Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/348efc58b1ae643f7934b3d6bfa4a3984093d544.roa
File: 348efc58b1ae643f7934b3d6bfa4a3984093d544.roa (raw, json)
Hash identifier: t1xQ1pq8CpyoUyLMwVsdg5xLYIWD7aqUYwBstnafrDQ=
Subject key identifier: 7F:36:D5:AB:BD:11:35:E9:63:1C:B8:CB:8A:46:72:07:6E:FA:1F:53
Certificate issuer: /CN=8ec75d0ca59e365a5c0a68c7f4ea3709b805a441
Certificate serial: 1DD376
Authority key identifier: 12:96:28:D8:49:3C:C6:4B:7E:44:C0:23:24:58:62:CA:E6:F8:97:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/348efc58b1ae643f7934b3d6bfa4a3984093d544.roa
Signing time: Wed 07 Jun 2023 12:39:24 +0000
ROA not before: Tue 06 Jun 2023 12:39:24 +0000
ROA not after: Sat 07 Jun 2025 12:39:24 +0000
asID: 264795
IP address blocks: 170.238.40.0/22 maxlen: 24
2803:a4c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1954678 (0x1dd376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec75d0ca59e365a5c0a68c7f4ea3709b805a441
Validity
Not Before: Jun 6 12:39:24 2023 GMT
Not After : Jun 7 12:39:24 2025 GMT
Subject: CN=348efc58b1ae643f7934b3d6bfa4a3984093d544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:a8:9d:7a:94:18:91:ee:b9:ee:46:5a:27:
87:03:10:ef:9e:b2:28:1a:69:02:8a:c5:5c:85:27:
9d:90:a8:50:e1:1c:d3:f1:02:6e:a2:38:b5:3e:8f:
4e:da:86:96:56:71:8a:92:e4:61:35:dd:3b:fa:a1:
91:c2:81:04:f4:04:0e:62:0d:2c:ab:29:52:cf:35:
b2:d0:f1:65:d2:82:d0:8e:e3:0d:5c:8e:3e:59:12:
c0:1b:cd:a2:b4:a9:5f:2d:c9:a6:2c:2a:75:5e:bc:
eb:97:61:51:b2:df:a8:e1:50:b7:c1:fa:8a:69:a9:
f7:37:d9:91:39:27:01:da:2c:ba:81:ff:e7:4a:96:
12:48:f8:9b:7d:36:0c:94:a4:f5:44:49:51:14:3e:
6e:dd:79:fc:a0:a3:be:c9:7e:94:c7:92:67:31:b6:
bc:1a:45:aa:d0:4b:be:b9:6c:33:17:d2:c0:86:4b:
00:e8:9c:02:a6:be:fd:b3:66:ec:68:75:da:82:c0:
41:ad:e2:ec:db:7c:40:e5:d9:fe:55:60:3a:1a:75:
e8:84:f6:b6:ff:a6:81:74:3b:1b:29:c2:b8:36:a6:
07:d8:f1:62:41:4d:b0:e2:11:d9:b6:8a:62:fb:c9:
7e:fb:99:d6:c6:8e:45:ab:21:ff:10:0d:a3:b0:62:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:36:D5:AB:BD:11:35:E9:63:1C:B8:CB:8A:46:72:07:6E:FA:1F:53
X509v3 Authority Key Identifier:
keyid:12:96:28:D8:49:3C:C6:4B:7E:44:C0:23:24:58:62:CA:E6:F8:97:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/348efc58b1ae643f7934b3d6bfa4a3984093d544.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ba3719ef-e327-489c-a545-54f5ae5c0a8d/8ec75d0ca59e365a5c0a68c7f4ea3709b805a441.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.40.0/22
IPv6:
2803:a4c0::/32
Signature Algorithm: sha256WithRSAEncryption
59:67:d3:41:9c:23:60:ae:27:05:3a:da:10:9f:4e:9e:00:d0:
16:74:c6:39:8c:89:f1:63:a1:db:ab:e1:95:41:89:55:f1:2c:
0b:b2:9d:6d:0e:89:41:75:4e:77:c5:a4:62:48:f0:1b:57:7a:
a1:c4:f8:e0:fd:23:71:37:f5:bb:14:b8:f9:30:18:c3:d6:e8:
16:73:10:38:41:b6:8f:c9:09:90:98:fb:cd:e4:a7:ad:18:37:
a2:d5:97:51:97:68:ff:d6:8c:8b:c9:b4:82:c5:16:76:91:bf:
5b:4d:70:c0:c9:b5:e8:0b:06:de:4d:0d:6f:1b:15:e3:33:13:
fd:48:9f:89:a6:21:53:ad:a9:a2:de:f5:cf:26:b5:c8:db:45:
90:cb:db:15:c8:09:41:7f:76:ad:c9:b0:d1:bd:93:c7:91:f3:
a8:20:d3:38:fc:e7:31:23:d9:05:60:49:43:f0:0f:f4:ad:3e:
93:fb:52:d0:a8:9c:57:d5:04:e9:e9:b5:4f:5c:e0:08:06:17:
b6:75:8b:db:14:9a:f5:c5:bd:d6:ca:a6:27:ff:8e:e0:d0:af:
fb:b4:fd:57:6f:d9:e3:59:38:5f:44:08:d6:fa:93:4d:69:aa:
3a:15:95:5d:e3:3e:d9:16:79:68:39:45:e2:45:6e:fc:7d:9b:
2a:e5:fa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org