Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9905e04-2ddf-437c-ab15-fa8bfe779afc/3641f7e79708918c461c3de76dbeccc02f616b72.roa
File: 3641f7e79708918c461c3de76dbeccc02f616b72.roa (raw, json)
Hash identifier: GMuymNGwbNG7eF0mscgqCdtAYtDNr2NEmg5cT4Ih0LA=
Subject key identifier: FB:20:15:2D:E2:C9:EE:85:92:B1:03:75:8C:34:33:E9:6C:F9:4D:9D
Certificate issuer: /CN=be05d4477a08a21f388bc1a263eb3e165d8e7a8f
Certificate serial: 264D04
Authority key identifier: 82:7E:02:03:A0:E8:51:8C:18:0B:B0:51:65:7B:37:9A:EA:9F:DB:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be05d4477a08a21f388bc1a263eb3e165d8e7a8f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c9905e04-2ddf-437c-ab15-fa8bfe779afc/3641f7e79708918c461c3de76dbeccc02f616b72.roa
Signing time: Thu 28 Dec 2023 17:41:07 +0000
ROA not before: Thu 28 Dec 2023 17:41:07 +0000
ROA not after: Sun 28 Dec 2025 17:41:07 +0000
asID: 262253
IP address blocks: 167.250.204.0/22 maxlen: 22
167.250.204.0/24 maxlen: 24
167.250.205.0/24 maxlen: 24
167.250.206.0/24 maxlen: 24
167.250.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2510084 (0x264d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05d4477a08a21f388bc1a263eb3e165d8e7a8f
Validity
Not Before: Dec 28 17:41:07 2023 GMT
Not After : Dec 28 17:41:07 2025 GMT
Subject: CN=3641f7e79708918c461c3de76dbeccc02f616b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:ae:59:bc:a6:5c:d0:ea:a0:49:8d:a7:b3:
70:24:cf:e3:7c:fd:42:3a:0e:8b:6b:19:bc:b4:29:
6b:22:79:88:be:bc:e6:89:04:d8:93:3d:8b:56:4a:
0e:30:11:2f:de:0f:18:de:45:47:dc:ef:16:f3:2e:
b5:10:3d:fa:87:19:f1:80:2a:01:38:b9:bc:06:69:
1b:dd:f4:c2:fa:5a:8f:0c:e9:32:c0:86:0c:c7:a5:
78:ff:d3:02:cc:e8:75:bf:fa:58:17:12:26:f4:c6:
a5:40:c8:64:03:5c:dd:99:c4:2c:cb:65:e9:00:b0:
b7:2e:d6:15:7a:d4:e1:06:98:fc:b4:61:97:1d:53:
19:19:0a:e6:d1:68:1e:0f:b2:48:22:7a:5c:b4:b1:
3c:41:63:a5:a8:9a:f5:6b:3d:7b:8e:d2:c5:d3:7c:
85:34:27:cc:49:b7:b4:b4:2d:53:79:e3:1e:c3:dc:
da:93:ae:fc:72:f2:7c:48:75:9b:23:48:42:bc:6e:
f0:b4:bf:1f:35:c4:21:56:1e:12:a8:38:9d:e9:87:
4f:26:71:66:aa:25:7b:d2:b1:02:03:9e:3f:ab:ac:
65:57:4c:fe:de:ae:7a:b5:39:3c:17:0d:9a:79:ad:
57:3c:a1:06:3c:cf:ef:25:4d:bf:05:0c:45:24:d7:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:15:2D:E2:C9:EE:85:92:B1:03:75:8C:34:33:E9:6C:F9:4D:9D
X509v3 Authority Key Identifier:
keyid:82:7E:02:03:A0:E8:51:8C:18:0B:B0:51:65:7B:37:9A:EA:9F:DB:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be05d4477a08a21f388bc1a263eb3e165d8e7a8f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9905e04-2ddf-437c-ab15-fa8bfe779afc/3641f7e79708918c461c3de76dbeccc02f616b72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c9905e04-2ddf-437c-ab15-fa8bfe779afc/be05d4477a08a21f388bc1a263eb3e165d8e7a8f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.204.0/22
Signature Algorithm: sha256WithRSAEncryption
04:f6:58:ee:40:b7:6b:ea:d9:10:bc:9e:32:1f:6e:ba:13:33:
c3:d4:91:4d:a6:23:9b:5f:3a:4d:9e:96:99:4d:2b:c6:9c:1c:
bb:33:7c:4d:0c:45:f5:66:71:55:c8:59:d6:ed:3f:74:cd:10:
23:b6:bf:7c:df:bd:9e:9d:cc:87:b9:9b:78:7b:40:b6:83:c1:
a6:03:2e:38:d8:17:cd:69:fe:a3:f2:de:72:80:93:a2:01:92:
56:61:de:a3:ad:f0:79:22:f7:a2:be:ae:d9:1e:a5:39:5f:31:
74:00:b2:b7:8e:6d:e0:b5:a2:cd:f5:2b:38:69:44:a8:7e:84:
c4:0f:2d:b3:2f:ab:09:ff:6d:d9:ed:3d:39:89:35:ac:d7:11:
79:e7:8b:df:20:e5:d3:2a:1f:34:c6:4b:06:cf:9c:dc:f2:dc:
83:ff:4f:d4:0c:8a:ae:88:df:6a:66:20:33:11:96:2c:90:cf:
31:bd:b5:c3:33:ff:e8:d9:8f:d1:fe:6a:53:23:cb:2d:fc:99:
78:48:0d:ff:05:dc:6a:00:d9:65:af:9a:32:55:ce:53:81:79:
70:4a:f5:8f:57:ee:70:1b:a7:b6:4f:19:fb:27:14:55:72:ad:
73:58:fc:d3:f7:13:17:f8:8c:12:e3:c5:61:33:f1:ae:8c:3d:
8c:ae:05:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org