Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/183f25c63e6f1b7a0c0fcddd180f1207eb8296ae.roa
File: 183f25c63e6f1b7a0c0fcddd180f1207eb8296ae.roa (raw, json)
Hash identifier: x3N5KlQJ4X8m++GrBQZF/Y4DjwVlCU0hiRzfrRy5qbg=
Subject key identifier: 2C:E3:CD:1F:3E:16:65:7C:4D:4D:53:46:D5:34:CB:16:58:E4:79:2B
Certificate issuer: /CN=c00a39f3545eb5fa299c3bd8174e9fc35444dfc0
Certificate serial: 11C4F6
Authority key identifier: 6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/183f25c63e6f1b7a0c0fcddd180f1207eb8296ae.roa
Signing time: Wed 10 May 2023 23:00:14 +0000
ROA not before: Tue 09 May 2023 23:00:13 +0000
ROA not after: Sat 10 May 2025 23:00:13 +0000
asID: 28409
IP address blocks: 168.121.60.0/24 maxlen: 24
168.121.61.0/24 maxlen: 24
168.121.62.0/24 maxlen: 24
168.121.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1164534 (0x11c4f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00a39f3545eb5fa299c3bd8174e9fc35444dfc0
Validity
Not Before: May 9 23:00:13 2023 GMT
Not After : May 10 23:00:13 2025 GMT
Subject: CN=183f25c63e6f1b7a0c0fcddd180f1207eb8296ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cc:05:f6:e9:cb:28:cc:30:29:71:cc:26:9e:
36:99:3d:c6:6f:99:b9:ff:58:1f:39:f0:6f:69:d8:
8c:49:0c:99:04:bc:72:2b:fb:b3:f5:73:39:99:07:
b3:89:85:df:2b:c1:56:87:c9:5b:44:b6:b5:7e:09:
64:ef:72:89:7e:66:92:68:d3:05:76:9a:71:ba:ae:
80:a2:1f:00:38:02:47:6b:57:01:29:17:7e:34:4f:
c1:2f:b7:71:24:8c:c2:02:61:91:71:4c:49:d1:39:
5b:18:69:25:0b:b9:66:b6:14:5f:06:31:2f:59:7a:
a6:ab:9c:c3:87:7d:ba:43:4b:1a:e7:01:70:3d:d6:
5e:18:f3:da:ca:d4:32:04:b0:de:47:59:2a:d4:64:
55:50:08:d0:54:d8:af:91:24:5c:f3:fd:3c:35:75:
3d:e2:f1:74:da:fd:de:b3:c3:b6:4f:36:cc:27:16:
e3:91:62:fc:ac:ba:df:7a:b2:51:7c:ab:69:90:f8:
85:62:61:18:26:ca:64:5c:81:11:a3:af:d4:96:41:
47:12:d1:d2:16:64:6d:d6:19:67:7a:41:70:9c:01:
cf:51:4a:7a:dc:60:04:69:c2:12:e0:2c:c2:7d:6f:
c9:f5:de:ea:7b:48:f2:e0:6c:77:9b:ab:a2:95:63:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E3:CD:1F:3E:16:65:7C:4D:4D:53:46:D5:34:CB:16:58:E4:79:2B
X509v3 Authority Key Identifier:
keyid:6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/183f25c63e6f1b7a0c0fcddd180f1207eb8296ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:58:c6:fe:d0:12:07:fa:b1:f6:e3:bd:80:98:03:07:28:88:
a7:7d:1d:b5:1b:66:d9:f5:3f:c2:8e:fc:9e:c3:71:7b:6c:33:
b4:f8:df:26:0b:2a:7c:e6:3c:3e:80:17:54:10:06:de:43:d5:
a3:c2:c2:e9:47:1b:05:b6:ee:80:5d:60:ec:6d:b3:ef:9a:ff:
fd:3a:8a:52:1d:5f:a3:cd:9b:9e:a1:8a:43:53:a7:29:fe:b5:
61:71:d1:93:41:45:d5:c0:61:8d:c5:99:6f:8a:31:83:b0:5a:
8e:70:00:28:62:30:a7:13:2d:a9:af:96:10:ef:9f:3b:43:f5:
da:4c:fa:ec:6e:af:de:9e:6c:3e:31:e2:94:4d:7f:66:d7:0a:
07:6c:1f:cc:c8:ff:33:16:98:12:92:b0:56:39:50:c8:2f:07:
df:bd:a1:d9:f6:a6:60:bf:e1:cb:57:8f:02:2a:bb:0f:ca:e3:
14:3c:12:17:d1:7d:f4:6e:ea:3c:fd:ca:64:e6:92:85:f5:16:
c7:16:4c:2b:c8:e1:95:27:26:d0:b6:00:92:73:c9:b0:13:c3:
06:04:e8:d4:e4:9d:44:b7:6d:4f:dc:bf:fb:31:ac:78:9f:9b:
f3:42:47:e9:5a:78:9d:82:03:2a:64:ec:8a:e9:9d:64:f3:34:
84:19:a6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org