Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/5dd1fd39ee38e68fdd66fe534eccea147a6ce127.roa
File: 5dd1fd39ee38e68fdd66fe534eccea147a6ce127.roa (raw, json)
Hash identifier: VpYvQhUEAQ6YVJUBm3osBWYQG9446azYqNqia78u3vE=
Subject key identifier: 01:50:B0:6B:AA:8B:3D:8F:6C:E6:1A:42:EF:CC:D3:45:94:E8:9D:30
Certificate issuer: /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial: 1F77AF
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/5dd1fd39ee38e68fdd66fe534eccea147a6ce127.roa
Signing time: Tue 17 Jan 2023 23:39:58 +0000
ROA not before: Thu 29 Apr 2021 03:00:00 +0000
ROA not after: Thu 11 May 2023 03:00:00 +0000
asID: 262589
IP address blocks: 179.1.0.0/21 maxlen: 24
179.1.8.0/21 maxlen: 24
179.1.16.0/20 maxlen: 24
179.1.32.0/20 maxlen: 24
179.1.48.0/20 maxlen: 24
179.1.64.0/20 maxlen: 24
179.1.80.0/20 maxlen: 24
179.1.92.0/22 maxlen: 24
179.1.96.0/20 maxlen: 24
179.1.112.0/20 maxlen: 24
179.1.128.0/20 maxlen: 24
179.1.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062255 (0x1f77af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Validity
Not Before: Apr 29 03:00:00 2021 GMT
Not After : May 11 03:00:00 2023 GMT
Subject: CN=5dd1fd39ee38e68fdd66fe534eccea147a6ce127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:a0:78:7f:20:9d:59:3e:0a:76:f2:a6:cb:
eb:c4:2c:95:6f:3b:c0:28:83:86:7a:1b:de:bc:1a:
b8:73:20:5b:30:0d:7b:4b:05:1f:f3:25:7c:d6:ff:
f8:19:cc:b2:e2:6e:16:28:fd:d7:66:b5:f2:0b:30:
69:70:f2:ea:6e:d6:20:aa:07:28:b4:6e:0e:bc:20:
34:ca:5d:f7:b7:0a:6c:03:d5:b6:5e:13:c5:30:20:
87:e3:16:5d:12:71:d6:ce:90:65:7d:b7:d2:fc:65:
e0:c4:39:92:37:16:c4:16:6b:97:3e:49:dc:5c:be:
fd:79:ea:da:95:be:91:a5:89:b0:82:35:ed:13:b7:
45:64:be:73:09:fc:14:a5:0d:d0:82:ff:33:df:87:
55:96:fa:cf:f3:00:2a:0a:47:b4:85:2f:a7:0b:83:
f3:b3:36:9a:ad:0e:0f:28:4b:91:82:ba:82:e0:96:
32:0c:ce:e7:b1:3b:bf:2d:4f:0b:b1:27:f7:cc:c4:
a1:25:a6:51:fb:36:91:63:c4:ce:ff:ab:6b:bd:93:
e8:8f:26:23:eb:bf:3f:d5:4d:99:81:cc:8b:f7:dd:
2c:54:0d:36:e0:18:30:fa:00:1a:dd:da:a8:7a:67:
80:5e:15:59:ec:d0:8e:04:0c:ae:b4:78:47:aa:07:
dd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:50:B0:6B:AA:8B:3D:8F:6C:E6:1A:42:EF:CC:D3:45:94:E8:9D:30
X509v3 Authority Key Identifier:
keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/5dd1fd39ee38e68fdd66fe534eccea147a6ce127.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.0.0-179.1.143.255
179.1.192.0/20
Signature Algorithm: sha256WithRSAEncryption
29:e6:9b:41:3d:8f:d6:45:d2:d8:2c:88:61:7d:c2:57:d1:49:
63:0e:5b:54:41:86:2b:a4:1a:98:70:bc:cb:98:43:b1:0f:69:
a5:9e:5b:26:d7:85:25:de:28:d6:0a:bf:ca:ab:48:86:7e:8d:
f0:d6:11:21:d7:2f:c1:29:30:9b:5b:ef:e8:14:1c:35:a1:c0:
51:8e:56:20:5a:78:d3:a8:4f:a0:2d:51:c4:22:16:88:86:c6:
e9:01:42:ff:7a:1f:fa:31:03:2e:b5:30:10:47:24:8e:e7:4d:
d2:03:b6:62:f5:fd:a2:08:11:e1:cb:db:2c:31:d1:f6:88:27:
c0:c0:c3:6c:b9:5a:f2:1e:b9:74:c7:5f:77:22:14:f8:53:d4:
13:20:f3:2e:8e:e2:5d:7e:4d:8b:96:1c:f4:ee:c2:4f:85:c5:
fd:8a:5a:7d:64:4a:1c:1d:c4:e6:b9:d5:f6:4e:dd:43:3e:ff:
5e:12:e4:a4:c8:b6:ee:7c:7a:c0:c6:3b:87:0e:f1:67:0f:58:
18:ea:93:d7:0f:7f:38:d1:4a:03:34:c3:ba:fb:93:2e:d4:24:
a5:09:b8:c6:e8:cc:67:7a:3d:a5:22:3f:94:c4:af:fe:b4:a4:
13:65:e9:a7:1f:69:f7:6b:1c:c0:58:9d:af:08:8a:df:4c:77:
9f:78:15:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org