Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/57bd500168d508c5874b700458e7af8fd1cebdf0.roa
File: 57bd500168d508c5874b700458e7af8fd1cebdf0.roa (raw, json)
Hash identifier: vJx9HdqaVil6VJYwlfC+qcEpO1L+2n6NQtJ2brOILto=
Subject key identifier: 9F:EB:7E:D8:45:54:FD:25:58:3E:10:3E:D8:44:BA:85:A5:6F:0F:B3
Certificate issuer: /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial: 23687E
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/57bd500168d508c5874b700458e7af8fd1cebdf0.roa
Signing time: Tue 26 Sep 2023 17:26:29 +0000
ROA not before: Mon 25 Sep 2023 17:26:20 +0000
ROA not after: Fri 26 Sep 2025 17:26:20 +0000
asID: 27947
IP address blocks: 157.100.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2320510 (0x23687e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Validity
Not Before: Sep 25 17:26:20 2023 GMT
Not After : Sep 26 17:26:20 2025 GMT
Subject: CN=57bd500168d508c5874b700458e7af8fd1cebdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8a:21:96:df:4e:53:22:a0:52:d5:de:19:cc:
e9:f0:6d:56:eb:f2:c5:25:51:0d:e1:87:b0:c7:0a:
a4:37:3f:86:ba:d7:b2:d6:b7:40:c6:b0:96:a4:55:
72:5b:9f:77:ef:9b:f0:b9:5b:4e:d6:7d:d1:90:b8:
96:38:cc:f1:ce:99:39:99:53:cf:43:74:47:74:bc:
6a:33:f9:f7:68:95:ed:20:23:34:c4:69:3e:4f:d4:
d8:6c:e3:79:71:70:da:f6:00:ac:0c:2a:0e:ba:c9:
0b:c9:78:13:8d:61:55:d0:c9:76:84:fb:1b:09:86:
eb:71:5a:02:d9:0e:eb:ba:96:58:ee:ac:8a:47:9a:
b1:de:e8:27:cf:ec:c7:ad:e9:8a:c4:2b:f0:29:fa:
b1:ae:df:7a:9f:fc:9b:3d:37:0b:f8:96:e6:4b:1d:
c3:23:40:f5:7c:22:d5:1e:d1:24:c6:3d:1b:52:7b:
52:8e:7b:e7:e4:22:b1:10:20:54:77:db:67:9a:76:
73:c2:fb:7b:2a:ac:7a:38:79:ee:bb:4d:ee:dd:28:
13:27:f0:59:3e:04:80:ce:5e:f2:70:67:52:cb:97:
a4:7e:57:b9:aa:2e:31:6c:c7:d4:05:a3:e0:19:00:
c5:2c:3d:9d:83:eb:d7:c3:6f:a7:b4:6a:69:7c:63:
49:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EB:7E:D8:45:54:FD:25:58:3E:10:3E:D8:44:BA:85:A5:6F:0F:B3
X509v3 Authority Key Identifier:
keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/57bd500168d508c5874b700458e7af8fd1cebdf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
73:4f:00:9d:a2:fa:db:ec:87:00:9d:44:96:58:57:1f:71:69:
f9:19:c9:ad:91:85:10:79:2e:a8:ac:f1:49:91:56:de:7d:9a:
27:cb:28:1e:a9:78:2c:6f:22:ba:e4:98:22:77:ab:18:ea:23:
4e:e8:92:24:ee:e5:ed:c0:fd:63:07:1b:40:6a:c7:58:a7:f7:
2d:d4:81:99:2e:71:20:5c:18:c7:37:91:57:53:ea:74:4c:c8:
ba:41:40:52:60:03:c5:15:69:77:80:78:c7:2e:6b:ae:d9:bb:
6a:4e:fa:a1:e4:fc:ec:92:d7:81:6e:ae:9d:fe:b6:48:25:d6:
a7:17:03:9a:7f:f9:13:6f:d4:3e:e7:46:6c:9c:13:81:a0:65:
bc:a7:7a:e8:3e:8d:46:e0:6e:46:e7:fb:92:8e:ea:5f:11:5e:
d9:b9:d1:67:4e:59:d0:c5:30:4b:d4:96:a9:f4:35:7e:56:0b:
19:09:b2:70:c8:06:f2:9f:be:12:80:e0:c5:00:2f:eb:f6:8a:
dc:67:56:53:11:03:4a:f4:ad:46:5f:8b:81:17:b7:65:1a:46:
2f:5d:d3:83:5b:2f:b4:4a:f1:31:a8:e3:2e:04:1e:b9:05:72:
18:de:e8:00:ab:bd:c0:1e:1d:76:2f:c9:be:26:68:d5:85:ee:
1e:61:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org