Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/9cef4cde8b75961324b954443d6ff89732b15440.roa
File: 9cef4cde8b75961324b954443d6ff89732b15440.roa (raw, json)
Hash identifier: W/bulDzVWXalNJRfvQu6tA5PE+vAk3wFIa3H/soztJs=
Subject key identifier: A2:46:87:5B:FA:9A:28:B0:B4:1B:C6:C9:2E:7D:0D:38:2E:0F:C7:19
Certificate issuer: /CN=a021501bf713ce344873efb6d039b5bf1e030235
Certificate serial: 0D41F9
Authority key identifier: 04:B8:C4:EA:F7:79:2E:CF:D6:C2:01:3D:72:7D:1C:CB:51:E0:0A:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a021501bf713ce344873efb6d039b5bf1e030235.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/9cef4cde8b75961324b954443d6ff89732b15440.roa
Signing time: Wed 24 Mar 2021 14:39:11 +0000
ROA not before: Wed 24 Mar 2021 14:39:11 +0000
ROA not after: Tue 24 Mar 2026 14:39:11 +0000
asID: 267699
IP address blocks: 170.254.29.0/24 maxlen: 24
170.254.30.0/24 maxlen: 24
170.254.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 868857 (0xd41f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a021501bf713ce344873efb6d039b5bf1e030235
Validity
Not Before: Mar 24 14:39:11 2021 GMT
Not After : Mar 24 14:39:11 2026 GMT
Subject: CN=9cef4cde8b75961324b954443d6ff89732b15440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:d8:f5:ad:10:0c:80:ee:83:8f:31:65:43:
bf:5a:53:e4:a8:90:d0:8c:b8:6d:84:ae:19:4d:48:
a6:b1:85:6b:e0:5f:da:44:92:df:0d:0e:22:f9:45:
89:70:74:63:ea:fb:16:86:02:2e:41:9a:74:eb:a7:
1c:42:93:94:92:9e:1f:b8:2b:a1:d8:24:26:1c:79:
dd:9e:2c:94:41:b7:37:64:80:c1:40:f1:78:30:00:
72:af:4b:bf:3b:75:ba:9a:04:7f:c9:00:c6:7c:34:
fa:74:b2:cb:65:63:56:a2:f3:c3:82:83:cb:f7:87:
cd:de:e1:65:f0:21:d8:da:ed:51:c8:95:ca:a7:10:
6b:cf:60:17:0f:64:b7:45:6f:2d:30:8e:ed:e9:e4:
bb:b1:e1:e5:3f:df:a0:55:ab:b7:27:7b:79:ac:99:
1b:96:65:57:4d:ae:f1:65:bc:1b:56:e8:56:37:57:
0f:02:f4:70:a9:ee:3e:4f:85:63:fe:ee:be:9c:22:
dc:a4:2c:e5:0b:d3:2f:e6:67:fc:fb:75:fa:dd:36:
94:b4:5a:73:81:da:98:11:de:af:cc:6d:63:a7:33:
2f:9c:70:ab:7d:b7:56:5a:39:87:36:c8:54:cf:43:
f0:55:41:f9:4f:6b:aa:2e:32:5a:82:4e:8b:5d:3e:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:46:87:5B:FA:9A:28:B0:B4:1B:C6:C9:2E:7D:0D:38:2E:0F:C7:19
X509v3 Authority Key Identifier:
keyid:04:B8:C4:EA:F7:79:2E:CF:D6:C2:01:3D:72:7D:1C:CB:51:E0:0A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a021501bf713ce344873efb6d039b5bf1e030235.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/9cef4cde8b75961324b954443d6ff89732b15440.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b565a079-f5da-4db2-9b4a-2d09ad6b68c8/a021501bf713ce344873efb6d039b5bf1e030235.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.254.29.0-170.254.31.255
Signature Algorithm: sha256WithRSAEncryption
63:5f:6e:35:4f:43:eb:1f:41:2a:de:e4:2b:1f:66:4c:bc:14:
2a:60:7e:ef:53:6e:88:b5:72:39:ab:df:85:ed:c9:4e:8e:17:
19:f0:2d:8e:23:45:10:21:05:8e:aa:3d:10:05:6c:67:f4:0f:
93:70:a3:91:8b:1a:40:24:b8:6b:44:b8:f4:3c:68:4b:2c:39:
e9:59:ff:a1:91:17:91:c2:62:85:c2:b8:89:75:a9:0b:3a:ac:
22:58:53:f8:65:19:dd:8a:95:7d:ac:9f:d8:2a:f6:53:08:42:
b9:19:13:b5:12:f2:d5:18:85:96:b4:d4:ce:32:e8:1d:20:cb:
ff:8e:f5:8b:09:1d:13:59:8e:cc:7c:a6:4c:cd:d7:1f:47:0a:
34:b4:f7:07:58:ae:8c:1d:3d:db:fb:29:36:76:f5:45:92:70:
5e:5b:a6:5f:28:f1:57:6a:ad:cb:43:39:17:dc:2e:32:30:52:
fb:9a:2a:07:68:38:b1:d0:3a:3a:bc:df:b6:82:c9:cb:95:ec:
e6:91:00:42:4b:bf:ce:ee:99:f4:bb:7a:03:f4:d8:c8:8d:42:
c7:8f:c8:ce:ea:b6:b4:2a:11:5c:45:ed:7e:f6:62:f3:60:ae:
5b:70:a2:e9:c9:37:45:be:4e:27:00:ef:93:af:c6:5b:fc:0e:
1d:f9:a4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org