not before: Sun 10 Dec 2023 07:30:01 +0000
ROA not after: Tue 09 Dec 2025 07:30:01 +0000
asID: 266776
IP address blocks: 170.78.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2460527 (0x258b6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e5ad0382aaf9a61199883acec8acb56379f4413
Validity
Not Before: Dec 10 07:30:01 2023 GMT
Not After : Dec 9 07:30:01 2025 GMT
Subject: CN=27f6c7180dab88bd186cf45a6df8501aa396b48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:29:4e:66:b5:08:56:1c:88:78:d2:87:e2:36:
8c:df:2a:c6:5e:c7:7f:f1:24:cb:54:6e:c6:69:e9:
7c:29:a3:c1:1e:1f:0e:b0:e4:74:35:3d:58:f4:b5:
8c:07:6b:64:a5:37:ae:d3:6b:c6:dd:88:2d:69:cb:
6a:0a:b7:81:58:dc:e1:e4:16:63:20:f3:99:e1:9b:
2d:27:03:13:b6:74:22:87:cc:37:be:7f:02:51:1d:
8b:da:5c:90:48:1d:17:8b:3f:2c:fc:f3:dd:94:30:
c4:21:77:95:b7:bd:1d:c8:29:f1:24:69:9d:fb:dc:
ee:76:73:14:10:da:3c:1a:d9:d0:a5:cd:20:3c:a6:
62:89:6c:4f:79:ca:26:fa:f9:af:ef:63:e5:cb:03:
0a:ba:0e:8c:2d:03:41:59:d8:ff:c7:cb:94:62:e7:
f1:36:ce:b1:f9:72:ac:1c:70:00:f3:03:0b:fa:f2:
c3:b3:7b:36:2b:b9:92:0e:e2:19:a6:28:9e:0f:1c:
a2:e7:96:b7:e0:6c:4f:a4:4c:ca:fc:c1:21:9d:38:
1a:25:0f:62:06:07:07:47:0c:77:95:b7:ae:e1:a0:
25:87:ea:0b:c9:49:50:b8:c6:18:03:6a:64:66:ec:
13:9e:e0:74:26:60:04:59:6d:6b:87:c0:69:e4:23:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:46:B9:EB:2A:78:BE:4C:5F:B3:30:30:85:48:48:93:EB:59:E4:91
X509v3 Authority Key Identifier:
keyid:13:FE:41:5F:DC:22:23:12:6B:49:06:04:C8:0F:7E:1E:EE:7F:3D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e5ad0382aaf9a61199883acec8acb56379f4413.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/27f6c7180dab88bd186cf45a6df8501aa396b48d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8e171d4c-2a98-4987-8903-3096188807f0/7e5ad0382aaf9a61199883acec8acb56379f4413.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.112.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:23:02:83:36:ef:09:d4:4d:cb:be:fd:f3:cb:cf:ae:cc:a5:
98:6c:82:41:33:85:ba:44:4c:c7:12:f8:5b:c5:be:c0:be:2d:
42:94:3d:7e:1b:ef:3e:5f:0f:cc:57:ff:2a:fe:f3:fc:3e:cd:
0a:87:50:9b:83:fe:18:19:f9:91:60:26:f2:33:89:8e:db:aa:
1e:54:22:4b:8c:4c:97:36:f7:a6:a3:77:bd:99:2b:34:3e:52:
80:dc:34:7d:7b:e6:73:dd:66:a8:1b:7c:70:55:c3:3f:ea:3c:
f9:23:ca:6f:73:2e:10:28:19:f2:e5:c6:92:5d:ba:7a:36:a1:
27:13:b6:91:9c:2b:14:53:b1:e0:75:2b:e8:7e:28:3a:67:62:
55:79:a8:97:01:92:5e:02:1b:41:d8:52:63:68:02:fa:b6:7e:
a1:df:73:bd:47:26:0e:4e:e4:0a:5a:85:94:44:4c:10:1e:0f:
96:db:d4:4b:a0:51:11:a8:5f:4e:70:83:30:05:ff:a4:cd:05:
3f:41:b9:e5:2d:76:27:11:38:32:45:64:71:a0:95:5c:06:43:
38:69:d5:89:b1:64:9b:25:08:7b:94:ec:b2:4b:3a:c4:47:cd:
df:b6:08:3d:e3:3e:d4:80:d9:9f:69:16:4c:b3:a2:43:17:f2:
af:b6:44:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:54 2024 by rpki-client on console-fra.rpki-client.org