Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/5c9b19d558257183aa6ea509def1041709500141.roa
File: 5c9b19d558257183aa6ea509def1041709500141.roa (raw, json)
Hash identifier: AP2OpGXx7XRcb2vUPY3eEjTjoBZUlQfAbJtHlJfu12s=
Subject key identifier: A9:41:35:25:EE:71:90:47:60:71:B7:BD:4E:9A:84:6D:4D:D4:59:06
Certificate issuer: /CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Certificate serial: 20FE7D
Authority key identifier: B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/5c9b19d558257183aa6ea509def1041709500141.roa
Signing time: Wed 14 Jun 2023 02:12:27 +0000
ROA not before: Tue 13 Jun 2023 02:12:26 +0000
ROA not after: Sat 14 Jun 2025 02:12:26 +0000
asID: 21575
IP address blocks: 148.102.112.0/22 maxlen: 24
148.102.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162301 (0x20fe7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Validity
Not Before: Jun 13 02:12:26 2023 GMT
Not After : Jun 14 02:12:26 2025 GMT
Subject: CN=5c9b19d558257183aa6ea509def1041709500141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:36:84:71:4c:4b:e4:e8:42:75:8b:a4:c6:a1:
28:40:b2:6d:c2:4d:a0:45:60:12:0f:47:b7:e1:18:
27:94:0c:8a:4d:94:fc:c4:4c:82:93:d8:29:54:1a:
89:cb:2e:ff:e4:17:5b:cd:77:1a:f1:98:52:fe:f9:
8c:21:55:2d:a9:1c:f0:37:88:d3:ae:25:e1:c0:b9:
de:ab:e6:1a:37:5b:e6:94:d3:1e:0d:2d:e5:ab:7e:
29:9a:86:0f:7b:bd:ed:24:eb:b1:99:36:bf:ce:ae:
1e:28:e9:ad:19:34:a6:f6:c4:d9:48:53:f4:1f:82:
96:09:eb:3e:43:de:2c:fc:3b:dc:15:5e:f7:b7:ff:
aa:f4:c3:41:1b:eb:5b:e8:d1:25:fc:ee:da:69:38:
5f:d2:cc:46:a8:32:ab:08:8f:76:18:ca:9f:84:d1:
1b:f4:18:1d:e7:6b:c9:41:9a:63:81:c1:ec:34:d6:
96:64:bd:d7:52:12:59:a8:01:55:83:3a:ab:54:93:
c9:b3:30:0a:4a:fc:2a:1c:6d:d6:9f:4c:33:0a:cf:
b1:28:7e:b3:08:49:fb:92:1b:7f:f8:df:89:08:0e:
79:b9:05:16:66:c9:2e:53:57:d5:9b:33:db:9f:5a:
f8:31:10:6f:98:c1:45:05:e6:bd:21:f4:45:ef:2a:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:41:35:25:EE:71:90:47:60:71:B7:BD:4E:9A:84:6D:4D:D4:59:06
X509v3 Authority Key Identifier:
keyid:B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/5c9b19d558257183aa6ea509def1041709500141.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.112.0-148.102.116.255
Signature Algorithm: sha256WithRSAEncryption
47:88:38:e7:f7:49:b4:59:56:41:9a:c2:c9:80:6d:6f:bb:80:
f8:eb:5c:c8:68:25:37:85:29:89:3c:e0:96:74:f2:00:a0:a2:
1e:39:7a:3b:f8:d4:2b:4d:82:cc:00:4a:94:a0:29:c2:da:de:
00:c3:d9:82:41:a6:36:50:93:b7:ef:32:67:9d:70:4b:0f:db:
8e:cb:3c:e2:74:6b:16:68:a5:58:fd:b9:f5:a1:24:96:83:de:
9a:05:c7:00:27:ec:d3:bc:ad:d7:fe:fe:d2:91:c9:ae:7f:79:
c7:16:34:6b:2b:72:80:92:20:75:db:fe:da:fb:ec:25:c9:25:
3e:2b:14:52:7e:eb:82:c9:40:e0:90:04:12:87:79:00:32:f2:
86:11:c8:23:a8:3c:45:44:88:05:91:c6:47:b0:f6:80:0f:e6:
a1:28:f4:18:03:b2:e1:5a:61:23:7e:f0:65:1c:6d:5b:68:af:
7d:94:08:a1:cc:d9:40:54:28:ec:b7:b8:2d:13:bc:2e:7f:fe:
3c:c3:c5:da:f1:cd:76:25:2f:f5:49:18:c6:1a:4a:92:43:63:
ca:d5:f4:73:a2:d6:c9:34:43:6b:27:9e:09:63:53:92:75:57:
59:88:d5:4d:13:c5:d7:64:cc:d1:83:9c:45:49:24:23:f9:76:
a5:f8:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org