Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/17ee7044d7e8d0b0edd77613e7a7cdf03f7d6bcf.roa
File: 17ee7044d7e8d0b0edd77613e7a7cdf03f7d6bcf.roa (raw, json)
Hash identifier: 4YaMLJNjq7iq10JAJSfJyTRiXMudYd38FxdP+gmVuqY=
Subject key identifier: 07:56:B3:22:A1:41:8B:66:A3:1F:57:31:16:79:D4:96:99:7C:64:5C
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 0903CF
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/17ee7044d7e8d0b0edd77613e7a7cdf03f7d6bcf.roa
Signing time: Tue 28 Dec 2021 14:23:55 +0000
ROA not before: Mon 27 Dec 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 270026
IP address blocks: 161.22.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 590799 (0x903cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Dec 27 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=17ee7044d7e8d0b0edd77613e7a7cdf03f7d6bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:2e:74:6a:bd:2b:6f:be:ff:98:39:89:bc:
5b:de:54:ca:c7:6c:f5:a0:45:95:eb:6f:9d:2b:00:
df:f9:31:ae:f0:72:b1:c2:73:9c:2a:b0:cc:94:16:
66:67:74:75:9e:a1:87:fa:c6:c5:ff:74:b1:d6:fa:
bd:7c:2b:41:77:98:ba:65:c5:bf:27:f7:4e:0f:bb:
79:5e:0c:81:38:e5:6f:86:e7:77:6c:db:ec:d9:95:
6e:6b:b1:2a:56:3c:d6:2b:a1:bb:52:38:82:50:78:
2a:e8:2e:a0:b5:ad:e1:e8:15:24:65:be:dc:55:c8:
9e:9f:a3:93:e9:e8:71:32:51:48:f5:99:ae:9b:21:
bf:83:2b:fd:bc:07:f6:07:8e:7f:22:dd:8e:37:70:
65:3f:15:5f:5a:7b:e9:73:b2:a5:13:5f:d2:38:32:
3e:84:b7:78:2d:c0:a6:76:7f:26:cb:7a:d0:2e:c2:
ab:e9:10:ea:9c:0e:a9:5d:fa:dc:30:ec:38:af:07:
08:06:a3:bb:53:1b:01:fa:d2:e1:c5:b3:6e:66:67:
f3:d1:c6:7c:b8:61:e5:8e:26:96:67:01:25:e0:6c:
97:a9:8f:91:5c:06:72:23:c8:84:4b:ad:95:55:b1:
28:94:97:5a:e4:cc:53:bc:82:71:04:15:0e:77:00:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:56:B3:22:A1:41:8B:66:A3:1F:57:31:16:79:D4:96:99:7C:64:5C
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/17ee7044d7e8d0b0edd77613e7a7cdf03f7d6bcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.36.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fe:4b:9b:53:65:15:b1:d2:a8:19:02:2a:cb:86:1c:2c:87:
8a:74:0d:80:37:c8:13:18:eb:48:43:30:c6:be:96:c2:6f:ed:
1b:1e:6d:5e:4e:74:de:b9:e8:a2:b2:33:e1:4b:0d:3b:34:20:
a7:a3:eb:f2:04:ac:ca:cc:ad:9b:35:e2:df:d0:32:fe:fb:e3:
24:be:47:f4:f1:f2:09:07:b0:8c:51:99:a0:6d:e5:19:c9:72:
6c:85:27:db:6d:8a:14:98:0f:76:d2:c4:db:79:57:b2:8e:8a:
47:c4:64:1d:75:aa:83:71:d7:c8:58:27:af:2a:fd:72:bb:94:
dd:ca:2c:3f:11:d7:95:f8:c7:e7:d6:e7:80:2c:85:74:8f:35:
a4:a7:cf:22:78:64:e2:36:ea:b4:7c:fa:91:57:b1:ee:94:9b:
4a:af:5a:c0:ae:a7:da:85:1d:0e:11:eb:ba:b4:84:fb:99:59:
0c:ee:21:a2:91:f9:c7:56:d7:e2:7e:4d:e8:c4:5d:57:b8:5b:
73:02:66:0c:f0:d8:ad:90:ea:d3:f2:a9:0c:cb:86:b7:1c:0e:
30:69:86:3a:9e:c3:2b:6c:bb:56:b5:40:d4:e7:a7:a2:e7:b9:
21:fa:8d:76:e7:36:3c:0e:fd:d4:42:4e:e1:f2:d5:0c:09:ac:
09:28:4e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org