Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/f7941be19c9600abd9571828a2fc5f1a404cae1c.roa
File: f7941be19c9600abd9571828a2fc5f1a404cae1c.roa (raw, json)
Hash identifier: fEj+SdmzGs549dyqUgyh/1U6dMEWKOqXOCfZIfJIMLc=
Subject key identifier: 20:6D:1E:89:EE:37:96:B6:BD:63:63:D5:18:D8:E1:1F:7E:13:E2:53
Certificate issuer: /CN=844cc8c5a2dc70311d998622d46309497c3d982c
Certificate serial: 091497
Authority key identifier: A5:15:CA:3C:8A:F0:DB:40:5D:D7:3C:92:03:97:F8:4F:9D:29:D4:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/844cc8c5a2dc70311d998622d46309497c3d982c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/f7941be19c9600abd9571828a2fc5f1a404cae1c.roa
Signing time: Thu 30 Nov 2023 19:04:11 +0000
ROA not before: Thu 30 Nov 2023 19:04:11 +0000
ROA not after: Sun 30 Nov 2025 19:04:11 +0000
asID: 265720
IP address blocks: 160.20.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595095 (0x91497)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844cc8c5a2dc70311d998622d46309497c3d982c
Validity
Not Before: Nov 30 19:04:11 2023 GMT
Not After : Nov 30 19:04:11 2025 GMT
Subject: CN=f7941be19c9600abd9571828a2fc5f1a404cae1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7b:be:81:42:b0:1d:3d:13:bf:9e:ad:35:fb:
34:8e:53:79:f5:8d:0a:a2:a8:5d:01:da:21:c5:de:
75:ab:31:32:52:59:87:cf:81:18:23:a8:de:47:9c:
9d:68:9a:74:b3:2d:65:c1:90:b2:b0:ca:a9:d9:a7:
dd:69:d7:ad:ab:a3:84:2c:bf:05:07:d8:27:77:83:
8b:b8:1c:7b:c9:63:7f:46:8c:ab:95:9e:ee:bd:66:
07:e0:11:68:1f:3d:ea:59:0a:88:c3:1e:48:b1:72:
69:7a:e2:d9:85:14:49:6e:df:ac:4b:c3:a1:15:ed:
91:cb:1a:8f:c7:1b:d5:d2:46:4b:7f:80:4f:71:39:
09:ea:70:74:76:db:82:18:a8:0a:60:3f:e2:7a:a0:
e3:07:47:2b:ce:0e:e2:d1:b9:46:c1:aa:f7:50:f3:
67:fa:9b:33:8a:d4:b7:bb:8c:18:84:cb:a7:36:e0:
3d:55:75:26:4f:15:cd:36:a2:dc:1a:1e:97:4f:f3:
b0:2c:d7:21:4c:e4:5a:03:1b:f6:b8:ba:e6:b3:54:
5a:76:44:58:d8:c3:f1:15:7a:32:3a:df:12:51:25:
75:21:5c:3e:ca:9a:a8:27:3f:dc:4c:07:fa:eb:6a:
53:0c:92:84:1e:95:ed:75:5e:dd:fb:60:1a:28:fd:
a0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6D:1E:89:EE:37:96:B6:BD:63:63:D5:18:D8:E1:1F:7E:13:E2:53
X509v3 Authority Key Identifier:
keyid:A5:15:CA:3C:8A:F0:DB:40:5D:D7:3C:92:03:97:F8:4F:9D:29:D4:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/844cc8c5a2dc70311d998622d46309497c3d982c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/f7941be19c9600abd9571828a2fc5f1a404cae1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/844cc8c5a2dc70311d998622d46309497c3d982c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.80.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:dc:36:94:6d:bb:d5:83:b2:bf:f2:06:c3:9d:f0:8b:73:15:
42:12:af:df:47:dc:9b:a3:42:50:8a:e5:12:51:fd:5d:de:e5:
db:d0:b0:1c:f2:d2:b5:91:52:5c:db:0b:99:84:bd:cb:e0:65:
be:c4:26:78:7b:07:31:50:a1:c8:3c:e2:79:7e:5e:51:84:55:
2c:80:cc:60:c7:e4:76:65:6e:94:e0:84:5c:0e:45:df:09:00:
8d:a3:f9:4a:20:87:07:a2:e9:ab:32:ea:bd:10:4c:3a:18:9d:
9a:f9:ca:34:80:63:32:eb:b2:6e:2b:5c:72:ba:65:d1:75:ed:
f1:0c:97:cb:1e:03:9f:51:62:59:32:64:04:4b:f4:98:ce:80:
2a:ad:c9:1f:6f:c2:b6:ef:1f:47:89:86:57:8d:64:9a:c1:b6:
7d:ab:8e:e4:15:35:d7:66:e5:57:ab:08:76:d6:10:09:e1:fa:
8c:b7:51:c2:91:40:8a:5e:2f:a1:61:67:2a:19:7f:73:ec:5a:
b5:50:16:43:c6:83:9b:8b:f5:ba:3e:c1:cb:ca:f3:e8:da:52:
db:b9:54:5c:92:7a:dd:28:da:3e:9e:7a:52:0f:54:86:0d:95:
38:aa:3b:4b:4d:73:ac:47:d6:dc:a9:1a:03:5e:f8:e2:85:05:
53:c0:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org