Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/96d9177d63dffacf017d5a069a8406716440f4d2.roa
File: 96d9177d63dffacf017d5a069a8406716440f4d2.roa (raw, json)
Hash identifier: Cvqudbadzvi/4QaJgEUMPh70tuxNFKEIElByJEqLhcw=
Subject key identifier: 13:65:72:57:16:2C:57:3B:D9:10:D0:0A:B0:A7:B5:84:DF:99:2D:03
Certificate issuer: /CN=f4d58c84621ad64623cd4679aa4e983e69c0c959
Certificate serial: 0EF4F3
Authority key identifier: 45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4d58c84621ad64623cd4679aa4e983e69c0c959.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/96d9177d63dffacf017d5a069a8406716440f4d2.roa
Signing time: Fri 15 Dec 2023 03:32:00 +0000
ROA not before: Fri 15 Dec 2023 03:31:59 +0000
ROA not after: Mon 15 Dec 2025 03:31:59 +0000
asID: 3816
IP address blocks: 168.228.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 980211 (0xef4f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d58c84621ad64623cd4679aa4e983e69c0c959
Validity
Not Before: Dec 15 03:31:59 2023 GMT
Not After : Dec 15 03:31:59 2025 GMT
Subject: CN=96d9177d63dffacf017d5a069a8406716440f4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e3:05:3f:42:ec:01:65:72:a5:72:1e:1c:52:
ef:42:b6:b3:3f:57:86:be:f1:06:08:23:f1:99:56:
aa:3c:cf:6f:7d:17:d6:c5:cb:7e:f0:94:47:6e:a0:
cb:50:e2:19:96:b8:5a:87:0e:20:da:5d:84:eb:de:
aa:e5:27:c2:c2:3e:e8:b2:da:ab:2c:bc:8f:47:eb:
b4:ae:a6:0a:d4:c6:b7:cc:5b:ea:40:ba:a0:22:cb:
19:69:c0:50:fb:df:c1:51:ab:79:13:44:e7:0f:01:
c0:2d:0c:cf:e4:6c:e9:64:9b:db:94:f0:17:39:06:
1e:73:4d:5a:42:06:6b:0d:e9:de:11:06:8c:46:83:
ce:33:05:7d:7e:d7:84:79:dd:0e:6d:17:ae:c5:c3:
09:4b:e6:59:fc:09:b4:c2:1c:28:ef:87:a3:e4:f4:
e6:1d:4b:50:32:d2:fa:dc:84:98:f7:cd:6a:af:1d:
76:70:6b:0f:af:10:10:65:c6:a6:10:9c:4d:36:7f:
31:b2:a6:2c:85:fb:92:49:31:bf:52:b8:a6:03:f5:
f4:68:b9:96:26:62:4e:d1:7a:b6:b9:22:c4:17:0b:
d4:2a:59:6b:17:5a:40:f7:e7:ad:60:7f:97:e1:dc:
91:df:89:89:ba:86:3a:58:f2:3a:c7:a2:fa:58:a6:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:65:72:57:16:2C:57:3B:D9:10:D0:0A:B0:A7:B5:84:DF:99:2D:03
X509v3 Authority Key Identifier:
keyid:45:42:12:0F:D0:AB:E1:79:D6:C9:E8:E4:F9:35:D5:37:89:97:CF:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4d58c84621ad64623cd4679aa4e983e69c0c959.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/96d9177d63dffacf017d5a069a8406716440f4d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/92164dfe-0588-4e9d-957c-f518707a5e35/f4d58c84621ad64623cd4679aa4e983e69c0c959.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.111.0/24
Signature Algorithm: sha256WithRSAEncryption
56:08:f6:b2:8b:c1:d2:d3:5d:95:66:ad:78:a4:e0:e6:5f:83:
7f:c7:1d:35:f0:ba:47:f0:e5:2d:9c:c8:6a:62:69:58:63:87:
5b:a1:c2:aa:dc:61:8d:22:87:32:2d:77:23:bc:8e:39:e7:f1:
0f:7e:43:53:e4:5e:f0:8b:ce:08:7e:89:19:87:c6:bd:6d:92:
fa:ac:b1:16:a6:00:d0:d4:77:25:31:66:c0:86:67:24:7f:48:
7c:24:d1:43:01:60:4a:6d:c3:b9:33:8d:17:78:fb:de:a4:49:
8d:62:76:bd:8e:44:81:8f:55:66:8b:87:b0:11:c4:f8:06:aa:
ae:9a:e4:13:07:97:9b:50:4e:f9:01:ff:60:43:1a:30:bb:4a:
db:bb:ec:5f:cd:a3:2e:91:7e:50:7c:66:61:06:ac:d7:65:3a:
a7:10:66:68:ea:a5:ac:99:6e:93:6c:95:a9:f2:11:e7:95:2e:
c8:3b:1b:d3:ae:6e:83:dd:b6:34:e5:b1:c0:9f:a3:31:01:5d:
3d:20:fc:de:7c:9f:ab:e9:c2:83:a8:50:79:0f:87:64:0f:25:
5a:91:e0:bb:d8:8c:25:30:38:ab:8f:b0:49:c3:1e:ca:29:27:
d9:78:d2:16:3c:b6:fc:9f:bc:61:17:01:54:e5:17:ad:a1:3e:
37:9b:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org