Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/3646b7368ece5501134df47b719f1e5a22dd4fbd.roa
File: 3646b7368ece5501134df47b719f1e5a22dd4fbd.roa (raw, json)
Hash identifier: 9VAwbrnfElayCtTNRii8ZZ0UEq2VYiHP2SZiW7SEhjY=
Subject key identifier: 1E:2E:99:83:5B:80:F4:02:30:C0:4C:BB:4C:1D:8C:E0:61:01:69:4A
Certificate issuer: /CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
Certificate serial: 1A592A
Authority key identifier: 5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/3646b7368ece5501134df47b719f1e5a22dd4fbd.roa
Signing time: Wed 05 Jul 2023 16:05:22 +0000
ROA not before: Tue 04 Jul 2023 16:05:22 +0000
ROA not after: Sat 05 Jul 2025 16:05:22 +0000
asID: 64131
IP address blocks: 167.249.30.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1726762 (0x1a592a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
Validity
Not Before: Jul 4 16:05:22 2023 GMT
Not After : Jul 5 16:05:22 2025 GMT
Subject: CN=3646b7368ece5501134df47b719f1e5a22dd4fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:b3:01:0c:29:cb:c0:ac:87:43:da:00:43:
81:ed:54:cf:be:c9:ae:70:90:ee:32:e9:85:f5:44:
0a:96:e9:77:80:fe:b8:5e:c4:19:82:0b:97:b4:fe:
64:2d:36:04:01:05:38:8c:61:17:86:98:14:03:0b:
b0:57:f0:f9:82:19:fb:2b:86:61:e0:44:44:f0:de:
34:fd:89:23:c2:4f:dd:ac:62:5d:e2:ab:54:ec:9d:
a4:31:98:6f:be:7f:e7:7d:51:92:13:6e:84:46:d5:
fa:6c:ab:8e:50:20:b9:ce:4f:1e:68:d6:de:db:7a:
c6:80:11:69:48:48:52:f5:84:a3:6d:c3:92:6e:55:
8c:47:5f:51:be:6c:c5:5d:9b:f9:33:be:17:10:17:
c5:40:29:6a:1f:0d:90:2b:dd:93:62:0d:ca:4b:35:
1f:2c:59:27:a5:e9:19:c1:ea:9a:fd:f5:4b:12:fc:
95:48:86:80:9d:12:d2:ae:38:5e:7f:22:e0:8b:11:
0d:96:8c:22:22:21:24:0d:c9:99:65:fc:f1:0f:8c:
d4:9b:b6:41:dd:6a:90:a8:a1:b4:9d:57:37:30:9c:
45:cb:7a:e9:e5:f1:a3:93:af:e4:cc:18:0b:67:00:
ff:ed:3f:22:c3:3d:2f:c2:c8:72:41:df:c7:a9:7d:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2E:99:83:5B:80:F4:02:30:C0:4C:BB:4C:1D:8C:E0:61:01:69:4A
X509v3 Authority Key Identifier:
keyid:5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/3646b7368ece5501134df47b719f1e5a22dd4fbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.30.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:eb:47:bf:76:5d:c8:3f:6a:12:e7:09:45:48:20:8c:6e:e5:
f8:6d:0b:3b:61:45:20:96:33:af:60:7c:5c:9f:f8:2d:1d:e6:
8c:73:42:06:65:93:41:41:b7:80:b6:e4:95:49:80:b7:e9:f8:
25:b1:1f:e5:89:af:b8:32:1b:6f:7d:af:b0:1d:68:f6:7b:ed:
4d:e8:e7:84:e7:10:5d:65:97:b5:89:a7:2c:e2:4f:be:17:4b:
0c:51:61:90:05:c4:18:fc:50:68:73:01:b8:8e:14:b4:ed:09:
4a:0b:14:54:6a:b6:1b:8d:b0:07:cb:01:c3:1d:7f:2a:f7:37:
e8:6f:9a:2c:1f:82:66:48:51:7d:fc:d3:be:41:9b:41:b8:68:
96:9d:13:ce:c2:e2:a0:53:66:14:f4:69:24:2f:26:dd:d1:fc:
7f:40:40:59:da:7e:95:e4:88:7e:fe:f5:a6:47:55:70:e8:3a:
28:54:83:07:26:78:9a:e9:8f:0a:b0:65:73:d0:27:4f:b6:e4:
5d:31:36:c9:eb:f0:e1:db:80:82:fb:e1:a2:19:b0:75:46:64:
38:69:7e:69:ed:68:76:73:45:72:e5:58:0f:bc:64:03:f0:75:
c6:2f:9e:93:e2:6c:50:5b:35:7f:d3:e8:ac:98:ab:be:8a:67:
7a:c1:fc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org