Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/b4ca01bda1e44c03828297dfb322f36cf95f3cff.roa
File: b4ca01bda1e44c03828297dfb322f36cf95f3cff.roa (raw, json)
Hash identifier: xacS1Z+A88kEOfwS7BRa/cLk2VnKtzxAypXnz1T3wBw=
Subject key identifier: B4:E3:AF:E3:5E:DC:97:E6:D3:73:85:65:F9:0F:F5:F3:A1:41:F6:92
Certificate issuer: /CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
Certificate serial: 1E4413
Authority key identifier: 5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/b4ca01bda1e44c03828297dfb322f36cf95f3cff.roa
Signing time: Mon 04 Dec 2023 14:28:09 +0000
ROA not before: Mon 04 Dec 2023 14:28:09 +0000
ROA not after: Thu 04 Dec 2025 14:28:09 +0000
asID: 64139
IP address blocks: 167.249.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1983507 (0x1e4413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cb7e1dbb3f418ec3ba7a98320aee5815bdb815
Validity
Not Before: Dec 4 14:28:09 2023 GMT
Not After : Dec 4 14:28:09 2025 GMT
Subject: CN=b4ca01bda1e44c03828297dfb322f36cf95f3cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:43:74:35:40:af:a4:22:5b:e2:73:4e:4b:e3:
60:ee:b8:1e:74:eb:ff:9f:28:21:f7:52:c9:06:44:
78:7a:85:32:f7:65:9a:dd:52:2f:fa:f2:fd:5e:5c:
9b:9c:e0:f6:c8:d4:02:45:0a:70:96:89:43:d1:da:
24:57:96:f6:c3:c5:65:09:5e:10:c7:db:fe:93:fd:
d0:24:ad:6d:6f:2c:9c:cf:8d:d5:9a:95:48:72:bb:
f0:65:08:e4:50:f0:74:c0:cc:67:5c:21:ee:19:cd:
0a:30:9a:99:f7:ff:11:c9:2c:85:52:b8:47:80:de:
ba:3d:93:c3:b4:39:d3:a9:0d:7a:6f:b0:f4:b4:38:
ab:98:ae:ab:92:97:57:a6:8e:95:a0:14:ee:28:eb:
ea:58:6d:0d:29:d8:85:71:c4:e9:ec:30:14:94:d6:
cd:88:6b:22:a1:ce:30:3a:2a:4a:e2:0a:b2:4d:eb:
00:ef:0b:51:2d:42:d9:cb:78:84:96:ac:07:7e:5e:
db:fb:1e:e1:02:b3:cd:fc:7f:3d:51:ef:39:81:3d:
03:95:bd:76:32:c4:8a:7b:e6:0a:fa:32:7e:65:52:
7e:06:1f:7e:04:83:e7:30:df:03:61:b2:a9:07:84:
73:a0:b8:1c:ed:52:6f:4c:0d:d1:95:ec:0a:d9:54:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E3:AF:E3:5E:DC:97:E6:D3:73:85:65:F9:0F:F5:F3:A1:41:F6:92
X509v3 Authority Key Identifier:
keyid:5B:74:A0:72:2D:D3:0E:96:7E:83:EE:23:74:B7:27:F7:0C:E9:29:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/b4ca01bda1e44c03828297dfb322f36cf95f3cff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d01c6eda-23d9-490c-9a8e-d2e0d6832109/20cb7e1dbb3f418ec3ba7a98320aee5815bdb815.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.28.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:54:71:20:05:bf:17:83:9b:01:49:32:d7:88:be:0e:ea:c3:
05:52:a1:1d:1b:f6:b9:2b:50:f1:a7:f2:ef:55:22:7f:80:27:
cd:29:eb:16:26:9b:6a:37:59:1c:85:31:22:2f:23:11:40:1d:
29:3c:0f:7a:3c:5a:33:35:ad:4d:af:0b:77:e9:ce:e9:3b:af:
3e:05:1f:f2:9e:af:6c:d7:86:12:a0:bd:be:07:6f:95:76:70:
c8:1f:8c:0c:08:a7:d6:94:ed:a0:7b:fd:8c:5b:eb:a7:fd:31:
b5:64:8e:cb:43:84:1f:91:c6:2a:fa:7e:d3:f9:fa:32:be:e7:
e1:e0:04:9e:35:98:95:fb:e9:de:9d:7e:24:26:49:38:3e:ca:
5f:d3:7e:11:68:af:0d:9d:7e:39:97:d0:30:56:c0:ae:d6:6d:
94:78:bc:fc:01:76:dd:a8:da:2c:31:2b:81:84:c1:32:53:49:
3c:27:0e:a1:9a:e8:78:6b:84:65:52:cf:1c:50:16:25:27:e5:
23:f6:24:47:fb:c8:ec:2c:55:6a:e3:71:85:7e:0b:c1:a1:90:
b0:78:7a:bb:1d:21:91:04:b7:9e:22:c7:c9:7c:81:97:21:e7:
e0:66:05:1b:b4:72:63:72:f3:81:46:3b:be:37:ee:1b:0e:2a:
0a:96:ca:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org