Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/ecdfa0b04dc3e8f44ccac061e3ae31c227115d2a.roa
File: ecdfa0b04dc3e8f44ccac061e3ae31c227115d2a.roa (raw, json)
Hash identifier: 8dE2De7IyA7cfZ/YSnIJTTCEsC+zTl7L1L2kpY82Ago=
Subject key identifier: C3:10:C4:68:98:68:4A:46:FA:CB:38:A8:B7:62:69:23:8A:65:AF:AE
Certificate issuer: /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial: 253F20
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/ecdfa0b04dc3e8f44ccac061e3ae31c227115d2a.roa
Signing time: Tue 17 Oct 2023 19:52:24 +0000
ROA not before: Mon 16 Oct 2023 19:52:24 +0000
ROA not after: Fri 17 Oct 2025 19:52:24 +0000
asID: 52468
IP address blocks: 167.250.180.0/22 maxlen: 24
177.234.192.0/18 maxlen: 24
200.24.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2440992 (0x253f20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
Validity
Not Before: Oct 16 19:52:24 2023 GMT
Not After : Oct 17 19:52:24 2025 GMT
Subject: CN=ecdfa0b04dc3e8f44ccac061e3ae31c227115d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4e:0c:c9:52:48:46:65:40:66:6c:36:10:21:
36:0a:e2:8f:30:38:6b:7a:6f:80:12:68:54:6d:66:
72:be:3d:f0:4f:ac:95:24:03:35:35:63:29:1e:b3:
a2:5f:71:6b:20:81:4f:e4:c9:45:6b:41:b4:43:23:
3d:1e:38:e7:b8:67:71:e3:bd:a8:6e:84:91:83:af:
a6:76:d2:d8:8b:2f:92:91:d2:00:5c:7a:e2:32:42:
96:37:93:ca:1b:22:e3:c9:de:e8:dd:22:8f:fd:b0:
1d:12:67:6d:a1:dc:63:fa:47:9b:44:19:7c:4c:e4:
c9:1d:fe:38:51:ba:dc:52:55:1e:5d:ba:48:ac:57:
7e:3c:9f:99:6c:70:0c:46:77:b4:84:43:e4:78:96:
99:53:52:8e:1b:1a:a1:8e:ba:32:3f:cd:74:aa:41:
2b:bb:17:8b:c6:75:62:d9:56:76:8d:8d:8e:0d:f9:
27:49:60:81:92:1b:0c:23:43:77:95:61:d7:40:89:
83:fb:00:c5:ec:89:b4:b1:60:d3:af:8b:e9:37:f8:
6c:6a:87:55:8d:d1:83:9d:bf:20:f3:6e:35:3c:ec:
63:2d:56:62:a5:10:d4:84:e6:31:8a:52:9d:43:7e:
5c:4d:dc:de:48:aa:0f:be:54:00:ba:30:f0:ec:ee:
be:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:10:C4:68:98:68:4A:46:FA:CB:38:A8:B7:62:69:23:8A:65:AF:AE
X509v3 Authority Key Identifier:
keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/ecdfa0b04dc3e8f44ccac061e3ae31c227115d2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.180.0/22
177.234.192.0/18
200.24.128.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:31:5d:bc:b4:90:11:f1:72:26:d2:a5:55:5c:a9:d1:dd:fd:
cf:f6:7c:ff:b8:a8:1e:58:b5:8c:0c:ca:ed:5a:c1:39:1a:b1:
85:df:62:30:f6:2a:74:3d:0c:20:39:24:07:40:93:92:b5:26:
27:9f:72:87:72:c1:fc:c1:c2:6c:af:99:74:af:89:22:96:e5:
bb:53:c6:b0:8d:83:26:16:2b:66:62:d7:06:63:73:c7:3c:41:
2e:36:93:7d:c0:e1:7a:5f:c1:db:71:b0:ad:58:0b:a6:8d:20:
51:16:32:58:80:f7:4d:54:c0:ec:47:85:96:b1:91:39:5a:f7:
6b:3c:1e:94:1b:0d:25:07:55:cf:de:f4:66:ac:d1:f8:e0:c4:
ae:ea:d8:0c:21:98:ee:3c:46:47:76:c0:4a:30:d5:9e:20:69:
e0:71:2f:30:d1:cf:63:f3:fa:01:e1:e6:28:88:bc:29:ce:bc:
1a:3e:6d:a7:f0:ad:fa:c6:61:a4:95:e7:7a:d6:2a:3c:af:39:
34:b9:0e:54:9a:2d:d9:30:0d:ad:3c:1a:7c:96:d9:d3:7e:c5:
39:ac:1b:cd:f6:ad:c7:fe:e3:fd:04:4c:8d:e6:0a:9a:56:00:
da:2a:01:6c:9a:bd:24:da:08:61:47:b9:12:d0:9d:0f:45:0c:
62:e3:68:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org