Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/a75b29aa84f2172799d7a31fd02741f1179eeed9.roa
File: a75b29aa84f2172799d7a31fd02741f1179eeed9.roa (raw, json)
Hash identifier: E6+JfR84GsSkxD0NDSRTiFt1vcfpho9IwIt1CYdUCqU=
Subject key identifier: 21:76:AE:36:90:9E:07:42:31:98:CD:ED:88:CE:01:98:40:3A:2E:A3
Certificate issuer: /CN=ff1cca9f77f27742b485aae3810060fa869e1fa9
Certificate serial: 0D4311
Authority key identifier: F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff1cca9f77f27742b485aae3810060fa869e1fa9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/a75b29aa84f2172799d7a31fd02741f1179eeed9.roa
Signing time: Wed 24 Mar 2021 14:36:13 +0000
ROA not before: Wed 24 Mar 2021 14:36:13 +0000
ROA not after: Tue 24 Mar 2026 14:36:13 +0000
asID: 52330
IP address blocks: 168.227.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869137 (0xd4311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1cca9f77f27742b485aae3810060fa869e1fa9
Validity
Not Before: Mar 24 14:36:13 2021 GMT
Not After : Mar 24 14:36:13 2026 GMT
Subject: CN=a75b29aa84f2172799d7a31fd02741f1179eeed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:de:16:40:81:b4:86:13:de:06:ca:4a:39:
a5:12:6d:1d:af:3d:bd:f5:3b:bd:aa:cd:86:fe:4b:
64:85:8d:9c:da:cb:10:6c:d3:32:43:f5:82:f1:95:
d3:f2:f2:5d:a6:16:ae:67:1c:e6:67:30:c0:7c:3a:
6f:78:29:f5:e1:94:fd:6c:6e:0a:76:16:8a:71:9e:
87:59:be:e8:1f:63:cb:2a:ca:4b:7d:b9:69:84:80:
be:aa:1c:1e:d9:1f:b6:e5:27:a8:8e:06:38:6d:9e:
54:5e:6d:b6:fd:0e:cd:24:e9:1d:fb:35:5d:13:ce:
c8:7d:38:75:9b:23:ca:fa:01:d8:44:05:02:76:a1:
a8:11:1e:f1:24:61:d8:89:72:f1:c6:e4:ea:4b:ca:
0e:9c:50:53:70:fb:24:73:c1:01:41:b4:f7:3b:5d:
79:f4:e4:e9:74:ba:43:f7:78:77:0e:30:b3:be:f6:
7a:15:15:e4:b3:db:23:3a:d5:dc:62:c7:a4:41:95:
c1:cc:95:ce:70:08:a2:ed:09:2a:2d:89:a1:25:c0:
62:a1:4a:ab:77:df:d9:a7:76:fd:69:ee:72:29:97:
b2:39:fe:35:ae:3f:b5:04:f9:ae:97:6f:42:82:44:
3f:f9:20:c2:d0:36:11:d5:bc:95:af:ac:11:87:fd:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:76:AE:36:90:9E:07:42:31:98:CD:ED:88:CE:01:98:40:3A:2E:A3
X509v3 Authority Key Identifier:
keyid:F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff1cca9f77f27742b485aae3810060fa869e1fa9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/a75b29aa84f2172799d7a31fd02741f1179eeed9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/ff1cca9f77f27742b485aae3810060fa869e1fa9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.104.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:51:98:2a:20:7f:96:09:67:34:30:30:ef:6f:f7:c5:bd:ae:
74:e8:5e:f5:de:96:cb:47:4b:43:35:8d:a2:ff:50:eb:98:78:
2c:ed:eb:24:a7:38:04:ad:a4:66:6a:b6:b8:f9:aa:81:b1:d4:
d1:0f:9c:42:8e:1f:20:c9:dd:6c:39:b5:3d:16:87:14:5e:0d:
03:70:05:3d:aa:55:8e:85:74:05:2c:bb:eb:9a:55:ec:fb:81:
3a:b6:44:10:91:6b:a0:1e:0a:27:63:b3:bd:72:20:5e:bf:a0:
28:83:bc:8c:7b:9c:e3:cd:53:7c:91:c5:23:10:54:d3:4d:fa:
57:72:41:a9:11:3c:fc:37:84:60:51:88:1b:6c:a4:d1:5b:d4:
1d:0f:2a:d1:1d:16:ee:42:fb:72:8f:77:95:af:d4:d5:01:fa:
ab:22:7d:03:d8:97:0a:56:af:74:5d:79:da:23:90:7f:29:0e:
3f:73:76:b4:43:3d:99:a5:8c:b8:60:f7:3e:09:2f:4a:2f:f0:
52:e2:51:a7:c5:ff:81:9a:f0:90:90:ef:65:e0:57:a3:af:11:
51:29:37:e6:23:10:57:ee:09:ef:ca:65:ff:85:f0:9e:a4:c8:
78:9f:97:48:ed:a9:ab:f2:60:c8:58:d6:bd:b1:73:8e:e2:83:
10:49:d0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org