Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dedfb824-4ab4-43ea-9523-cc02b74dc6de/7296cd7155f3edbe0f87c7772d608859076f3c12.roa
File: 7296cd7155f3edbe0f87c7772d608859076f3c12.roa (raw, json)
Hash identifier: EN4w68WCFcN49xqUtbluuPYd2E5cZ6Ir6ZF+GLlvuJU=
Subject key identifier: 3F:C7:46:95:36:1B:22:2F:91:9B:97:95:82:83:AE:FB:52:C3:61:43
Certificate issuer: /CN=1b4e33e73076eb5cec650b23cba56cb71dbedbde
Certificate serial: 05F9A3
Authority key identifier: 91:C0:4F:B8:7A:44:07:C0:83:5E:CF:43:5A:91:F0:2E:C1:26:16:A0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b4e33e73076eb5cec650b23cba56cb71dbedbde.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dedfb824-4ab4-43ea-9523-cc02b74dc6de/7296cd7155f3edbe0f87c7772d608859076f3c12.roa
Signing time: Tue 12 Mar 2024 23:59:04 +0000
ROA not before: Tue 12 Mar 2024 23:59:04 +0000
ROA not after: Thu 12 Mar 2026 23:59:04 +0000
asID: 273035
IP address blocks: 168.232.100.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391587 (0x5f9a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4e33e73076eb5cec650b23cba56cb71dbedbde
Validity
Not Before: Mar 12 23:59:04 2024 GMT
Not After : Mar 12 23:59:04 2026 GMT
Subject: CN=7296cd7155f3edbe0f87c7772d608859076f3c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:96:cf:b7:17:bf:c8:36:e5:c3:14:68:a0:ca:
8d:53:e5:6a:1e:4f:93:70:e2:97:93:95:49:e3:7a:
bc:39:e1:11:8d:11:be:60:c9:f6:1e:8a:4c:b7:5c:
4c:86:1e:1b:b2:f9:17:60:56:5a:2c:70:31:0d:23:
77:8e:ac:1e:d5:16:1f:3e:d2:0b:ba:04:96:be:44:
29:c3:39:a8:22:79:6f:00:0d:5b:23:ad:61:22:c7:
4d:bf:18:e4:9c:59:b6:ee:10:64:d7:5e:b5:d5:ef:
9b:80:23:42:62:a3:0f:4d:9b:39:a6:6f:5e:d9:6b:
c1:c4:7b:f1:da:05:b6:fa:34:73:d8:17:75:3f:75:
b0:db:2a:c8:75:10:c9:bd:6d:b5:fe:71:4f:ee:3f:
00:c9:7b:81:2b:e2:d8:3a:6f:40:93:4e:d5:e4:58:
9b:8b:00:cc:b5:84:3e:c0:56:fb:c4:19:88:e8:1c:
27:af:51:31:17:ab:ca:eb:15:e7:ac:7f:a5:77:ff:
7c:8b:c7:29:45:f0:4e:9f:e3:d5:b5:60:4b:27:03:
b6:9c:45:42:d9:7d:16:b7:d8:e8:6d:09:b2:c7:69:
1d:0f:62:91:2d:5c:8b:e4:e0:a9:40:73:84:86:b1:
9f:f0:ed:ee:bc:71:fc:bb:ef:48:d0:94:bc:7f:64:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C7:46:95:36:1B:22:2F:91:9B:97:95:82:83:AE:FB:52:C3:61:43
X509v3 Authority Key Identifier:
keyid:91:C0:4F:B8:7A:44:07:C0:83:5E:CF:43:5A:91:F0:2E:C1:26:16:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b4e33e73076eb5cec650b23cba56cb71dbedbde.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dedfb824-4ab4-43ea-9523-cc02b74dc6de/7296cd7155f3edbe0f87c7772d608859076f3c12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/dedfb824-4ab4-43ea-9523-cc02b74dc6de/1b4e33e73076eb5cec650b23cba56cb71dbedbde.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.100.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:a9:2f:05:06:0a:be:73:92:57:39:53:86:fe:eb:66:a0:cb:
f4:02:e0:58:02:e6:e4:e0:f7:6a:79:bf:ef:91:80:68:bb:34:
21:0f:ff:1e:53:ca:2e:b4:d0:9b:ed:31:36:65:02:f4:66:ab:
87:1c:1a:09:68:1a:81:84:76:b1:a9:b9:e8:f5:85:5e:bf:e3:
aa:24:b6:77:f3:34:d9:e4:2f:03:59:75:33:51:64:5b:a2:3f:
9e:95:c3:29:0b:8e:af:c3:61:fc:0a:bf:58:38:7d:12:77:61:
4c:4a:c5:3b:4c:93:07:9d:de:ad:ed:62:f9:78:b7:98:4f:d7:
e3:ee:f2:79:af:9b:71:4d:8a:f3:d1:e2:d4:59:bf:8d:ce:99:
f8:19:6c:f9:fe:fd:52:ee:1e:9d:58:6c:3a:a6:02:e9:bc:3b:
22:b7:9a:fb:0c:84:65:6b:68:38:c2:f3:a4:bd:97:c5:90:82:
90:3d:a9:55:07:ee:6e:94:0d:32:db:99:87:7b:1a:82:e0:3a:
67:31:d9:1b:7b:ee:8d:d5:9f:c1:09:73:57:33:17:cb:75:e1:
68:a9:ab:0f:e7:57:90:47:78:bc:db:0e:c4:ff:ea:93:44:b2:
21:de:05:ce:4f:d0:a5:b3:4c:c4:50:3b:d6:5c:e7:3d:ca:29:
c8:be:30:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:37 2024 by rpki-client on console-ams.rpki-client.org