Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/88b4841e83ef0c4790d299cc3b4d892b600fe6c6.roa
File: 88b4841e83ef0c4790d299cc3b4d892b600fe6c6.roa (raw, json)
Hash identifier: 5YdFiyrhCa4yoUOR11aZUVS4uuOpk2RsN0dR+DHpzyA=
Subject key identifier: CC:04:B7:DA:0E:D9:8E:47:1C:1B:FF:44:2B:94:02:51:54:85:AF:4C
Certificate issuer: /CN=8ebd47df25f607dc995b4e3a3ea884d7c63cc4e3
Certificate serial: 06DEC2
Authority key identifier: 02:40:26:15:0F:AE:3C:E9:F4:0C:2A:EC:B0:27:F1:20:25:04:5F:21
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ebd47df25f607dc995b4e3a3ea884d7c63cc4e3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/88b4841e83ef0c4790d299cc3b4d892b600fe6c6.roa
Signing time: Fri 23 Feb 2024 14:34:44 +0000
ROA not before: Fri 23 Feb 2024 14:34:42 +0000
ROA not after: Fri 23 Feb 2029 14:34:42 +0000
asID: 264701
IP address blocks: 168.232.249.0/24 maxlen: 24
168.232.250.0/24 maxlen: 24
168.232.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450242 (0x6dec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ebd47df25f607dc995b4e3a3ea884d7c63cc4e3
Validity
Not Before: Feb 23 14:34:42 2024 GMT
Not After : Feb 23 14:34:42 2029 GMT
Subject: CN=88b4841e83ef0c4790d299cc3b4d892b600fe6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:63:6c:cd:41:ef:0f:8c:f2:5b:36:c7:40:08:
e8:a6:a5:b6:34:cd:02:74:a2:8f:08:68:3c:ba:5e:
b7:1a:6f:30:a1:db:06:24:e6:0d:01:40:09:11:8c:
bc:b7:ad:85:1b:f5:0a:03:ed:00:0c:60:85:40:bd:
fd:d4:8a:ec:14:56:05:5d:c3:f0:0f:5d:08:4b:9a:
ef:70:50:be:74:0c:8c:bc:25:e3:13:af:1b:00:1e:
61:0e:6b:c1:5c:48:b3:c6:98:e5:ab:8d:93:02:f9:
bc:fc:b4:4d:85:e2:83:65:8c:ed:53:65:19:63:af:
40:f0:7d:63:a8:d5:51:8e:c8:a9:4f:25:f5:71:f5:
1b:c5:b2:8f:09:33:b5:e9:fe:fe:19:a3:3e:46:1f:
7a:03:5b:ff:bb:f7:4d:4a:97:d5:48:c7:f0:e8:3e:
43:74:fc:3e:6a:77:d6:89:66:62:82:0a:bd:f1:9b:
63:87:d5:12:1e:0c:f8:ad:a2:9d:d0:aa:e1:2e:01:
ea:25:f9:fc:e3:86:67:a5:15:b3:a4:e9:e1:fc:e0:
a7:e0:65:ad:ac:43:87:1b:0e:51:52:14:79:31:82:
ad:b9:af:ef:9f:05:cd:e1:22:f3:ce:91:cc:64:ac:
29:0e:dd:11:96:c9:62:10:fb:84:2f:ea:37:1a:27:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:04:B7:DA:0E:D9:8E:47:1C:1B:FF:44:2B:94:02:51:54:85:AF:4C
X509v3 Authority Key Identifier:
keyid:02:40:26:15:0F:AE:3C:E9:F4:0C:2A:EC:B0:27:F1:20:25:04:5F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ebd47df25f607dc995b4e3a3ea884d7c63cc4e3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/88b4841e83ef0c4790d299cc3b4d892b600fe6c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/8ebd47df25f607dc995b4e3a3ea884d7c63cc4e3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.249.0-168.232.251.255
Signature Algorithm: sha256WithRSAEncryption
18:1e:df:ce:96:3d:0c:c6:f3:59:2f:38:bc:25:9e:9a:43:ac:
3c:e5:d4:44:62:5b:06:a1:6d:fb:2b:a0:be:ed:1b:7a:0d:a2:
45:d7:71:b0:01:49:5e:ed:e6:c6:7f:5f:4d:d9:97:4a:e1:9a:
88:7a:ab:9b:e9:53:fa:77:ce:3e:12:6c:57:03:6d:1f:b5:86:
1c:87:d3:05:7b:f2:ee:27:51:ed:77:87:67:6f:5f:2c:f6:f3:
a3:4e:6e:91:ee:95:b8:fd:48:09:46:19:78:d2:d1:a8:18:f7:
0c:f0:72:73:37:a0:60:7b:01:39:ca:52:b7:17:b0:dd:a8:f1:
44:60:ff:b1:01:74:64:d1:1f:40:eb:3e:75:23:bc:d8:d9:84:
8c:c6:8c:58:d0:fb:c0:e9:ac:0a:05:73:5e:dd:f5:ec:9f:de:
ed:ec:b5:1b:56:d6:44:41:7f:c0:d4:ae:c4:bb:a1:d4:57:19:
94:1f:8b:8e:dc:a7:f8:4a:4b:72:a0:17:cf:ec:54:a1:9a:68:
4d:ab:d1:8c:8a:6e:3b:95:14:64:8a:f5:46:dd:e0:3a:c7:82:
58:3e:5b:aa:66:b1:b0:83:fb:7a:d0:1b:95:11:77:52:4b:ca:
11:72:82:86:b9:4f:a3:80:11:45:18:a1:62:40:0a:42:06:45:
1f:d5:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org