Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/a037ff51a647c1b66dacab9f53475767e61933dc.roa
File: a037ff51a647c1b66dacab9f53475767e61933dc.roa (raw, json)
Hash identifier: 6qRZB2q9L7NHo43qZDRFY5RxUq3YbFYSpHjqBlp+8U4=
Subject key identifier: 4E:C9:B8:D8:8D:32:EA:01:18:BC:D7:02:38:CA:BA:53:92:7C:64:6D
Certificate issuer: /CN=fb50c890f528476e4fa2d2c2022430fcb59129e0
Certificate serial: 0258C3
Authority key identifier: 1E:4B:B1:5B:13:88:F3:E5:A5:43:14:10:40:C0:C2:63:00:DA:C8:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb50c890f528476e4fa2d2c2022430fcb59129e0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/a037ff51a647c1b66dacab9f53475767e61933dc.roa
Signing time: Tue 08 Aug 2023 09:07:33 +0000
ROA not before: Mon 07 Aug 2023 09:07:33 +0000
ROA not after: Fri 08 Aug 2025 09:07:33 +0000
asID: 45470
IP address blocks: 143.255.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153795 (0x258c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb50c890f528476e4fa2d2c2022430fcb59129e0
Validity
Not Before: Aug 7 09:07:33 2023 GMT
Not After : Aug 8 09:07:33 2025 GMT
Subject: CN=a037ff51a647c1b66dacab9f53475767e61933dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:07:bd:73:0a:33:df:ee:fe:e2:1d:b4:b6:
4a:7d:de:f2:de:12:46:45:b5:a2:e7:15:30:12:31:
2b:b9:19:a4:b6:b9:ef:f9:2d:e2:ae:da:ea:40:80:
4e:76:a3:e8:1e:5f:d6:b0:55:60:26:a9:bb:db:47:
4a:22:98:80:d4:4a:b4:91:c9:a2:70:1b:06:8d:14:
2a:65:1c:55:b3:79:15:38:7b:38:89:e9:09:3e:28:
c1:a3:2c:b0:67:8c:e5:a3:b1:be:fc:96:31:c2:cf:
70:88:0f:0c:19:50:8f:ae:c1:f2:e7:c1:f1:45:96:
0f:e9:2a:35:0b:88:6f:fa:53:51:24:68:2d:68:b5:
c6:b0:51:ea:06:a5:30:28:32:ca:f7:46:c7:54:cd:
7c:85:6e:3e:8b:64:45:2a:b1:87:8b:a1:35:c7:cc:
71:f0:f2:82:cd:1d:9f:b7:ed:ef:10:4a:21:52:df:
3c:d6:e1:7e:15:18:ac:6a:a2:e1:8b:fa:82:e7:09:
cd:80:7b:24:34:5f:a2:3e:ca:e0:fd:ea:5b:74:ed:
09:0b:4c:45:32:e5:1b:6d:ac:de:34:6d:ee:0e:18:
2f:ef:ec:7d:20:0f:8f:f7:4f:6b:78:82:19:a7:84:
a7:d4:a4:07:6f:20:0c:39:1b:11:d7:3b:b2:dc:f7:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C9:B8:D8:8D:32:EA:01:18:BC:D7:02:38:CA:BA:53:92:7C:64:6D
X509v3 Authority Key Identifier:
keyid:1E:4B:B1:5B:13:88:F3:E5:A5:43:14:10:40:C0:C2:63:00:DA:C8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb50c890f528476e4fa2d2c2022430fcb59129e0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/a037ff51a647c1b66dacab9f53475767e61933dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/fb50c890f528476e4fa2d2c2022430fcb59129e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.156.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0a:34:06:ed:c8:94:c8:34:cf:ff:b4:a7:aa:b3:3f:0f:2b:
d9:fb:15:13:5c:ac:04:5d:6d:87:52:a2:eb:bd:77:7f:7a:8a:
78:d3:a9:95:74:b7:56:60:75:86:9d:3b:9a:7e:7a:47:64:c4:
c4:7b:3d:90:e8:4a:5a:af:70:92:2d:27:0d:6a:4c:2c:41:11:
bf:aa:68:36:c3:12:86:ef:ba:05:00:fb:46:ee:0d:88:f2:28:
db:c2:5b:96:6a:aa:18:bf:6f:d6:37:46:37:f3:a9:1f:c2:01:
bf:fb:38:90:d6:34:96:e9:96:39:24:e6:b7:5c:c4:21:d2:f4:
c8:8d:a5:e1:a1:2d:ea:c5:c2:e2:30:f5:d4:01:93:ca:ae:83:
95:88:f4:00:d3:e2:c9:11:aa:8f:17:70:de:a0:bb:a5:6c:1f:
25:96:66:a8:e5:40:35:b8:22:a1:bf:b7:bd:04:19:82:7e:04:
32:fe:66:d4:20:e5:e5:eb:21:0a:2f:02:16:87:56:60:93:f8:
9e:1f:bf:f8:c6:65:91:54:af:1b:4c:fa:de:6d:60:d9:9a:bc:
48:42:07:c6:72:c9:6c:80:d0:4a:bd:f2:00:36:25:f2:40:18:
3f:ad:e8:8b:44:a9:d1:c2:44:55:30:d9:f0:1a:67:f5:ee:75:
6c:cc:21:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org