Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/032b55cc2c096fc2e191567e4a93f3fd8bfcc04f.roa
File: 032b55cc2c096fc2e191567e4a93f3fd8bfcc04f.roa (raw, json)
Hash identifier: QVBbOIRSy/8bippAbqOtxKL7GcC39oNDG1ZpVVlajEw=
Subject key identifier: BE:4F:92:BA:0E:64:1A:4B:94:2E:94:CF:41:4F:CA:96:08:A5:91:C0
Certificate issuer: /CN=466e43c330240907a2659f129b7552a9a8972ea2
Certificate serial: 1221F8
Authority key identifier: 30:D7:9D:1F:5F:2A:04:ED:DF:25:CD:16:DC:A6:96:E5:65:07:97:7C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e43c330240907a2659f129b7552a9a8972ea2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/032b55cc2c096fc2e191567e4a93f3fd8bfcc04f.roa
Signing time: Thu 29 Jun 2023 08:30:01 +0000
ROA not before: Wed 28 Jun 2023 08:30:01 +0000
ROA not after: Fri 27 Jun 2025 08:30:01 +0000
asID: 271872
IP address blocks: 128.201.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1188344 (0x1221f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=466e43c330240907a2659f129b7552a9a8972ea2
Validity
Not Before: Jun 28 08:30:01 2023 GMT
Not After : Jun 27 08:30:01 2025 GMT
Subject: CN=032b55cc2c096fc2e191567e4a93f3fd8bfcc04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:ec:87:99:0a:95:9e:ea:86:88:a1:1d:cb:
05:24:f4:01:cb:1a:07:6f:97:c8:30:0f:d5:c4:73:
7e:f6:4c:12:e7:c5:85:9a:da:55:a4:92:06:8b:a7:
5f:10:94:53:76:0b:35:26:8e:cc:51:ce:67:74:33:
1b:0f:f3:26:ed:c2:43:c3:1b:c0:15:db:2f:01:be:
79:62:a9:6d:d6:cd:a6:1b:09:f5:91:a3:de:6b:03:
8d:1c:69:05:2a:9d:55:e3:c2:a4:1f:39:6f:20:fa:
eb:56:4a:86:a0:09:04:ff:39:9f:1c:92:81:62:35:
f3:0c:31:d0:ff:de:fe:1c:ae:ba:f5:85:28:ce:4d:
dc:72:5c:06:70:80:91:1a:11:a6:d7:1f:e7:83:33:
22:1b:19:04:11:db:1d:e3:05:80:37:8b:1b:e4:91:
cc:f7:41:b7:a0:85:00:c2:00:42:3e:3c:d5:55:ee:
51:97:ad:71:12:0d:34:97:d1:40:af:10:94:6c:03:
7a:7e:e6:14:48:c3:61:f6:0a:77:01:90:bb:63:6f:
97:87:e4:7f:4e:fc:81:d2:d4:e3:c8:ef:e3:65:6f:
5f:aa:b8:fb:22:82:31:83:45:98:9b:1e:bf:34:f6:
fd:6b:76:56:14:43:9d:5f:0b:66:74:ed:66:14:f6:
41:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4F:92:BA:0E:64:1A:4B:94:2E:94:CF:41:4F:CA:96:08:A5:91:C0
X509v3 Authority Key Identifier:
keyid:30:D7:9D:1F:5F:2A:04:ED:DF:25:CD:16:DC:A6:96:E5:65:07:97:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e43c330240907a2659f129b7552a9a8972ea2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/032b55cc2c096fc2e191567e4a93f3fd8bfcc04f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/466e43c330240907a2659f129b7552a9a8972ea2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.224.0/22
Signature Algorithm: sha256WithRSAEncryption
49:b8:32:59:80:ed:35:bf:51:21:93:04:96:0e:1d:5a:b9:aa:
cd:db:63:01:b9:45:46:17:be:0b:09:cb:42:7e:cd:61:53:1f:
60:00:9c:cb:e4:da:9f:e7:ac:3b:ea:07:69:2d:b9:98:0f:70:
6c:2f:57:52:ea:97:f3:32:6b:2e:e2:c0:ca:be:5c:f1:09:2c:
6c:09:30:33:3c:60:50:52:d7:17:ac:0e:68:ec:54:9e:c7:88:
38:0d:26:09:70:5f:6a:89:89:d8:f0:8d:1c:76:2a:f4:f9:b9:
3c:db:8c:33:17:d7:ca:03:ee:58:a4:96:85:ef:cb:22:35:1d:
b9:c7:48:93:ea:e3:63:89:ae:28:6c:70:40:0e:04:4f:8c:b6:
c8:2e:5c:32:ce:15:3c:cb:70:c2:e9:cd:81:ad:8b:98:bc:7d:
02:55:23:79:96:b5:76:08:99:f8:65:0d:10:4e:44:d1:a0:62:
20:96:6d:38:e0:c2:b9:7a:ba:1b:63:4c:0c:95:b8:13:c9:6f:
91:4d:bb:c4:a8:25:53:ad:30:f8:a5:b6:c3:57:f6:18:8a:70:
51:52:d1:d6:b8:65:e4:f2:ec:17:4d:54:ae:98:74:80:72:ad:
4f:43:c6:ab:cb:5d:b7:41:22:11:44:74:06:c4:03:e8:49:3c:
65:f6:d4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org