Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/f7fd002b583d81ede55ac6e1f8291e1776ce9bb6.roa
File: f7fd002b583d81ede55ac6e1f8291e1776ce9bb6.roa (raw, json)
Hash identifier: lrb+/x2EP9S6T1ftoH+5M6k/zsKKuRIeMSNxSeAXIdg=
Subject key identifier: D6:0E:78:99:4D:16:45:05:64:D5:70:4F:95:76:76:01:62:AB:35:9B
Certificate issuer: /CN=d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18
Certificate serial: 1B58CA
Authority key identifier: 53:64:0D:CF:4A:3B:80:76:09:CE:5A:E2:1E:06:95:18:BD:14:C8:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/f7fd002b583d81ede55ac6e1f8291e1776ce9bb6.roa
Signing time: Sun 31 Mar 2024 08:30:00 +0000
ROA not before: Sun 31 Mar 2024 08:30:00 +0000
ROA not after: Tue 31 Mar 2026 08:30:00 +0000
asID: 28005
IP address blocks: 168.121.128.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1792202 (0x1b58ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18
Validity
Not Before: Mar 31 08:30:00 2024 GMT
Not After : Mar 31 08:30:00 2026 GMT
Subject: CN=f7fd002b583d81ede55ac6e1f8291e1776ce9bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:0a:2d:e1:a1:82:3c:84:d0:e0:fa:9d:aa:
b4:12:ca:1b:2c:5c:8f:ff:76:09:fb:c6:27:48:a8:
ed:3f:d0:7a:20:6a:aa:93:1b:4f:f4:56:ed:c3:95:
e5:a2:eb:6f:bb:d6:93:44:16:bc:60:23:3d:43:17:
8d:fc:21:f3:56:c6:fc:05:17:ee:43:62:5c:d8:8e:
be:7f:e1:95:a7:b1:76:c1:d8:5e:aa:23:41:e5:60:
8f:c1:34:d1:16:8f:c3:a5:01:bb:f6:94:e1:48:75:
26:8a:a6:7f:e0:3d:03:5b:30:f0:a7:34:85:20:97:
4e:6f:f3:80:02:f4:db:7e:bf:5e:9f:0e:ed:44:57:
e8:54:18:8b:60:92:e5:b5:f1:b3:de:e2:11:1d:a3:
54:44:c5:d6:61:94:5a:8c:d2:44:4b:07:db:f3:45:
c9:24:42:7a:cd:8e:2b:de:23:c5:69:11:5f:ce:c3:
b5:21:4e:93:5a:dd:6f:17:af:3b:75:35:81:c2:37:
b7:1a:2d:af:60:c2:6e:cb:90:71:c9:eb:a1:d0:24:
24:f4:88:2a:83:a9:aa:e2:76:64:43:eb:85:ed:c9:
21:f4:b4:97:5f:be:92:d8:19:f1:23:2c:a0:54:56:
a7:29:59:2b:68:a6:f3:37:60:80:e2:3e:f7:2b:9b:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:0E:78:99:4D:16:45:05:64:D5:70:4F:95:76:76:01:62:AB:35:9B
X509v3 Authority Key Identifier:
keyid:53:64:0D:CF:4A:3B:80:76:09:CE:5A:E2:1E:06:95:18:BD:14:C8:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/f7fd002b583d81ede55ac6e1f8291e1776ce9bb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/93f4ac0f-16d0-4b72-a294-a003b518b791/d7e93f6af1f07bb8ddc6b073ba6a351e401c4f18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.128.0/22
Signature Algorithm: sha256WithRSAEncryption
23:19:2c:e2:aa:ee:ac:1c:61:9a:88:bc:be:4d:ad:88:9a:d0:
e7:bb:9a:94:e1:db:9c:d8:b8:04:4b:bc:42:b7:37:bd:6c:23:
bf:09:92:2c:98:31:3c:b3:ae:62:86:b8:3a:73:f6:5e:49:0f:
03:ab:ab:30:73:96:20:8d:e2:d0:16:80:fe:b3:2a:a5:37:6a:
b1:68:23:c2:f1:e3:e3:fc:14:e3:42:8c:4a:6c:db:a0:07:34:
b3:35:58:7e:75:01:14:88:82:26:f6:02:e1:59:2c:09:5c:83:
3e:3d:5c:55:5e:dd:2e:6d:80:cb:7c:cb:67:2f:4d:57:49:90:
4f:b5:34:a4:83:70:02:ba:49:fd:54:c7:de:8a:fc:cc:41:89:
96:32:9b:20:cf:ab:b0:e3:9f:5d:f8:b2:63:0a:e0:44:ea:4b:
d9:7c:ca:71:6b:93:46:6a:e2:4f:4c:65:2c:97:d9:9c:37:83:
ca:87:1e:02:ff:6c:7f:8b:ed:7c:27:fd:69:d9:9d:a0:4a:64:
b5:8d:85:93:17:e1:73:e4:0d:90:2d:25:2b:83:2c:b9:34:fe:
9c:96:b7:64:8e:d0:e6:3f:9e:16:1b:9e:59:54:ac:0d:4e:57:
3a:0c:b5:ea:e3:2b:b9:9d:45:13:bb:bc:66:84:9f:c0:3a:36:
91:77:1e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org