Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/394eef4d6940c0486684d3793a65b31af6faf853.roa
File: 394eef4d6940c0486684d3793a65b31af6faf853.roa (raw, json)
Hash identifier: PD+yzIaMiaBeRqN9Yl+q1wedxBJoFTA3Ktg5JKez3hI=
Subject key identifier: 35:65:61:6A:06:6C:56:2D:1E:A4:F9:F2:30:24:76:A1:D5:C9:B4:CA
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 26E8BC
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/394eef4d6940c0486684d3793a65b31af6faf853.roa
Signing time: Wed 30 Aug 2023 17:50:42 +0000
ROA not before: Tue 29 Aug 2023 17:50:30 +0000
ROA not after: Sat 30 Aug 2025 17:50:30 +0000
asID: 34991
IP address blocks: 152.204.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2549948 (0x26e8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Aug 29 17:50:30 2023 GMT
Not After : Aug 30 17:50:30 2025 GMT
Subject: CN=394eef4d6940c0486684d3793a65b31af6faf853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:70:4f:04:75:74:bc:bf:8c:ff:48:95:90:
c9:f8:a8:8a:3a:11:76:29:15:69:9a:f0:52:f2:ca:
b6:3a:83:62:7f:38:54:95:1c:3b:23:65:4f:86:53:
bb:b4:84:31:74:51:f8:14:b7:e2:2a:6a:31:18:d3:
21:06:de:83:97:32:e8:18:e0:4b:fb:0c:cd:d1:4b:
e4:b1:7b:16:98:3e:18:d3:73:25:29:5e:5a:6c:44:
1c:6f:3c:68:e3:4e:2f:66:fc:60:04:62:61:38:63:
74:33:77:7d:ef:23:b4:21:44:3e:49:d2:21:72:c4:
55:b4:e0:61:e2:7c:ee:c0:ba:e0:d0:1f:09:45:f5:
e0:fe:f0:da:91:ac:82:7e:99:73:36:64:97:3a:10:
ce:4d:6c:aa:4c:bd:41:23:54:4b:1b:3c:6e:10:cf:
4f:01:f8:86:69:70:64:df:5e:f2:92:95:df:be:d1:
f7:7c:65:55:f6:fe:56:a7:bb:3b:52:b4:2c:7d:2f:
88:e6:5a:ba:22:b4:20:b5:66:52:77:53:eb:5c:88:
e6:eb:09:53:e6:48:f3:a8:9c:35:06:0e:af:6e:9e:
3e:3e:2e:13:9c:0f:30:a8:a6:23:a5:5f:35:63:fd:
d6:cd:fd:61:0a:83:b6:7a:a5:22:a9:d1:01:23:65:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:65:61:6A:06:6C:56:2D:1E:A4:F9:F2:30:24:76:A1:D5:C9:B4:CA
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/394eef4d6940c0486684d3793a65b31af6faf853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.204.132.0/23
Signature Algorithm: sha256WithRSAEncryption
80:9b:dd:f5:29:e4:fd:de:e3:06:45:f2:c3:22:38:9f:b3:19:
28:ae:3b:e0:2e:99:a8:e2:ce:61:73:06:aa:a2:fd:7e:87:f5:
f8:63:e2:e3:e5:20:a8:b4:a4:dd:1f:0f:59:2c:2a:3d:49:f5:
51:a5:b0:c2:aa:12:54:ae:9f:83:9c:07:8f:c7:fe:b6:f0:5d:
ec:16:47:71:67:ea:55:af:e9:1a:28:c4:39:81:aa:05:4b:46:
e6:87:78:b6:4e:c0:24:a2:ab:6a:99:d9:2f:24:ed:4e:2e:6a:
e9:4f:62:8b:71:7c:d7:0c:ce:1f:c4:ff:f0:22:7f:b5:f6:c9:
b3:b9:06:58:e2:61:57:64:57:90:6f:53:8e:e9:26:9e:8f:1c:
d3:32:e2:05:1f:3c:39:38:09:b4:34:62:59:05:f5:19:fe:a9:
ca:da:13:b5:ae:44:ef:a5:34:f3:f8:91:7d:ee:9a:b0:da:82:
32:0b:2a:76:79:9b:8e:dd:bd:09:b7:6c:f5:7f:c3:74:39:76:
56:c2:d4:c0:23:0a:61:2d:82:47:b2:63:d8:7a:c5:55:f1:d9:
1c:03:48:5e:8d:81:65:e1:7d:3a:de:fb:6e:4a:38:e2:67:48:
aa:bc:3e:c9:c8:41:99:81:16:77:78:c4:c7:a2:85:8a:12:4b:
2d:87:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org