Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/873758aac169932e6dfd6b7c0dfda8f42100c1b6.roa
File: 873758aac169932e6dfd6b7c0dfda8f42100c1b6.roa (raw, json)
Hash identifier: RqjehT7NNVXgMPiPqElSGAfc08HnwQwJZtshMeIKOe0=
Subject key identifier: 95:15:5F:C0:F6:10:06:87:CB:A3:09:F7:86:5C:90:3B:61:31:BC:7F
Certificate issuer: /CN=3ac6d50ad5d743ef654e5c1f20e5c7a056198d62
Certificate serial: 088629
Authority key identifier: A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/873758aac169932e6dfd6b7c0dfda8f42100c1b6.roa
Signing time: Thu 08 Jun 2023 01:58:09 +0000
ROA not before: Wed 07 Jun 2023 01:58:09 +0000
ROA not after: Sun 08 Jun 2025 01:58:09 +0000
asID: 271814
IP address blocks: 170.246.56.0/24 maxlen: 24
170.246.57.0/24 maxlen: 24
170.246.58.0/24 maxlen: 24
170.246.59.0/24 maxlen: 24
164.163.184.0/24 maxlen: 24
164.163.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 558633 (0x88629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac6d50ad5d743ef654e5c1f20e5c7a056198d62
Validity
Not Before: Jun 7 01:58:09 2023 GMT
Not After : Jun 8 01:58:09 2025 GMT
Subject: CN=873758aac169932e6dfd6b7c0dfda8f42100c1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:50:ff:1c:e5:23:72:bf:8c:b4:12:00:e9:46:
9b:2d:e9:7c:59:7c:cb:70:10:76:c0:d8:c9:3b:ca:
bc:93:b8:dc:d4:d7:76:ca:79:22:1a:59:86:ea:08:
85:f4:01:e0:35:23:df:69:c2:e6:ba:a5:2f:6a:70:
e9:fa:e7:d4:07:e1:68:0b:d2:f0:cc:f8:c6:9d:d4:
91:c6:eb:65:00:95:e8:db:87:33:ed:e8:01:21:27:
0e:c1:d6:ee:a3:e6:e6:69:f7:6b:76:a2:02:85:04:
0b:dd:1f:7b:f6:74:2b:ff:7c:7c:9b:f7:a0:4f:7c:
29:19:c5:f5:02:8f:a3:e7:db:a7:5f:2a:12:02:ea:
d8:75:21:9a:41:c6:29:93:3e:38:91:9c:1b:5a:86:
0a:97:9b:35:22:eb:4c:33:91:81:85:ca:29:bb:57:
a0:ef:33:ae:60:d2:69:cc:2b:17:76:b4:62:ea:90:
11:e3:85:61:06:4d:25:93:3c:df:e7:09:a0:2c:86:
39:89:e6:d1:fa:d5:ee:71:75:6f:39:db:36:58:cf:
78:3a:60:2c:19:1f:4a:d5:fe:2b:25:68:95:da:b9:
ee:13:e9:64:6d:77:a8:03:52:20:bf:59:44:6c:b7:
3c:d1:f2:96:c5:f4:4d:f3:94:f0:67:9f:3f:8b:d4:
67:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:15:5F:C0:F6:10:06:87:CB:A3:09:F7:86:5C:90:3B:61:31:BC:7F
X509v3 Authority Key Identifier:
keyid:A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/873758aac169932e6dfd6b7c0dfda8f42100c1b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.184.0/23
170.246.56.0/22
Signature Algorithm: sha256WithRSAEncryption
36:c4:c6:a0:c3:c8:3f:40:b6:29:21:99:a6:c9:34:82:5f:d3:
f8:f2:f2:16:38:9c:ce:65:a7:5b:3b:09:5f:5b:1e:8b:63:e5:
b2:1f:ce:5f:ba:60:05:25:cc:bd:f7:a9:6c:48:49:19:0b:ff:
9d:f2:64:8d:59:dd:6b:b7:fc:a9:bb:6e:11:2f:d5:22:5a:a7:
44:30:ff:bb:b6:08:f2:f0:cf:50:e7:bb:05:2c:7f:b1:83:d3:
e2:b6:6e:98:80:52:7d:52:fe:a1:aa:c9:01:50:91:f8:37:de:
65:dc:f4:ee:a3:be:84:9f:7d:5f:38:bf:af:8b:c9:59:f2:2e:
35:d3:e5:c4:09:31:e6:91:80:33:03:c5:f8:ef:04:f5:09:b1:
54:23:df:4f:95:4a:fd:1b:e5:60:9e:ae:8c:7f:dc:2a:d1:a7:
99:28:0d:2c:ce:cd:7f:fd:44:fb:48:d9:09:0f:c8:16:46:fa:
63:47:0d:5a:99:1a:d4:e8:9c:7a:e5:d0:fb:3d:27:94:41:a6:
a0:c1:ce:16:fe:06:02:3f:2a:13:02:37:f7:f4:ce:3d:1d:74:
41:b5:4d:cd:db:41:99:11:e1:ac:35:a9:b0:63:06:a8:4e:83:
f6:26:91:d7:71:03:06:fa:b2:00:a2:c1:25:62:04:7f:d6:3f:
d6:c0:c8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org