Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/ab2e3f70707fb27a30d23f2ac40cccc5ad06db78.roa
File: ab2e3f70707fb27a30d23f2ac40cccc5ad06db78.roa (raw, json)
Hash identifier: 7cy+9uq4IFm8YOL595yftGD4d9H0jn8RqJiBbRw6MUg=
Subject key identifier: FB:3A:F6:9E:B0:C1:5A:70:1D:2C:1D:57:0F:3A:94:F0:CF:2C:C7:0B
Certificate issuer: /CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Certificate serial: 24670D
Authority key identifier: 65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/ab2e3f70707fb27a30d23f2ac40cccc5ad06db78.roa
Signing time: Fri 29 Sep 2023 08:30:05 +0000
ROA not before: Thu 28 Sep 2023 08:30:05 +0000
ROA not after: Sat 27 Sep 2025 08:30:05 +0000
asID: 3549
IP address blocks: 170.83.216.0/22 maxlen: 24
2803:b2c0::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2385677 (0x24670d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Validity
Not Before: Sep 28 08:30:05 2023 GMT
Not After : Sep 27 08:30:05 2025 GMT
Subject: CN=ab2e3f70707fb27a30d23f2ac40cccc5ad06db78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ac:78:df:65:1a:fb:91:b2:a6:10:f2:44:54:
39:9b:94:27:da:96:87:ab:2f:07:96:04:6b:96:86:
93:22:b4:2d:1f:47:bc:18:18:3b:7e:54:56:0a:c3:
4c:90:b3:a0:b8:b5:07:e2:99:34:96:a6:7e:0e:dc:
d6:0b:78:87:26:68:d0:5e:42:58:d5:92:77:df:7e:
05:89:9b:f1:d2:91:c3:3b:87:b4:cf:1d:3a:cb:f1:
dd:53:d4:71:48:aa:8e:8f:18:42:2d:49:a9:a0:fd:
30:29:c0:e1:f3:08:cc:b8:03:9c:d7:74:6d:22:5a:
d5:aa:ee:50:8b:d0:cf:14:9d:a7:98:c7:3e:46:df:
0d:69:6e:05:ef:1c:13:19:fb:bd:dd:48:1b:84:33:
30:e4:e1:5d:58:51:7a:50:87:25:2a:f4:29:48:ce:
9c:3a:89:24:c4:70:53:84:fc:1a:c7:27:84:a7:84:
d6:34:d4:a9:31:18:56:ad:89:0a:17:19:8c:52:3f:
ad:f4:d9:68:9b:d0:a5:9f:cb:aa:8a:cc:d3:c3:20:
dc:44:96:5e:1b:6e:cc:62:fd:08:69:93:6e:fa:5b:
df:2e:4d:57:ff:af:70:36:52:53:2f:cf:24:24:42:
60:3b:4d:89:81:c0:04:8e:1d:ae:26:c2:75:1d:dc:
94:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:F6:9E:B0:C1:5A:70:1D:2C:1D:57:0F:3A:94:F0:CF:2C:C7:0B
X509v3 Authority Key Identifier:
keyid:65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/ab2e3f70707fb27a30d23f2ac40cccc5ad06db78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/f4a582f6c7807f5fdd31b69ae270f85d00c39706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.216.0/22
IPv6:
2803:b2c0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:08:3e:51:01:8b:09:a2:80:95:47:6d:eb:16:6c:dc:56:6a:
ae:88:81:16:63:bf:38:b5:68:53:b5:d3:b8:52:ec:30:d0:6a:
a6:a1:37:fd:58:20:d6:fd:1f:9f:a6:b4:e1:15:76:be:27:41:
16:44:f8:b4:e9:7d:65:b6:a6:c9:b8:13:a9:70:13:ae:72:5e:
6f:39:27:44:9b:7e:ee:27:32:43:e8:09:f8:a8:ad:b9:89:1a:
ed:c4:8e:bf:48:9c:c3:a4:ab:9c:05:d1:e6:ca:ea:a0:36:c9:
40:42:e9:71:76:a4:73:4a:08:68:fc:77:3a:21:de:ef:b0:95:
98:eb:cc:ac:fa:72:93:8b:c4:86:58:21:2d:b9:b3:8b:54:90:
a1:27:92:30:cc:28:b6:51:37:11:bb:a7:01:2a:6e:35:79:3f:
0a:5b:87:5f:0e:4e:6c:ef:1f:a2:6a:d3:18:5d:ef:59:f9:ea:
b4:81:62:89:6c:29:6e:c1:79:2d:cf:1b:d3:64:4e:80:a0:64:
1c:d4:5e:59:99:dd:f7:da:43:c2:e5:bb:5a:4e:c6:cf:63:bc:
eb:31:d5:38:83:95:4e:d6:64:d9:c2:cd:0b:9c:b0:ef:04:45:
e4:5f:4f:2c:d9:56:12:e9:15:8f:b7:53:58:f0:71:86:2c:8a:
2c:7b:b6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org