Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/29ffb1a5f48b736d8ce142e86b3a59254106c58d.roa
File: 29ffb1a5f48b736d8ce142e86b3a59254106c58d.roa (raw, json)
Hash identifier: pLCL7pDWlfV66NkIBweeWm7+wm7f/pVw2Lk/hSynJdQ=
Subject key identifier: 15:60:40:9D:91:5B:66:60:58:62:8D:DE:C8:D3:57:E4:CD:22:B2:F1
Certificate issuer: /CN=cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968
Certificate serial: 027EFC
Authority key identifier: 4B:BB:65:D6:78:FD:C6:D1:04:8D:59:C2:E5:6C:F5:21:DA:14:DF:12
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/29ffb1a5f48b736d8ce142e86b3a59254106c58d.roa
Signing time: Tue 19 Mar 2024 21:29:54 +0000
ROA not before: Tue 19 Mar 2024 21:29:54 +0000
ROA not after: Thu 19 Mar 2026 21:29:54 +0000
asID: 264696
IP address blocks: 168.232.168.0/24 maxlen: 24
168.232.169.0/24 maxlen: 24
168.232.170.0/24 maxlen: 24
168.232.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163580 (0x27efc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968
Validity
Not Before: Mar 19 21:29:54 2024 GMT
Not After : Mar 19 21:29:54 2026 GMT
Subject: CN=29ffb1a5f48b736d8ce142e86b3a59254106c58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:84:a8:49:73:19:0d:46:47:60:13:a9:49:
4e:45:e2:38:72:c3:07:35:82:fb:f6:e1:14:e1:dd:
35:da:d2:26:1c:e6:e9:ee:a2:d0:d0:bc:e2:21:25:
d5:d6:ac:0f:4a:c9:22:59:8e:53:58:3a:27:68:b2:
63:c3:82:14:3f:78:ae:88:90:a8:80:d4:c3:19:20:
3d:37:70:7b:5d:b8:d0:d1:88:65:b3:d3:c2:4d:e8:
3d:24:16:1e:14:cc:17:51:4c:2c:52:d1:97:b2:59:
6c:a4:1b:80:6f:73:c6:49:17:9d:35:c1:3e:9d:cd:
39:66:24:4b:69:70:0f:f9:b8:b4:7e:05:0e:dc:62:
89:be:3a:b8:71:e9:95:2c:3e:38:ca:ee:1b:9c:a3:
d6:f9:61:77:01:ae:f5:d3:e4:91:54:99:b1:19:60:
28:c4:93:d2:32:f5:a2:d9:57:e3:93:54:08:29:0a:
62:5b:7a:63:49:92:55:e6:2c:f3:a4:e2:d6:4d:91:
2b:14:24:dd:a6:a4:3f:35:13:d5:ca:18:43:5e:d6:
9e:e0:57:71:39:08:11:c4:bf:e9:75:b3:70:42:f7:
c0:86:21:c2:87:1f:60:dc:2d:1e:a1:ca:6d:bb:48:
1d:61:a9:df:61:7a:c9:57:79:01:f0:12:ac:f6:d6:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:60:40:9D:91:5B:66:60:58:62:8D:DE:C8:D3:57:E4:CD:22:B2:F1
X509v3 Authority Key Identifier:
keyid:4B:BB:65:D6:78:FD:C6:D1:04:8D:59:C2:E5:6C:F5:21:DA:14:DF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/29ffb1a5f48b736d8ce142e86b3a59254106c58d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.168.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:e9:f2:2a:67:87:66:a4:94:bd:34:4d:f5:82:e6:65:52:27:
80:93:c3:6b:e8:3d:11:ef:4b:40:a7:0e:86:61:09:2d:14:85:
be:28:83:d1:56:86:be:5d:ed:a1:92:1f:3d:98:49:f1:46:2d:
06:18:fd:30:88:fe:4b:28:92:20:4b:90:22:ab:e5:b9:16:4b:
b1:6f:bb:bc:a9:b1:b6:1c:0f:f0:2e:27:ff:3e:15:a8:11:73:
e8:67:83:d1:02:99:97:75:e5:00:10:b0:23:da:d8:d8:d0:ee:
67:a4:cc:5d:f6:17:a5:56:90:f4:73:4b:12:62:26:73:c1:f7:
7d:e3:63:e1:94:7f:9f:f2:98:ee:f0:14:a5:04:91:1f:3d:42:
02:8c:52:78:09:3a:83:31:ff:ef:bb:9c:66:2a:21:31:b5:88:
ea:27:69:b8:9c:ad:87:ee:2c:0b:98:d5:ae:3d:09:af:08:ee:
4c:bd:d1:4a:75:81:3a:eb:e2:00:88:d1:ba:75:4d:71:61:b8:
e1:ea:89:f6:48:a2:12:dd:45:4c:3c:75:57:a6:65:5a:18:34:
1b:4b:3e:3f:55:9d:e6:2a:c2:32:5d:60:7a:77:cb:82:07:84:
2c:e5:fc:1b:dc:50:b1:df:a0:ec:0f:bb:91:32:f4:91:a4:c0:
62:41:bc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:01 2024 by rpki-client on console-fra.rpki-client.org