Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/5624e8666aa25b6d2bf15df1fd6249110ffa0e35.roa
File: 5624e8666aa25b6d2bf15df1fd6249110ffa0e35.roa (raw, json)
Hash identifier: uYfUYW5pmuGPojBGdfw1d/XtEfsCmowDWMaJn8/Rav4=
Subject key identifier: F0:1C:D7:06:E4:64:D5:75:CF:1C:89:7F:EA:56:33:7B:2D:1A:03:5B
Certificate issuer: /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial: 234F5C
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/5624e8666aa25b6d2bf15df1fd6249110ffa0e35.roa
Signing time: Tue 26 Sep 2023 17:26:22 +0000
ROA not before: Mon 25 Sep 2023 17:26:20 +0000
ROA not after: Fri 26 Sep 2025 17:26:20 +0000
asID: 52257
IP address blocks: 157.100.251.0/24 maxlen: 24
157.100.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2314076 (0x234f5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Validity
Not Before: Sep 25 17:26:20 2023 GMT
Not After : Sep 26 17:26:20 2025 GMT
Subject: CN=5624e8666aa25b6d2bf15df1fd6249110ffa0e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:f1:62:c9:2a:6f:eb:36:eb:cc:4d:0e:c1:
71:cb:bf:26:6a:79:e9:1a:fe:ac:5b:3f:01:42:40:
c0:2f:21:82:c7:f2:80:54:79:40:32:e9:01:f9:4f:
5d:4a:8f:d2:a0:a2:7b:d2:16:0c:66:10:ad:91:41:
90:02:54:95:eb:6c:80:12:10:b3:fa:ba:2d:cc:79:
7c:49:8d:89:e5:88:f8:f3:ec:90:bb:a9:f3:2b:3b:
03:b0:0a:6e:49:c7:11:ee:5d:df:50:26:6e:3d:da:
cd:ab:21:de:84:25:0e:0f:03:68:7c:94:07:a4:78:
b9:93:2f:8f:b3:43:9c:32:2d:78:43:2d:e9:53:46:
42:c7:8e:c4:98:a3:b0:f9:d6:41:78:55:a1:91:ec:
f9:d7:f9:85:a1:5f:08:66:7e:95:96:8e:2c:7f:16:
0d:bd:8a:9d:3c:75:68:6f:59:e6:89:7e:fe:ba:24:
cd:ec:69:cb:14:18:0b:b2:f7:a1:b1:cf:3e:65:db:
40:95:79:ea:e2:dc:1d:1c:ad:34:1f:b6:f2:d2:78:
6a:e8:53:d0:2b:d5:b0:49:5d:ab:4d:a1:00:1b:fe:
bd:1d:e3:be:b8:2c:be:75:c2:7b:93:94:20:73:6c:
3b:c5:e7:74:4f:95:f2:cf:66:25:f5:7b:03:85:dd:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1C:D7:06:E4:64:D5:75:CF:1C:89:7F:EA:56:33:7B:2D:1A:03:5B
X509v3 Authority Key Identifier:
keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/5624e8666aa25b6d2bf15df1fd6249110ffa0e35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.251.0-157.100.252.255
Signature Algorithm: sha256WithRSAEncryption
0c:07:7d:08:66:44:a1:0c:a7:81:00:1a:70:b1:56:ca:ee:bb:
98:3e:ba:5e:da:9b:ed:73:ab:8d:5d:31:6a:48:61:a5:3f:6b:
a5:61:19:93:ee:5f:5c:e6:28:fa:14:4b:9e:37:80:d0:6d:74:
ff:f8:92:14:c4:13:5c:14:2c:03:3e:73:05:9a:33:07:ae:65:
da:30:6f:f7:16:26:a9:c6:2c:f1:9a:d7:4a:99:a6:06:69:5f:
ac:2b:ee:0e:19:43:e3:e3:7c:81:35:0c:c2:e4:ab:65:24:68:
7f:2f:e6:2b:27:f0:e5:6b:ef:17:29:0c:38:cc:9f:61:67:b9:
e0:f1:f2:4d:77:5f:07:76:6f:87:b0:90:72:d7:9b:99:61:ca:
78:ec:2e:77:0c:5e:4a:92:dc:5e:e5:ee:d0:f1:5b:f8:71:51:
df:42:e9:95:52:e5:73:aa:17:7f:27:0a:88:c0:9c:e0:75:0e:
62:91:40:b1:53:07:6b:76:56:89:89:01:e0:63:44:7b:6c:8e:
4a:3b:2f:7f:46:48:d9:08:4c:60:0a:58:29:44:c7:73:43:d7:
a3:1b:ae:4c:0b:b1:95:1e:1c:2a:68:68:20:89:c1:2b:64:3f:
7b:f3:35:4e:fd:dc:e9:15:b3:3a:32:5b:39:b7:cb:16:ec:0b:
77:ce:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org