Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/60a338076d75973915512097b0acf822d8003e13.roa
File: 60a338076d75973915512097b0acf822d8003e13.roa (raw, json)
Hash identifier: lkJmCNuWaC/UMwjHG5rtsVp21Mk3bwWO3OI+yiZRMB4=
Subject key identifier: 3E:91:CC:0A:A0:5D:2A:28:0C:5E:4A:F8:96:26:D5:B1:95:5E:E1:6A
Certificate issuer: /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial: 212FF1
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/60a338076d75973915512097b0acf822d8003e13.roa
Signing time: Wed 05 Jul 2023 01:53:42 +0000
ROA not before: Tue 04 Jul 2023 01:53:42 +0000
ROA not after: Sat 05 Jul 2025 01:53:42 +0000
asID: 52468
IP address blocks: 157.100.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174961 (0x212ff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Validity
Not Before: Jul 4 01:53:42 2023 GMT
Not After : Jul 5 01:53:42 2025 GMT
Subject: CN=60a338076d75973915512097b0acf822d8003e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b5:01:96:21:b9:d4:86:ab:ed:f7:c3:d6:dc:
26:c8:bb:a6:cf:df:b8:51:7a:36:ab:ae:a7:fe:2e:
ea:63:64:94:88:5e:2f:59:f1:19:8d:8b:a2:9a:99:
e6:e3:bc:d1:59:82:af:79:63:c0:03:58:b3:37:6e:
63:06:c0:d8:a6:f5:80:75:97:6d:93:20:47:42:75:
2f:ea:f0:8d:34:11:e6:ab:cb:2f:d0:ba:5d:3a:f1:
c6:e1:c4:ef:89:04:f6:76:69:a2:3c:bb:62:4a:5d:
ea:c8:4a:61:25:c9:dc:b1:ab:a6:d8:66:c7:44:25:
ba:0d:ee:e4:f9:42:2e:d7:66:c6:5b:b9:5c:5e:0a:
fe:86:5d:a4:01:9f:15:01:26:a7:9f:53:dd:24:ba:
a0:ca:08:9d:c8:99:09:36:3f:97:2a:32:06:72:a6:
4a:0a:7e:dc:51:51:8c:58:be:f6:16:19:ea:1f:aa:
f3:1e:04:ab:4a:81:80:64:f1:3a:af:12:22:52:71:
54:d4:04:6f:16:8d:34:5a:42:f0:3f:63:76:e2:76:
a0:eb:c9:d5:99:0e:cc:98:63:18:31:16:6a:20:f0:
54:eb:2d:7f:71:d4:0e:42:e4:28:39:ac:6a:ec:b8:
6c:88:e7:29:56:a1:f8:3b:7f:94:7c:79:ab:fb:f1:
50:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:91:CC:0A:A0:5D:2A:28:0C:5E:4A:F8:96:26:D5:B1:95:5E:E1:6A
X509v3 Authority Key Identifier:
keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/60a338076d75973915512097b0acf822d8003e13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.60.0/22
Signature Algorithm: sha256WithRSAEncryption
47:73:3e:ee:98:f2:f6:4a:22:4c:3a:5d:0d:09:c1:37:7e:21:
12:a6:01:45:45:02:d5:66:64:de:26:e4:0e:00:59:02:b0:83:
41:bc:0b:ce:cf:15:8c:66:84:73:e5:01:72:d5:7c:14:87:7b:
91:e2:f6:95:fd:00:90:2b:fb:9b:07:dc:1a:6e:e4:43:f2:09:
1f:6c:bd:5c:97:f1:18:03:63:8a:ec:e1:65:4d:f3:70:fc:3d:
c9:f9:57:c3:a3:60:c1:34:09:2d:fa:2f:f5:93:e7:80:92:db:
4c:ad:5b:bc:a6:c6:ef:8e:ef:6f:d5:b5:e9:84:4b:5b:ba:1a:
d7:60:ab:15:20:5d:4b:9f:c1:0b:9c:bb:45:25:96:bf:74:2e:
d7:91:74:74:29:cf:7b:74:06:fa:25:23:b1:03:ce:fd:7e:cc:
c7:1b:de:ce:ec:7a:50:d1:24:7b:6e:b0:ee:50:1f:63:d3:a2:
f9:66:37:c8:50:e2:97:c5:c3:99:78:94:f1:92:30:9d:80:bc:
79:9b:69:69:d8:78:94:81:1a:23:a3:de:ac:ce:f3:61:e6:b5:
f4:ba:69:73:e8:6d:1b:7b:86:1e:6e:8f:d8:f3:03:71:d1:00:
bb:93:18:cf:0b:43:5d:2f:f7:02:03:e2:47:4b:fb:66:e4:a8:
82:f2:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org