Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/921d1f10f1a713ee598ec94922f7c66f98a58c85.roa
File: 921d1f10f1a713ee598ec94922f7c66f98a58c85.roa (raw, json)
Hash identifier: UX2k6DnmovyugM0TQMnQ67cxB4H22Kdhqdo9lwLrshU=
Subject key identifier: FA:1B:5E:48:8F:EA:F9:3B:AA:34:2D:B5:CC:86:3C:85:8C:FE:C3:5B
Certificate issuer: /CN=1ab4cfb08cddc1c4955a44753b824141fa054bf0
Certificate serial: 054F
Authority key identifier: 45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/921d1f10f1a713ee598ec94922f7c66f98a58c85.roa
Signing time: Tue 01 Feb 2022 18:24:14 +0000
ROA not before: Tue 01 Feb 2022 03:00:00 +0000
ROA not after: Thu 01 Feb 2024 03:00:00 +0000
asID: 264761
IP address blocks: 168.195.184.0/24 maxlen: 24
2803:a0c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab4cfb08cddc1c4955a44753b824141fa054bf0
Validity
Not Before: Feb 1 03:00:00 2022 GMT
Not After : Feb 1 03:00:00 2024 GMT
Subject: CN=921d1f10f1a713ee598ec94922f7c66f98a58c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:90:ba:d7:1b:0d:e8:67:30:a7:94:09:93:76:
c6:95:e5:19:74:e1:83:9b:24:8d:04:cb:3f:90:7a:
10:a1:89:39:bb:20:70:28:e7:2e:6a:f0:af:d4:e1:
7d:1d:db:62:b5:a1:5f:95:3a:86:40:0b:6a:7f:c9:
38:4e:b5:3a:08:e6:3c:6a:3d:c3:73:34:7b:65:d6:
8b:92:75:d4:1c:fc:76:6d:93:b8:8c:a1:8a:8b:d7:
49:4a:9d:11:34:de:d8:86:e0:6a:42:d8:5c:71:5c:
22:4c:19:18:96:9f:f4:37:54:88:8d:db:93:e0:90:
7a:0f:54:a8:a5:3c:e4:9a:8c:ec:a8:f4:e0:90:d9:
d2:be:37:04:ed:85:8e:72:8a:b0:12:00:8d:76:34:
ce:c4:8b:64:59:18:94:fb:24:76:be:db:9c:40:0a:
52:85:ca:56:77:fc:47:0b:88:57:80:28:d2:c6:e7:
8a:62:bb:ac:50:a3:19:a8:14:ea:90:f3:2c:f3:c0:
94:af:56:50:ad:54:bd:1b:19:2d:52:af:26:88:64:
37:87:a0:a1:ab:94:83:c9:71:ce:88:bc:2f:0b:87:
cb:44:08:c5:f7:63:e9:f6:0d:f1:74:e1:ac:7a:c7:
80:8f:5d:97:6a:99:3d:41:fc:f2:b9:c7:8f:2c:85:
b6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1B:5E:48:8F:EA:F9:3B:AA:34:2D:B5:CC:86:3C:85:8C:FE:C3:5B
X509v3 Authority Key Identifier:
keyid:45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/921d1f10f1a713ee598ec94922f7c66f98a58c85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/1ab4cfb08cddc1c4955a44753b824141fa054bf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.184.0/24
IPv6:
2803:a0c0::/32
Signature Algorithm: sha256WithRSAEncryption
45:8d:f0:1e:87:99:04:b2:76:23:a7:90:f3:a0:bf:44:e6:bb:
ec:f7:76:6b:a9:3c:65:96:87:2b:04:1b:2b:eb:1e:16:f6:9a:
82:4e:7a:65:de:6d:3b:5a:c1:e5:33:f1:0a:d9:13:50:3d:5f:
c2:18:5b:4d:d0:46:d3:ef:87:95:a7:60:4f:ca:9b:72:3b:79:
c2:e1:1e:a8:d5:38:28:d4:51:1b:60:24:94:b1:bd:14:12:cd:
f3:50:70:10:56:ed:8e:8e:3a:66:15:f7:b3:33:60:84:db:4f:
ff:b6:29:8d:19:3a:30:6a:4f:24:89:67:a7:83:2f:b7:bf:c3:
68:ff:17:61:95:36:90:4b:29:f8:96:69:ff:51:61:2a:90:3f:
33:6d:18:99:20:07:e8:a9:02:2d:ba:f3:7a:0d:bc:7b:d8:ff:
f7:c9:06:ed:cb:0f:50:98:cb:0a:88:6f:da:42:6e:1b:e2:06:
6d:a3:b4:3f:79:63:f9:33:69:f0:ca:94:07:bc:c6:17:f6:09:
ab:f2:1f:ec:ea:c9:9c:58:fc:41:86:c4:62:d7:0c:4e:c3:a4:
cc:3f:02:3e:0c:bb:62:47:21:8c:d8:29:6f:33:6e:05:c4:20:
8a:f4:ee:79:7d:b2:3f:82:29:38:fb:84:14:08:bf:8d:e8:f9:
7e:92:9a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org