Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/39667c57d22640e6aff51590136d85c9b43c1cd4.roa
File: 39667c57d22640e6aff51590136d85c9b43c1cd4.roa (raw, json)
Hash identifier: 6leZov2f+JH4zRL2w5b8ns58scZjDY0qJHUBXP1+SIs=
Subject key identifier: EE:49:F6:7F:CE:76:F0:76:D6:FD:51:41:3B:53:83:87:3C:B6:44:B5
Certificate issuer: /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial: 161D8C
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/39667c57d22640e6aff51590136d85c9b43c1cd4.roa
Signing time: Tue 06 Jun 2023 12:36:36 +0000
ROA not before: Mon 05 Jun 2023 12:36:35 +0000
ROA not after: Fri 06 Jun 2025 12:36:35 +0000
asID: 267789
IP address blocks: 161.22.32.0/24 maxlen: 24
161.22.38.0/24 maxlen: 24
2803:6680::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1449356 (0x161d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Validity
Not Before: Jun 5 12:36:35 2023 GMT
Not After : Jun 6 12:36:35 2025 GMT
Subject: CN=39667c57d22640e6aff51590136d85c9b43c1cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:b4:aa:22:87:5c:2d:14:22:30:10:19:13:
05:38:42:55:5b:5a:89:36:0c:3b:c2:8b:86:d2:c1:
fa:02:b4:78:c8:a7:16:00:e7:fc:a0:7d:9f:27:0a:
b9:77:48:27:a8:a0:c7:3a:e7:37:c4:73:09:d5:54:
73:bc:7c:3c:3a:f9:4e:78:f1:4e:af:a4:e2:64:2f:
83:a9:e9:f3:f5:61:de:d4:79:6e:f1:61:57:53:16:
4f:04:15:cd:5d:dc:66:3f:38:24:b9:83:33:16:dc:
8a:d0:da:51:40:6a:75:ac:f3:b0:e4:31:f3:ac:c3:
40:d2:12:f1:21:7c:d3:f6:b3:52:3d:8c:45:64:50:
49:e1:e0:4e:7e:41:d0:91:0a:26:43:99:dc:51:35:
36:40:fa:e6:81:f7:41:f5:03:a8:03:be:ec:e1:ab:
47:ae:29:5e:ef:46:8d:e8:74:52:42:bf:a6:7c:dd:
ca:93:6b:59:24:19:f7:c3:f9:bb:40:40:fc:70:8c:
ca:df:2d:5c:55:17:9a:88:87:24:d5:21:a2:4c:80:
df:93:7f:cd:10:04:d7:ce:2f:84:57:b6:ab:10:f6:
45:5b:e6:8b:8d:f3:c3:fa:7d:f4:8f:2b:8d:9c:5d:
2a:57:5d:35:b8:fe:86:15:6f:68:fb:41:59:67:15:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:49:F6:7F:CE:76:F0:76:D6:FD:51:41:3B:53:83:87:3C:B6:44:B5
X509v3 Authority Key Identifier:
keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/39667c57d22640e6aff51590136d85c9b43c1cd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.32.0/24
161.22.38.0/24
IPv6:
2803:6680::/32
Signature Algorithm: sha256WithRSAEncryption
66:eb:e3:b4:17:87:b7:fa:46:80:62:e4:3a:b1:b7:a2:d3:72:
ac:40:24:94:77:05:02:a0:0e:e6:8b:86:4e:23:08:2c:77:45:
7b:ab:4c:fb:e1:bb:21:86:7f:61:b4:f3:6b:00:46:5d:05:3f:
f9:18:cc:f4:bb:58:4f:36:e8:c4:43:cd:6d:0e:49:01:bb:8b:
bb:02:90:47:96:2f:be:b4:bd:42:ba:90:ac:7c:b7:67:79:9c:
34:ab:bc:8f:e8:b1:c8:57:52:bf:01:98:08:29:33:ac:56:b9:
bb:44:21:f3:3c:6f:95:e6:21:8e:01:c2:cc:ac:a0:29:cc:6a:
8c:a3:fc:1d:05:88:56:31:07:f0:b9:38:60:9f:ac:da:8f:b4:
10:8d:e6:67:a1:23:ca:58:e5:6b:a7:48:8b:e4:65:c7:78:e2:
7d:ab:9f:61:9f:4c:f2:7f:63:32:c1:04:8b:d4:21:0d:ed:3d:
50:b6:ac:1b:a7:18:76:20:47:26:53:45:a5:7b:bc:70:f6:11:
34:5d:f0:be:99:35:1a:72:fe:3c:0e:5b:a0:c0:6e:0a:a4:22:
2f:18:ae:8d:95:ed:4c:08:73:ae:dd:1b:3e:f0:e6:62:bd:ec:
2b:42:7b:4a:fc:1f:28:55:7c:b3:be:48:1a:bb:f8:e5:d3:26:
7f:e7:4d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-ams.rpki-client.org