Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/efdd240a2262559237c8606e68cce2159ef6e1b1.roa
File: efdd240a2262559237c8606e68cce2159ef6e1b1.roa (raw, json)
Hash identifier: Mc4Io+D12lpaswAD6Ise2LK5pxuDL55bo2i9Ps6KgSE=
Subject key identifier: D3:18:38:4F:A0:E2:57:72:71:CC:34:F2:D1:15:03:3D:AD:86:F3:2D
Certificate issuer: /CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Certificate serial: 0D7C6A
Authority key identifier: 65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/efdd240a2262559237c8606e68cce2159ef6e1b1.roa
Signing time: Wed 24 Mar 2021 14:40:01 +0000
ROA not before: Wed 24 Mar 2021 14:39:56 +0000
ROA not after: Tue 24 Mar 2026 14:39:56 +0000
asID: 27947
IP address blocks: 170.83.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 883818 (0xd7c6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a582f6c7807f5fdd31b69ae270f85d00c39706
Validity
Not Before: Mar 24 14:39:56 2021 GMT
Not After : Mar 24 14:39:56 2026 GMT
Subject: CN=efdd240a2262559237c8606e68cce2159ef6e1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:bc:53:4a:b0:0d:bc:19:3a:87:11:1b:42:
6b:e4:00:25:8e:14:a4:25:13:b0:54:f2:22:0f:e0:
52:26:c6:80:94:b3:03:2b:6b:2d:8c:a0:eb:de:7b:
00:fa:b4:52:12:a0:3e:dc:62:2c:81:43:ee:e4:56:
67:b5:74:8b:52:f2:0a:6b:db:58:49:8b:9a:ce:ec:
8e:38:cd:d7:38:f2:c6:d7:b7:ea:8c:d6:95:66:b0:
ca:3a:fc:81:f1:13:37:d8:5a:e3:01:97:04:49:46:
dd:63:b1:b8:43:1c:b0:ca:c5:4c:a4:f5:27:09:5e:
9b:88:2a:dd:b5:55:cf:59:57:62:aa:3e:89:d3:37:
03:d2:2c:8b:23:1b:56:5d:9d:05:90:c1:98:00:e6:
ba:d0:ce:69:94:10:11:ad:e6:63:4f:24:9f:77:5d:
43:9e:15:e7:c1:3c:48:1e:6f:9c:08:95:a3:98:47:
34:0b:41:23:d9:11:25:cc:46:7b:fe:fb:13:b9:79:
06:10:62:47:fb:c3:53:fd:f6:d0:f7:a2:a1:1c:fd:
d0:d3:69:1c:f4:ac:0d:92:08:d6:88:4f:52:ab:f3:
22:20:db:90:28:2c:bc:f4:b0:eb:ff:1b:d5:db:13:
f6:d9:31:3f:6c:06:a5:18:67:1a:06:ed:a0:21:b9:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:18:38:4F:A0:E2:57:72:71:CC:34:F2:D1:15:03:3D:AD:86:F3:2D
X509v3 Authority Key Identifier:
keyid:65:0A:83:02:70:66:B1:DD:B3:AE:82:16:83:CF:34:D2:8B:74:66:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a582f6c7807f5fdd31b69ae270f85d00c39706.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/efdd240a2262559237c8606e68cce2159ef6e1b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9aebed69-30de-4262-a494-d262b33c2c9c/f4a582f6c7807f5fdd31b69ae270f85d00c39706.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.216.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:3b:8d:7f:c9:59:a4:64:a1:37:fb:8e:35:6a:a0:9c:43:cc:
1d:48:fe:03:39:c5:c9:a7:b2:ad:74:4f:18:dc:e2:5e:69:9e:
fb:f3:c0:1c:d9:a4:2a:93:de:77:e5:d2:1c:31:ab:eb:20:aa:
c2:99:09:d1:08:d1:96:9f:08:92:68:e0:bd:fa:c1:34:27:be:
76:ad:53:9c:5c:dd:07:12:8d:c6:44:a0:ae:bf:df:cd:fd:13:
f7:d3:97:82:72:21:06:ac:3c:41:10:f0:2d:47:3a:4c:fa:ae:
cd:af:2a:a4:44:73:29:5e:da:d3:1e:e7:93:c1:a8:3a:b5:ab:
96:ab:b3:c4:37:71:e3:52:0d:d2:08:8a:68:a7:26:ff:f0:a2:
96:8d:7d:38:aa:63:d1:46:58:8b:3d:49:35:95:95:90:15:c2:
99:2b:77:34:87:c5:ec:1d:54:9f:99:98:aa:d5:a6:3a:42:70:
50:50:14:76:30:35:8e:eb:94:60:43:22:ac:0a:cf:ea:76:5f:
65:5d:77:e1:1e:d7:cd:9a:95:23:07:81:b8:f1:b2:77:cc:a9:
f2:ff:58:0f:de:ae:54:c2:be:76:e3:1f:95:23:66:83:c5:b6:
7e:51:b5:b4:44:52:db:70:55:c5:90:5e:ca:a9:cf:fa:ae:5f:
c8:5e:77:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org