Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/02cae67de0e411b726814a410ee514514d6e4839.roa
File: 02cae67de0e411b726814a410ee514514d6e4839.roa (raw, json)
Hash identifier: 3zVCx85HTYwL1xRVw+jf/kxl7fkjhqh0eCod8/DCt+8=
Subject key identifier: AA:CA:9A:DD:6C:43:A6:55:33:52:36:40:AD:B2:8C:6C:BD:0D:71:AB
Certificate issuer: /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial: 23F6D6
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/02cae67de0e411b726814a410ee514514d6e4839.roa
Signing time: Tue 17 Oct 2023 19:52:58 +0000
ROA not before: Mon 16 Oct 2023 19:52:58 +0000
ROA not after: Fri 17 Oct 2025 19:52:58 +0000
asID: 52468
IP address blocks: 157.100.52.0/22 maxlen: 24
157.100.52.0/22 maxlen: 24
157.100.56.0/21 maxlen: 24
157.100.68.0/23 maxlen: 24
157.100.71.0/24 maxlen: 24
157.100.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2356950 (0x23f6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Validity
Not Before: Oct 16 19:52:58 2023 GMT
Not After : Oct 17 19:52:58 2025 GMT
Subject: CN=02cae67de0e411b726814a410ee514514d6e4839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:e8:6d:7e:3b:01:83:57:7b:42:cc:40:6c:
dc:c4:38:fb:70:83:38:28:ca:88:1c:78:66:13:cd:
99:ad:eb:3c:c0:69:76:7f:83:86:21:be:e6:42:97:
1c:31:90:ba:d0:da:7c:a2:4f:be:17:0d:55:41:eb:
ac:87:3b:bb:51:99:f5:7b:c1:3a:b6:c5:85:3e:54:
1b:36:ce:f3:17:68:d5:4f:06:cc:ff:84:8c:6e:0d:
dc:d0:e2:05:c9:ff:51:54:c7:7e:ea:19:39:ad:29:
3a:53:a9:e5:b9:16:a1:9c:05:1e:eb:4f:ee:5a:92:
0c:4c:65:13:8d:54:18:2e:61:a1:59:86:8e:3c:1b:
2a:65:87:f9:e6:62:cf:a6:07:ab:08:d3:d5:64:f5:
94:96:c6:8a:7b:e5:e0:4d:01:0f:62:ca:2f:77:35:
63:5c:74:aa:94:8f:8b:0f:db:d4:c3:9e:c7:f0:72:
bf:68:78:f1:88:fe:2a:09:f1:3e:b9:df:fd:03:b3:
4e:61:ec:a4:a8:c7:f8:4a:4c:e9:1e:94:53:3a:a7:
34:1b:6e:47:d2:4d:95:29:83:ee:3f:e8:ff:89:f2:
d1:66:97:38:46:d6:c8:e1:d5:2f:53:8b:3a:20:ee:
97:5c:5b:ae:8c:22:f3:45:3c:8d:5e:c0:11:4c:54:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CA:9A:DD:6C:43:A6:55:33:52:36:40:AD:B2:8C:6C:BD:0D:71:AB
X509v3 Authority Key Identifier:
keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/02cae67de0e411b726814a410ee514514d6e4839.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.52.0-157.100.63.255
157.100.68.0/23
157.100.71.0-157.100.72.255
Signature Algorithm: sha256WithRSAEncryption
59:fa:73:0f:d3:8d:8f:37:86:c8:a7:66:1c:b0:dc:dd:2a:99:
12:e2:17:8b:3c:3e:51:7c:50:c4:0a:9a:56:aa:17:c7:ae:32:
33:a0:3b:79:13:88:fb:f5:33:f1:8f:e3:d0:e3:98:c9:ee:46:
71:ab:ae:6e:ec:58:50:d8:60:60:6b:ec:44:7a:7e:60:02:4e:
11:b3:32:fb:32:93:0e:b8:2f:4d:f3:ed:62:80:f9:90:eb:df:
3b:9c:7d:2f:28:2c:2e:1f:e2:93:52:32:25:1b:20:da:b3:e8:
d5:b2:56:1f:1b:9f:27:11:ae:4d:29:a7:ea:5e:b4:d4:a2:d6:
78:51:8b:9f:e6:eb:8e:60:50:17:65:ca:4d:2e:44:7a:88:0f:
26:14:b2:b5:12:de:50:cb:5f:13:2a:29:3d:17:cc:39:f6:78:
a6:f2:ac:53:6a:33:48:15:3c:af:cd:05:24:1b:ed:cc:8a:5d:
06:e6:5c:f7:75:ba:2c:d4:b8:28:1e:4f:53:bc:ed:56:c8:a9:
6d:09:92:81:79:19:d7:0c:b7:8e:8d:78:20:0d:4d:cb:01:67:
3f:93:9f:27:a4:8b:ad:fb:db:a6:b7:a7:be:ba:26:5d:89:4d:
9c:8c:a4:30:c6:2b:52:47:4c:29:b7:42:06:47:29:38:cd:31:
44:04:61:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org