Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/5edbc59805ea60fcb32fbc870c27d32735e583f9.roa
File: 5edbc59805ea60fcb32fbc870c27d32735e583f9.roa (raw, json)
Hash identifier: eQkLVxGbOCud6VdZvC4n+Y7bGl+L2+GNQWteWljXKcE=
Subject key identifier: C1:7B:9F:A5:B8:8D:9F:69:C6:BF:56:C5:54:C6:F1:16:E6:31:2F:E1
Certificate issuer: /CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Certificate serial: 262947
Authority key identifier: B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/5edbc59805ea60fcb32fbc870c27d32735e583f9.roa
Signing time: Wed 03 Jan 2024 17:11:44 +0000
ROA not before: Wed 03 Jan 2024 17:11:43 +0000
ROA not after: Sat 03 Jan 2026 17:11:43 +0000
asID: 21575
IP address blocks: 148.102.1.0/24 maxlen: 24
148.102.80.0/24 maxlen: 24
148.102.81.0/24 maxlen: 24
148.102.82.0/24 maxlen: 24
148.102.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2500935 (0x262947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Validity
Not Before: Jan 3 17:11:43 2024 GMT
Not After : Jan 3 17:11:43 2026 GMT
Subject: CN=5edbc59805ea60fcb32fbc870c27d32735e583f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:16:35:9c:0c:15:e0:a3:a9:9e:db:56:07:
40:8e:c0:97:93:d6:af:c3:35:e5:37:d0:e6:dd:fe:
51:8e:72:ca:45:14:fd:b6:e4:1e:64:ba:3c:75:2e:
4f:d7:f6:07:46:48:39:d8:c7:a0:fc:13:58:27:b7:
8d:74:76:ff:e3:e6:3c:b0:23:ef:2d:8a:07:d0:41:
b5:9b:f1:36:44:03:1a:b2:70:28:06:08:56:e0:e1:
2f:95:bb:c8:ec:c8:08:8c:e5:32:77:4a:f5:5e:11:
6d:6d:d8:76:16:44:7b:55:a0:54:42:26:90:77:0a:
48:f8:de:ca:a5:f8:06:49:0b:ef:6d:02:79:8b:18:
7d:eb:95:00:28:8d:71:d9:9e:d1:8e:3e:20:27:9e:
24:2a:ec:e0:d7:76:59:23:80:9e:48:fe:3c:f8:21:
3e:f5:27:d4:59:f4:3d:a5:77:8c:1c:c0:24:ec:3f:
9a:de:d6:94:d3:43:ac:a8:8e:ca:a3:7a:e6:58:ed:
ca:a0:ae:f9:8e:e5:c2:74:5a:48:80:46:3e:a1:28:
cb:bd:f7:a8:90:18:0e:e3:cc:39:f4:56:e3:76:f9:
d0:a4:09:46:48:42:97:98:2b:29:91:11:cc:9d:87:
00:e8:b3:8d:31:c2:c6:3e:74:d5:6a:c0:e3:6f:d9:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7B:9F:A5:B8:8D:9F:69:C6:BF:56:C5:54:C6:F1:16:E6:31:2F:E1
X509v3 Authority Key Identifier:
keyid:B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/5edbc59805ea60fcb32fbc870c27d32735e583f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.1.0/24
148.102.80.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:b8:27:98:7f:1f:99:b4:a2:98:be:9f:5e:9e:0c:8b:4f:07:
86:38:5e:3a:0c:c7:57:60:ec:71:69:9e:ec:82:eb:cb:cf:be:
e7:55:36:dd:d7:d0:df:52:42:22:63:9c:b1:14:ea:1b:75:da:
d0:a7:01:cb:19:50:36:04:47:de:9c:8c:c1:17:ed:10:ce:79:
19:fd:de:78:fd:4d:84:d3:8b:d6:56:8a:a0:3e:39:a0:23:5b:
73:1d:de:b6:39:bc:f4:04:6c:5b:43:e3:01:2a:60:ab:e4:52:
9e:b4:6c:89:0a:48:a2:3d:4d:70:7e:51:5f:36:cc:b5:48:46:
40:a3:dd:2a:63:44:02:17:c3:b3:ba:05:8e:be:50:2e:c4:48:
d7:9e:0a:1f:5e:e3:b2:d0:69:78:5d:65:b0:fd:b8:35:ec:9a:
9f:08:c2:fb:83:18:42:a4:41:ea:6d:8a:3a:8a:22:06:92:e9:
df:60:e7:35:fe:8d:d2:94:97:f1:25:54:e7:e1:ea:6c:11:db:
00:4a:24:dc:1b:35:97:a1:90:de:ed:90:ab:78:af:ef:2c:9d:
33:35:f8:70:07:e4:c3:06:60:9d:da:c9:59:99:1b:9a:ed:bf:
6c:01:29:33:65:d4:0c:db:e0:71:4c:c4:36:d2:00:d3:8c:0a:
94:62:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org