Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9450d0b7-caac-4bd4-a517-23250bd3d509/ea26590baf4cd33936227f6dfde1f26dfa5f703a.roa
File: ea26590baf4cd33936227f6dfde1f26dfa5f703a.roa (raw, json)
Hash identifier: 6BdBgImsK+FLDmj8RGK2LO9KachSxmvFvAx1ORCtaEs=
Subject key identifier: DA:A9:A3:90:E9:CC:BB:DD:93:46:D5:92:20:16:89:E5:65:B2:8B:AF
Certificate issuer: /CN=2d7ada75860472b45a97cb9e0c6698ff1f4fb086
Certificate serial: 06414A
Authority key identifier: DB:2D:9C:F6:4E:E6:D5:B4:9A:8D:AF:E3:A1:3D:E9:0E:C4:A4:46:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d7ada75860472b45a97cb9e0c6698ff1f4fb086.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9450d0b7-caac-4bd4-a517-23250bd3d509/ea26590baf4cd33936227f6dfde1f26dfa5f703a.roa
Signing time: Thu 25 May 2023 17:32:10 +0000
ROA not before: Wed 24 May 2023 17:32:09 +0000
ROA not after: Sun 25 May 2025 17:32:09 +0000
asID: 28408
IP address blocks: 170.244.108.0/24 maxlen: 24
170.244.109.0/24 maxlen: 24
170.244.110.0/24 maxlen: 24
170.244.111.0/24 maxlen: 24
167.249.252.0/24 maxlen: 24
167.249.253.0/24 maxlen: 24
167.249.254.0/24 maxlen: 24
167.249.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 409930 (0x6414a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d7ada75860472b45a97cb9e0c6698ff1f4fb086
Validity
Not Before: May 24 17:32:09 2023 GMT
Not After : May 25 17:32:09 2025 GMT
Subject: CN=ea26590baf4cd33936227f6dfde1f26dfa5f703a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7c:da:53:88:68:0f:91:d0:c1:a2:14:59:4d:
c7:07:d1:ea:24:fc:ec:2b:4b:0b:cd:5f:52:c5:f9:
3c:ce:73:ab:9b:ee:8d:25:64:52:e1:bb:f1:52:09:
e1:90:fa:a4:af:be:33:9e:00:d3:83:29:94:1e:3d:
ac:43:58:25:a8:b4:39:c0:1c:ed:1c:b8:f2:a6:94:
d5:01:93:5f:1e:cf:1f:6d:ce:d2:ab:e2:49:31:c8:
be:cd:11:b2:e1:31:eb:b5:ad:f2:70:88:36:f9:31:
db:ea:ad:0e:2b:62:fb:c3:74:f1:d4:84:e1:18:79:
4c:98:6f:7b:d5:30:7b:07:b9:1a:6c:80:78:9c:95:
8c:dd:49:b8:78:3a:cb:a2:a7:1e:2b:87:31:51:f3:
2f:8b:33:76:b3:9b:b2:b0:b7:f9:24:38:b7:0e:99:
26:54:ba:a5:ef:47:b0:db:09:b9:d2:71:d5:5e:43:
30:0e:53:a4:e8:ba:d4:3a:d3:59:2a:ef:b8:0c:d3:
a5:18:62:ea:0a:1e:96:52:aa:df:f9:88:4d:66:05:
1c:30:01:e3:c6:5f:74:e2:ad:e3:c8:a6:7a:5b:4a:
fd:77:7d:d8:a4:0f:f7:1f:5d:41:48:8c:81:65:03:
5a:69:bb:9c:70:43:74:01:39:9d:49:e2:9f:17:fd:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A9:A3:90:E9:CC:BB:DD:93:46:D5:92:20:16:89:E5:65:B2:8B:AF
X509v3 Authority Key Identifier:
keyid:DB:2D:9C:F6:4E:E6:D5:B4:9A:8D:AF:E3:A1:3D:E9:0E:C4:A4:46:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d7ada75860472b45a97cb9e0c6698ff1f4fb086.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9450d0b7-caac-4bd4-a517-23250bd3d509/ea26590baf4cd33936227f6dfde1f26dfa5f703a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9450d0b7-caac-4bd4-a517-23250bd3d509/2d7ada75860472b45a97cb9e0c6698ff1f4fb086.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.252.0/22
170.244.108.0/22
Signature Algorithm: sha256WithRSAEncryption
55:92:25:0a:99:0f:d2:fb:42:f7:7e:fe:6d:13:11:6c:fb:1b:
7b:39:b3:db:43:48:2f:a7:74:42:48:c8:1f:28:6c:e5:78:f1:
42:d1:ba:bd:95:a3:06:fa:52:37:47:23:9c:d4:4e:97:c1:5d:
93:ee:cb:5f:e5:88:2f:a4:9b:dc:43:d8:93:66:65:19:15:a5:
5a:1d:3b:4c:8c:9c:72:c2:48:a7:cf:3c:3e:ec:0a:89:bb:a7:
45:1f:c2:43:22:45:ee:70:8f:2b:c8:8d:63:26:cd:31:d6:12:
35:cc:b5:be:f4:c7:13:37:84:f8:f2:ec:2e:63:49:fb:03:a0:
cb:fa:76:09:5e:d5:fc:e6:8b:62:7a:2a:d1:9f:a7:ce:cf:0e:
34:af:75:06:a8:ad:5d:ae:b9:3d:07:01:f6:25:80:1f:6c:fb:
3b:ec:8c:c2:cb:01:2c:66:ec:b0:b4:60:6a:0e:c6:1a:16:20:
65:f1:96:c0:01:97:76:81:3a:f2:35:90:76:09:37:25:a5:08:
70:0a:f2:ec:3b:1b:b8:b2:e6:2e:79:d3:f2:b0:7d:b0:73:a9:
5e:65:ae:7d:c0:ad:48:36:d1:48:3e:8f:a9:c9:84:63:ca:f5:
71:d8:67:54:c1:4b:fc:5d:80:e5:e5:e0:71:89:8c:18:0e:3f:
3c:b1:a0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org