Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/d64e7fa53a0e148af0a354922a7adef567480761.roa
File: d64e7fa53a0e148af0a354922a7adef567480761.roa (raw, json)
Hash identifier: YLUZ7JQtLdMogdjZ3dM4Li270uG3fNxKdTd3EhJbT1A=
Subject key identifier: 1B:1A:6A:5B:DA:18:37:61:46:F7:11:5A:2E:D2:5E:3F:6A:03:1F:D0
Certificate issuer: /CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Certificate serial: 2630AE
Authority key identifier: B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/d64e7fa53a0e148af0a354922a7adef567480761.roa
Signing time: Wed 03 Jan 2024 21:10:48 +0000
ROA not before: Wed 03 Jan 2024 21:10:48 +0000
ROA not after: Sat 03 Jan 2026 21:10:48 +0000
asID: 21575
IP address blocks: 148.102.71.0/24 maxlen: 24
148.102.72.0/24 maxlen: 24
148.102.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2502830 (0x2630ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Validity
Not Before: Jan 3 21:10:48 2024 GMT
Not After : Jan 3 21:10:48 2026 GMT
Subject: CN=d64e7fa53a0e148af0a354922a7adef567480761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:87:ea:39:ed:95:16:bf:28:d9:54:71:c2:
b5:0a:25:61:e3:50:a5:75:a3:de:22:14:fc:40:59:
ab:6f:11:a6:bf:f8:89:e8:97:5b:89:f2:c3:01:62:
d2:3c:d7:25:0d:fe:45:2a:21:ff:91:e6:b9:dd:3b:
54:85:51:17:32:99:9f:b9:ac:1e:bf:7d:eb:9d:0e:
24:97:fd:9f:90:ff:49:fb:f5:30:64:a4:6d:f6:a2:
34:9f:f3:2a:3b:b2:51:5d:ff:06:9a:78:d6:d1:46:
0d:39:92:7e:23:b5:db:bc:00:81:c1:0d:7f:dc:7a:
3c:bb:2b:73:52:7b:e1:a3:39:78:89:67:34:23:ae:
c1:95:4f:d6:87:6a:9d:3f:6c:3e:6a:be:61:0a:d3:
a5:c5:c1:ce:ff:71:0b:3c:ba:9e:41:68:39:ea:c0:
f7:83:d1:f1:36:d8:fc:71:3f:e9:d0:e7:ed:89:d5:
c2:4b:cb:21:54:e8:82:dc:9f:5c:80:0f:bf:2f:d0:
00:1b:00:05:3f:10:e4:14:d3:d7:75:e5:16:ec:37:
4b:d5:94:33:35:d8:41:b0:33:ec:57:0a:fe:a3:78:
90:5d:d2:1c:75:83:d5:d7:28:bd:f2:77:e2:f2:45:
8c:eb:18:ba:f1:99:e4:e6:8a:5e:42:0e:a2:25:be:
ad:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1A:6A:5B:DA:18:37:61:46:F7:11:5A:2E:D2:5E:3F:6A:03:1F:D0
X509v3 Authority Key Identifier:
keyid:B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/d64e7fa53a0e148af0a354922a7adef567480761.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.71.0-148.102.73.255
Signature Algorithm: sha256WithRSAEncryption
72:c5:b4:50:6c:47:a6:01:7a:e3:df:42:8f:37:ce:cf:1f:37:
d6:8e:47:87:3d:1e:c5:19:cc:59:44:9f:80:d6:6c:2c:64:61:
6a:17:37:04:eb:82:82:fe:2f:62:f4:e8:b3:f6:4b:53:ba:2a:
ac:d9:2a:e9:c4:6c:ea:eb:23:d6:f0:df:f1:67:87:28:bb:66:
b9:06:66:4b:8f:5d:df:8e:8a:68:d3:f9:68:c7:72:e4:46:dd:
07:46:74:ed:aa:d0:2b:25:d6:64:d3:b0:92:cf:1e:64:aa:7d:
fd:8c:c9:51:30:22:87:7a:fc:ed:03:38:db:b6:8a:af:4f:a1:
24:96:45:24:50:16:38:40:de:43:dd:d0:46:4c:bc:ed:8d:b6:
d1:cd:a0:9e:57:c1:47:c7:30:fa:f9:ee:2a:48:24:1b:85:2e:
16:b5:00:a0:70:c7:56:cf:43:d9:28:a2:59:50:60:81:8c:51:
16:48:3b:0e:b9:e1:24:07:ed:da:bd:eb:30:36:a2:dc:cb:07:
9b:bc:8b:04:aa:16:7c:e4:d1:27:63:b6:e8:f5:07:02:03:29:
48:17:dc:5e:d4:4a:a2:a5:02:23:00:c2:08:b0:13:ef:e9:74:
85:69:71:70:3d:a8:e3:a1:6e:50:15:a6:a2:2e:0f:9e:33:f3:
9b:d5:d7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org