Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/b509ac81f6ba863d31263d32b45751f4db8b6ca2.roa
File: b509ac81f6ba863d31263d32b45751f4db8b6ca2.roa (raw, json)
Hash identifier: OqJmTLGJ57fKuYMf/WW9AoIvUr31e5o1bMP7AIkyHQI=
Subject key identifier: 48:44:F4:9A:10:19:BA:A0:0D:4E:18:E1:D4:4B:C2:DC:BF:72:79:AC
Certificate issuer: /CN=63333df328424e1d0ca2ddcff0cfc829ea44b7a1
Certificate serial: 2599DC
Authority key identifier: FD:59:37:71:8E:92:A1:AE:60:2C:14:23:71:FE:AA:B4:AD:6B:8B:15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63333df328424e1d0ca2ddcff0cfc829ea44b7a1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/b509ac81f6ba863d31263d32b45751f4db8b6ca2.roa
Signing time: Thu 04 Jan 2024 21:04:51 +0000
ROA not before: Thu 04 Jan 2024 21:04:50 +0000
ROA not after: Sun 04 Jan 2026 21:04:50 +0000
asID: 61468
IP address blocks: 192.207.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2464220 (0x2599dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63333df328424e1d0ca2ddcff0cfc829ea44b7a1
Validity
Not Before: Jan 4 21:04:50 2024 GMT
Not After : Jan 4 21:04:50 2026 GMT
Subject: CN=b509ac81f6ba863d31263d32b45751f4db8b6ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:76:21:2e:4d:88:63:5a:05:88:1f:cc:a6:
8c:8f:d0:9b:e2:2e:15:11:da:70:0b:ec:75:30:71:
76:67:a6:79:72:fe:ba:d3:83:0d:f3:f2:21:29:1a:
d4:3f:e2:53:15:46:e2:7a:23:63:3a:b4:a6:77:f5:
d1:07:47:76:28:de:e3:3f:fb:5b:21:f1:b1:60:d1:
bf:e5:55:7e:32:df:14:79:75:a0:50:46:c1:8f:16:
48:95:f1:4b:06:3b:be:ca:59:34:1e:84:26:e1:d6:
87:3d:6e:10:7f:a2:82:0f:92:10:60:26:68:25:e3:
0d:3c:9f:44:c0:da:8c:5c:59:6f:fc:e6:68:e4:7a:
8c:ee:f6:20:39:e8:c0:f7:a4:0d:dc:5a:06:12:8b:
5a:88:33:e7:a1:b0:2d:b1:49:78:b8:00:d7:b0:50:
32:ec:ec:96:ab:c4:17:2e:8a:2d:15:7b:87:2f:e2:
01:c5:0c:84:67:b4:55:3d:64:8c:80:07:69:f6:8a:
18:b8:de:7c:1d:fd:5a:9d:96:2b:30:dc:92:a2:88:
76:46:d8:fa:05:c8:33:45:a1:b5:55:4b:fe:de:b2:
72:ee:af:5e:aa:c1:50:57:6f:87:af:f8:f6:ff:1b:
67:46:d7:21:66:6d:d5:c8:02:71:d4:cb:82:94:56:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:44:F4:9A:10:19:BA:A0:0D:4E:18:E1:D4:4B:C2:DC:BF:72:79:AC
X509v3 Authority Key Identifier:
keyid:FD:59:37:71:8E:92:A1:AE:60:2C:14:23:71:FE:AA:B4:AD:6B:8B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63333df328424e1d0ca2ddcff0cfc829ea44b7a1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/b509ac81f6ba863d31263d32b45751f4db8b6ca2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/abfc8c28-2a1b-4820-8a2d-8dc079802132/63333df328424e1d0ca2ddcff0cfc829ea44b7a1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.207.244.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ce:a9:65:21:32:c1:48:79:7d:84:17:5a:6a:8c:35:fe:c7:
74:0c:40:6f:56:e9:87:94:4f:84:49:ef:63:87:7b:98:de:2b:
c1:14:40:0f:f3:05:22:a4:a9:8a:09:1e:72:70:de:fb:3d:02:
0c:32:b5:c5:01:6a:ab:b2:df:02:d8:e6:cf:e3:11:10:4a:04:
97:ea:bf:a5:f8:da:1b:40:69:91:eb:3f:93:31:7a:66:4a:80:
8d:73:bc:4a:25:3c:39:ae:f8:6c:04:f4:99:0d:2e:16:f5:88:
da:ae:10:d2:b4:c6:b2:3a:fc:96:54:d5:db:8a:a9:15:1c:9e:
fe:1e:7e:cc:68:8d:69:72:dd:d1:65:2d:eb:c4:e5:3e:5d:c6:
58:89:3e:b2:a4:50:94:02:c8:22:d8:7b:bb:1d:42:9a:8a:10:
bd:f8:22:d2:df:f1:10:87:cf:1a:e3:fa:a7:51:25:00:b2:28:
62:bc:63:59:94:ca:14:9a:ee:67:71:12:aa:c8:c6:b7:44:87:
b1:69:71:cd:99:af:27:04:b8:fd:76:f7:6b:1e:a1:30:6c:7a:
01:fb:db:f3:02:f5:34:19:0a:eb:c5:66:9f:59:97:79:51:27:
67:81:65:9f:5e:2e:4c:a3:d8:c0:5a:82:dd:77:f7:b7:15:ee:
86:96:7f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org