Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/cd89f620cdb601d10696dfb1db5e13057eb99779.roa
File: cd89f620cdb601d10696dfb1db5e13057eb99779.roa (raw, json)
Hash identifier: PYbSLW9XZYxcKEr//JiRFRzxJWrKHM/3ZYFtgb6UTFQ=
Subject key identifier: D2:C5:EA:46:16:6C:07:E7:66:B6:A8:5A:07:A2:18:B2:01:31:9B:F2
Certificate issuer: /CN=1ab4cfb08cddc1c4955a44753b824141fa054bf0
Certificate serial: 114B3B
Authority key identifier: 45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/cd89f620cdb601d10696dfb1db5e13057eb99779.roa
Signing time: Wed 31 Jan 2024 07:30:06 +0000
ROA not before: Wed 31 Jan 2024 07:30:06 +0000
ROA not after: Fri 30 Jan 2026 07:30:06 +0000
asID: 264761
IP address blocks: 168.195.186.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133371 (0x114b3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab4cfb08cddc1c4955a44753b824141fa054bf0
Validity
Not Before: Jan 31 07:30:06 2024 GMT
Not After : Jan 30 07:30:06 2026 GMT
Subject: CN=cd89f620cdb601d10696dfb1db5e13057eb99779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:76:65:1b:87:df:89:36:38:80:df:d9:a3:
3a:2a:f6:c4:19:f3:aa:ae:6f:da:e4:7d:da:d1:2d:
89:a2:36:5a:ec:18:cb:3b:e3:25:50:dc:1a:2a:98:
a8:38:20:ea:b4:4b:df:44:45:35:b4:d0:03:8b:4d:
f5:3a:ff:aa:e7:95:08:13:37:af:18:da:99:37:9b:
a0:be:87:94:51:f0:b0:1f:89:cf:0f:41:cd:d7:99:
1c:04:bc:4f:01:a2:ee:71:69:6a:c1:80:3c:07:c0:
1f:74:d4:2f:db:96:05:8b:ad:4f:11:05:ce:73:d3:
91:45:21:67:64:a8:50:76:be:65:8a:bd:08:37:c7:
b1:69:89:ae:0d:98:48:d2:a3:14:94:8e:a5:a3:67:
4e:b1:a8:db:28:e6:94:b5:6b:d8:48:6f:17:b4:4b:
03:f3:4e:10:ba:10:55:91:bc:d3:50:7c:d9:54:2a:
a7:de:ea:49:b8:b4:0d:b1:af:44:bd:6d:fc:24:ba:
30:65:04:d9:74:8b:ed:78:62:18:58:6a:4f:aa:a1:
8f:ae:50:6c:19:3e:6d:8f:de:94:3a:7e:cd:b8:3b:
8f:a9:92:0c:af:b8:d0:38:f4:71:9d:d5:c9:c0:34:
eb:2d:e0:80:9e:a7:bf:56:7d:a1:6d:bc:ae:c5:7f:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C5:EA:46:16:6C:07:E7:66:B6:A8:5A:07:A2:18:B2:01:31:9B:F2
X509v3 Authority Key Identifier:
keyid:45:8C:76:C8:55:34:08:4E:89:4A:78:DF:78:67:81:3E:AE:F7:70:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab4cfb08cddc1c4955a44753b824141fa054bf0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/cd89f620cdb601d10696dfb1db5e13057eb99779.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c1b4bb15-338f-4543-8531-954841ac7b0b/1ab4cfb08cddc1c4955a44753b824141fa054bf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.186.0/23
Signature Algorithm: sha256WithRSAEncryption
39:bc:51:f1:7f:9a:17:7a:27:22:67:21:28:e1:05:a3:f6:e4:
62:60:3b:6b:c6:0d:a3:4f:1e:9a:ff:49:6f:94:99:22:5a:b8:
0f:a3:98:a8:b5:81:cf:f2:89:57:29:58:2b:51:0c:32:48:d4:
d8:22:e3:da:f9:01:73:f2:ac:dd:cd:65:94:13:05:06:44:15:
a7:f1:f7:a2:a2:4f:dd:bd:45:fa:1a:09:11:d8:34:29:f8:e4:
24:59:be:17:1b:56:a0:93:32:06:9a:21:ed:40:92:9b:25:f9:
5d:80:cb:3f:55:ad:a6:c9:d5:00:25:02:a4:5d:e7:50:51:68:
62:24:39:2f:a4:68:73:62:a6:3d:8d:2c:12:6b:72:33:a7:e0:
9e:a6:37:cd:3e:a2:1f:5b:1b:2a:f2:e9:b9:94:4d:bd:b1:a6:
ea:a3:a7:4f:96:22:ea:0a:9e:b7:5e:46:4a:94:79:b6:0e:50:
06:3f:4c:85:f9:85:9c:61:16:17:d3:5c:95:5d:17:a5:25:ae:
6a:07:fc:bf:ff:2b:bc:8e:8d:9e:2a:05:a9:6b:fd:ca:ed:10:
d6:bf:e8:3d:94:0f:63:74:17:7d:c5:79:91:9e:64:98:65:58:
98:d9:b7:79:9b:32:8e:02:6e:18:c2:35:4f:bb:e0:9c:8c:78:
95:db:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org