Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/4dd858e7aefabc472bb199baaf26798fa291535b.roa
File: 4dd858e7aefabc472bb199baaf26798fa291535b.roa (raw, json)
Hash identifier: raIGKX6R9x7QHthZBBsAyXQ9TA7vAC8NGQ+HObrFEtw=
Subject key identifier: 6F:C4:6F:6A:61:78:BC:5C:12:C0:92:09:71:F9:63:F7:52:D5:84:EB
Certificate issuer: /CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Certificate serial: 0D37A3
Authority key identifier: 14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/4dd858e7aefabc472bb199baaf26798fa291535b.roa
Signing time: Wed 24 Mar 2021 14:37:21 +0000
ROA not before: Wed 24 Mar 2021 14:37:20 +0000
ROA not after: Tue 24 Mar 2026 14:37:20 +0000
asID: 262145
IP address blocks: 143.208.168.0/22 maxlen: 24
168.228.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866211 (0xd37a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5747c1980bcbeed56cb517c667a966b8945ceee
Validity
Not Before: Mar 24 14:37:20 2021 GMT
Not After : Mar 24 14:37:20 2026 GMT
Subject: CN=4dd858e7aefabc472bb199baaf26798fa291535b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:8b:7d:e5:49:d9:cd:37:1b:5a:5d:57:3b:
8f:5c:bb:4a:62:41:39:d7:d8:7c:a9:8d:6d:35:f9:
84:03:47:23:35:8c:8f:92:ab:21:f0:6d:d6:f0:4f:
36:45:f0:7a:02:f6:d6:e3:3f:c1:ed:80:8d:73:e0:
42:3f:28:1f:ac:2b:bc:f9:3f:ed:67:c7:15:45:b4:
b0:6d:7b:b9:75:08:22:14:e3:b4:14:e2:6e:b8:f4:
82:13:4c:a9:da:2a:46:9c:cf:5a:11:80:02:81:b8:
95:1b:00:c3:0b:63:bf:87:8c:b7:48:1d:1e:83:d1:
77:be:10:1d:1c:23:5a:08:d6:d2:aa:1a:e8:55:9b:
de:e3:1c:f2:82:93:52:18:27:b2:4f:f3:32:e7:09:
ec:41:15:51:e5:cf:6e:4b:5a:77:81:2a:04:61:43:
c6:c7:d7:85:6d:25:49:4c:c5:cf:ee:0a:ba:5c:3c:
38:70:7a:57:85:8f:e3:3a:c8:7f:b6:a5:23:86:e7:
d2:7d:e2:3b:40:85:be:ee:bc:bb:03:48:66:58:5a:
04:d5:29:af:f6:60:0b:d2:92:a3:10:f5:20:f9:96:
32:61:36:e1:d0:3b:c4:de:ba:af:8a:7e:72:ea:93:
3b:f3:6b:dc:c1:70:fd:82:3d:3c:16:9f:c8:71:a2:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C4:6F:6A:61:78:BC:5C:12:C0:92:09:71:F9:63:F7:52:D5:84:EB
X509v3 Authority Key Identifier:
keyid:14:74:15:68:E4:29:6E:2A:6B:BC:B9:4E:B9:1C:D3:85:E4:1C:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5747c1980bcbeed56cb517c667a966b8945ceee.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/4dd858e7aefabc472bb199baaf26798fa291535b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/abf195ce-c43e-43e6-82ba-d77689680787/d5747c1980bcbeed56cb517c667a966b8945ceee.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.208.168.0/22
168.228.48.0/22
Signature Algorithm: sha256WithRSAEncryption
06:ce:c5:ca:40:ff:f6:4c:55:43:cc:d4:02:6a:bf:c5:e0:f1:
91:05:e2:09:68:6f:89:d2:83:58:8f:5b:15:06:99:23:5e:45:
75:31:71:b4:aa:ac:94:7a:e0:da:65:29:c0:40:a1:ce:a7:fe:
b6:79:2e:77:19:50:0c:c5:b7:23:03:90:2e:33:63:3f:d5:9b:
44:33:14:cf:b1:4c:69:2e:53:3d:b6:05:94:bd:72:33:e8:2d:
84:40:d4:d0:51:9e:a9:11:28:a1:5e:c9:7a:44:d7:70:40:1f:
9a:b5:a3:d5:a3:f6:61:6a:88:ff:db:5f:f8:46:73:74:17:f3:
31:62:b5:53:32:5a:09:7c:0c:5f:69:83:aa:30:ec:a3:86:46:
dc:a9:27:c2:5c:5a:1b:d1:2d:79:99:48:f0:4a:25:19:99:49:
5e:2b:25:cf:8c:d4:4b:85:58:8f:73:b6:26:e7:55:f3:b1:b8:
94:cd:7a:d9:82:69:97:a1:e0:f2:a7:32:e6:2d:3e:b8:86:10:
8f:71:3c:59:bf:ca:33:ab:61:b6:e7:8d:0c:e1:e2:81:b0:4d:
36:6a:27:4c:94:f9:64:a9:01:94:44:78:5c:44:55:b0:4e:cb:
36:6c:d3:6a:f5:1c:df:b0:c7:42:b6:3e:58:9f:5d:37:3b:8f:
38:8e:db:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org