Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/f319e619440ed4db8a23dfd94a580127efae9caf.roa
File: f319e619440ed4db8a23dfd94a580127efae9caf.roa (raw, json)
Hash identifier: zckXTjo6H77sdpzqhLU907sWC/yGYpFmZU1oXHoBzlU=
Subject key identifier: ED:FE:CA:FA:2E:DC:44:18:09:43:FC:90:B5:23:6D:37:1B:B3:A8:BA
Certificate issuer: /CN=c00a39f3545eb5fa299c3bd8174e9fc35444dfc0
Certificate serial: 11B50C
Authority key identifier: 6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/f319e619440ed4db8a23dfd94a580127efae9caf.roa
Signing time: Tue 09 May 2023 21:38:29 +0000
ROA not before: Mon 08 May 2023 21:38:29 +0000
ROA not after: Fri 09 May 2025 21:38:29 +0000
asID: 28409
IP address blocks: 168.121.60.0/22 maxlen: 22
168.121.60.0/24 maxlen: 24
168.121.61.0/24 maxlen: 24
168.121.62.0/24 maxlen: 24
168.121.63.0/24 maxlen: 24
2806:21e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1160460 (0x11b50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00a39f3545eb5fa299c3bd8174e9fc35444dfc0
Validity
Not Before: May 8 21:38:29 2023 GMT
Not After : May 9 21:38:29 2025 GMT
Subject: CN=f319e619440ed4db8a23dfd94a580127efae9caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:0f:0d:2b:d9:1c:2c:fd:9e:9f:4b:f0:72:
f9:6a:5d:1e:f0:31:e2:6b:44:6b:b3:32:d8:8e:a2:
66:c2:06:37:04:5e:b4:c7:8d:44:53:d8:c8:87:eb:
9e:25:80:3d:cf:cb:14:16:b9:5a:a5:b6:39:78:32:
84:15:93:27:9c:51:dd:e7:85:f5:10:0a:30:2e:97:
70:ac:d8:03:df:ea:f3:5a:9b:22:7a:d6:9e:60:5c:
8a:b1:3a:8c:19:7c:d3:dc:97:36:4e:05:63:70:5c:
2c:7c:dc:17:c4:8a:a6:f2:89:1d:45:61:56:78:e8:
33:e1:f7:94:b3:fb:98:b5:75:7c:13:07:fc:27:1e:
10:ae:4e:9a:cd:42:3a:0f:6e:e2:90:07:b4:3c:d8:
26:14:9d:ab:36:6e:5d:a9:5f:89:7d:1f:27:25:44:
4e:ee:96:32:27:0a:6e:4b:95:81:0c:27:51:d4:32:
d5:0c:b3:78:8c:ab:6f:34:ba:08:2b:ba:4e:25:47:
19:29:5a:09:95:69:62:15:2f:91:c3:95:f6:77:ee:
41:17:d1:41:7b:10:8f:16:bc:0e:22:1e:c9:25:f2:
57:57:ef:2e:18:f3:16:e7:a9:61:b5:29:41:4d:c2:
5a:18:b9:61:d6:97:9c:f1:07:ad:ab:99:9f:e9:cd:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FE:CA:FA:2E:DC:44:18:09:43:FC:90:B5:23:6D:37:1B:B3:A8:BA
X509v3 Authority Key Identifier:
keyid:6D:56:B7:08:09:7B:88:F7:1B:F3:F1:07:90:15:07:C4:49:17:AD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/f319e619440ed4db8a23dfd94a580127efae9caf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9d0532de-17c5-4610-be66-9bbc15f426b2/c00a39f3545eb5fa299c3bd8174e9fc35444dfc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.60.0/22
IPv6:
2806:21e::/32
Signature Algorithm: sha256WithRSAEncryption
0c:44:a2:1d:a4:77:a8:4b:a3:2d:2e:f5:e6:cd:bd:2d:da:37:
78:0c:d2:d8:65:a4:f0:2a:37:4a:29:47:f7:43:b0:7b:79:7e:
62:42:43:66:cc:1f:87:69:45:d1:75:cd:cc:09:f7:92:c9:e4:
ce:19:84:33:ea:c0:84:3d:ee:15:80:e7:94:cc:c4:d6:03:87:
89:a8:85:27:39:c0:95:2f:cd:46:e0:25:08:1d:08:28:8e:95:
29:db:01:cd:b8:78:43:85:b5:fa:ae:a6:49:0f:fa:5a:6e:4d:
09:c2:7a:c8:3c:81:e1:da:21:04:b4:86:e8:33:60:a6:81:46:
55:5e:f9:91:7a:dc:64:f0:71:c6:ad:ce:bc:56:66:af:3f:59:
75:8d:09:29:4f:56:da:a7:39:60:ba:4c:f4:4a:17:16:45:97:
a4:3b:54:f8:d8:12:24:12:4b:61:ea:80:59:18:64:7e:6a:ee:
93:c6:30:58:bb:db:9e:9b:03:80:2c:c7:4a:33:68:7d:2a:fb:
b8:f6:23:32:76:77:80:18:a2:92:8e:d3:28:37:ba:76:68:d8:
fa:64:a7:bd:3a:5d:ff:21:ed:9d:c6:15:2c:f4:02:8c:d3:ee:
be:78:92:3e:36:5a:33:7d:04:6a:23:58:e2:80:d5:e9:4d:db:
d6:45:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org