Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/949de2ff-a633-4e21-bdc3-0ee51d8891ec/68ed37b10c65d21284b50f2602914a746d15213e.roa
File: 68ed37b10c65d21284b50f2602914a746d15213e.roa (raw, json)
Hash identifier: Uywm3uViJVW0ODi0nSA33lA5+9xQZIWCuA7Ugs2/jKo=
Subject key identifier: 27:7C:10:CF:67:00:E6:03:EB:8C:3D:25:6A:DA:3F:CF:12:7C:04:DD
Certificate issuer: /CN=c21d37133f3c6327e191ac06cc2a2b23c0979dfd
Certificate serial: 08EE
Authority key identifier: D8:61:E4:48:32:89:6E:2F:06:22:8F:15:4F:44:BE:24:FB:CA:C9:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c21d37133f3c6327e191ac06cc2a2b23c0979dfd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/949de2ff-a633-4e21-bdc3-0ee51d8891ec/68ed37b10c65d21284b50f2602914a746d15213e.roa
Signing time: Thu 20 Apr 2023 01:03:59 +0000
ROA not before: Wed 19 Apr 2023 01:03:58 +0000
ROA not after: Sun 20 Apr 2025 01:03:58 +0000
asID: 14259
IP address blocks: 170.239.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2286 (0x8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c21d37133f3c6327e191ac06cc2a2b23c0979dfd
Validity
Not Before: Apr 19 01:03:58 2023 GMT
Not After : Apr 20 01:03:58 2025 GMT
Subject: CN=68ed37b10c65d21284b50f2602914a746d15213e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:7f:7e:ed:7c:0b:02:58:dd:b2:70:9f:5f:
de:1b:65:93:3a:4d:e7:34:4a:a4:fa:20:39:69:c6:
bf:53:bf:a0:ac:92:03:1f:61:1a:71:8f:a2:96:78:
89:3c:38:fa:21:57:23:0b:6d:39:83:3e:8f:28:4b:
a4:89:2b:21:e9:2b:9e:2d:ca:8c:93:67:1a:e0:6f:
9b:9c:f3:4c:33:5b:ac:ca:3b:23:dd:54:54:fe:58:
64:68:f9:62:35:7c:eb:f4:ee:e6:0c:26:01:ca:5e:
8a:ab:d4:9d:61:14:bd:40:de:0b:49:5b:66:5f:e4:
58:5e:1b:63:75:f0:80:81:1d:d7:30:f8:f1:85:1b:
22:ff:6f:06:0d:30:80:03:0c:b3:49:0f:c7:be:a8:
34:fe:5d:8c:88:e9:c4:ec:70:94:b0:fc:50:1d:c8:
85:70:f3:8f:17:a8:ac:a0:12:c3:ad:1a:dc:3a:21:
bb:ea:8e:dd:57:48:39:89:06:78:9c:4f:94:b5:81:
98:0c:8b:49:81:cd:62:bd:48:18:c5:0d:50:87:13:
f3:27:2d:47:25:68:b1:37:70:7b:6d:b3:6a:8f:a2:
32:6b:b1:8f:1c:7c:97:9b:68:f7:d7:f1:89:d4:ba:
b0:f7:da:20:94:ee:c3:4f:81:9f:ba:58:9e:e8:10:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7C:10:CF:67:00:E6:03:EB:8C:3D:25:6A:DA:3F:CF:12:7C:04:DD
X509v3 Authority Key Identifier:
keyid:D8:61:E4:48:32:89:6E:2F:06:22:8F:15:4F:44:BE:24:FB:CA:C9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c21d37133f3c6327e191ac06cc2a2b23c0979dfd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/949de2ff-a633-4e21-bdc3-0ee51d8891ec/68ed37b10c65d21284b50f2602914a746d15213e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/949de2ff-a633-4e21-bdc3-0ee51d8891ec/c21d37133f3c6327e191ac06cc2a2b23c0979dfd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.239.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:56:9e:8b:a3:82:d1:9d:1b:91:87:dc:03:a5:25:20:96:17:
8d:71:00:2c:33:e8:9b:bc:20:98:5d:85:13:ca:5f:ff:ad:4b:
c5:b7:7a:f0:81:7e:00:24:e5:62:25:cd:27:c0:2d:c5:b8:06:
62:87:a3:da:b4:d2:d3:62:97:01:62:75:e1:d5:d4:31:d7:b8:
3c:b8:b5:37:d9:d5:0d:e6:3b:41:2f:42:ed:75:c9:45:fb:96:
f1:6d:cc:e7:d7:9f:26:34:7b:01:39:57:09:74:51:e8:00:3f:
34:5a:28:97:3d:e5:09:bf:d7:5a:f3:4f:50:dc:ca:db:fd:1f:
81:d3:27:65:e0:d2:8b:82:21:fc:1a:46:ea:02:32:98:ac:17:
c8:8f:31:b0:2c:0b:d4:71:c6:ad:99:bd:cb:0d:4b:14:72:8d:
0e:9c:f1:b5:8d:9e:7d:45:de:6f:22:69:18:d3:d7:15:22:23:
5a:85:86:cb:f0:7c:ad:ac:25:68:55:93:36:1f:12:df:3f:30:
ae:92:2a:6b:85:28:2c:77:75:de:c7:f1:3d:86:7f:35:c4:78:
79:75:d5:5a:39:da:92:65:a4:31:42:6f:75:4c:fb:6c:9a:18:
4a:37:a1:9f:c0:a6:56:c0:44:93:f2:bd:55:ff:c4:e0:6c:c0:
38:07:4b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:24 2024 by rpki-client on console-fra.rpki-client.org