Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91e73b27-6786-4414-9f1f-73245c255ec9/1ba318b67432f5f355cbeae9513523eb1b6f6d2a.roa
File: 1ba318b67432f5f355cbeae9513523eb1b6f6d2a.roa (raw, json)
Hash identifier: rtqX0rUsQGr22qrVmEB3XYFky442BA4zB3IKOiegzVY=
Subject key identifier: E1:E9:FC:50:F9:87:DE:5D:05:DC:71:52:61:79:66:10:B8:07:A2:0E
Certificate issuer: /CN=8009f9ca0e90186684c967a6b8c12708f8ab41b2
Certificate serial: 0E3A25
Authority key identifier: DD:8D:9C:37:DC:EE:DF:16:0F:72:B9:5A:01:B3:E3:96:2F:B5:CD:5B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8009f9ca0e90186684c967a6b8c12708f8ab41b2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91e73b27-6786-4414-9f1f-73245c255ec9/1ba318b67432f5f355cbeae9513523eb1b6f6d2a.roa
Signing time: Wed 24 Mar 2021 14:47:34 +0000
ROA not before: Wed 24 Mar 2021 14:47:34 +0000
ROA not after: Tue 24 Mar 2026 14:47:34 +0000
asID: 263767
IP address blocks: 167.250.49.0/24 maxlen: 24
167.250.50.0/24 maxlen: 24
167.250.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932389 (0xe3a25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8009f9ca0e90186684c967a6b8c12708f8ab41b2
Validity
Not Before: Mar 24 14:47:34 2021 GMT
Not After : Mar 24 14:47:34 2026 GMT
Subject: CN=1ba318b67432f5f355cbeae9513523eb1b6f6d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d5:bc:78:5a:b1:fe:3a:7a:ba:48:c1:27:ee:
73:2f:4f:a7:f1:3c:b7:be:1e:98:50:2a:6b:00:8c:
53:ad:59:ec:f0:46:eb:4f:73:d8:1c:7b:a4:25:d1:
5c:a7:47:9c:06:3f:6b:25:74:03:94:ea:f5:ff:85:
c7:ab:1f:b5:04:3a:0e:4e:75:65:61:39:f7:48:b4:
31:43:35:a3:06:17:76:18:12:03:46:56:a0:d7:93:
52:26:3e:71:06:03:30:62:20:16:f9:a2:d2:e0:69:
27:d9:b8:69:c2:4d:7f:a6:64:d7:e5:eb:9c:be:7b:
a5:8f:fa:88:37:15:56:19:aa:3c:42:48:d0:22:cf:
12:26:fd:ff:22:87:85:18:9b:e8:5d:68:a8:24:93:
d8:b0:2b:e1:4a:70:07:07:bd:c4:b3:34:a4:29:bd:
0d:3a:c0:0b:0f:25:45:63:fb:39:37:31:f3:19:9c:
e0:85:74:19:e7:0b:cb:39:6c:11:d0:cf:8f:04:92:
d2:6d:e6:ae:14:c5:d7:c9:43:4b:d6:59:94:49:65:
e9:58:d9:24:d7:38:1b:ad:3d:bd:de:af:ab:f0:a0:
9a:dd:39:e7:6a:e2:58:3b:9d:f0:48:c6:44:d6:6a:
40:e9:3e:78:6f:90:f1:8b:ea:8d:08:74:eb:10:06:
b7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:FC:50:F9:87:DE:5D:05:DC:71:52:61:79:66:10:B8:07:A2:0E
X509v3 Authority Key Identifier:
keyid:DD:8D:9C:37:DC:EE:DF:16:0F:72:B9:5A:01:B3:E3:96:2F:B5:CD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8009f9ca0e90186684c967a6b8c12708f8ab41b2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91e73b27-6786-4414-9f1f-73245c255ec9/1ba318b67432f5f355cbeae9513523eb1b6f6d2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91e73b27-6786-4414-9f1f-73245c255ec9/8009f9ca0e90186684c967a6b8c12708f8ab41b2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.49.0-167.250.51.255
Signature Algorithm: sha256WithRSAEncryption
65:96:67:53:ea:cc:c9:aa:4d:e8:d3:b4:70:3e:b0:0f:da:f6:
34:eb:51:c3:42:52:ba:7c:49:5f:2f:6f:4d:c2:c0:be:f8:e3:
c3:e2:10:06:e8:bb:54:25:5b:c0:4e:53:8f:7e:76:0b:fd:37:
4f:8b:c3:09:46:04:f0:3c:6a:52:a4:ed:25:67:5e:19:00:ab:
fe:7e:17:b4:90:9f:4d:89:c1:da:d8:29:42:0e:f3:53:6c:79:
e5:90:68:5e:54:4a:d0:b1:1c:5e:22:bc:b7:1e:ac:87:f5:0f:
74:d2:b8:08:44:47:35:86:06:a6:01:21:90:a4:6f:ce:45:a2:
d3:10:62:01:11:59:98:80:c3:fa:98:2c:13:e5:07:72:c6:10:
a6:f5:77:90:e5:41:de:65:33:36:18:c2:bc:b1:f0:e8:e9:54:
78:b6:d8:94:2d:bd:1f:a2:b7:9f:4c:ef:81:58:51:d2:39:4e:
54:2f:47:17:a4:2f:6c:c8:48:09:64:ec:c0:7d:9e:67:08:cf:
37:34:f7:cd:38:8c:ed:11:51:63:32:46:c3:e1:5f:1e:1b:4c:
e3:f5:e4:98:ce:ba:32:e8:39:f3:b7:df:80:7d:a8:73:5d:dc:
81:58:d6:7f:38:dc:78:6b:ae:e4:59:90:99:26:08:13:f7:96:
b1:61:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org