Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/72caa03d36e702d60f47d995f25590aaa3956fad.roa
File: 72caa03d36e702d60f47d995f25590aaa3956fad.roa (raw, json)
Hash identifier: VpuRyxieLQk6+m6Mrlk0MX9Rvmrw9/lb6wh4nCJTuaU=
Subject key identifier: 60:42:2E:FC:2C:0A:11:8F:C6:6F:49:4E:D8:09:D8:43:0E:AE:B2:12
Certificate issuer: /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial: 2355EA
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/72caa03d36e702d60f47d995f25590aaa3956fad.roa
Signing time: Tue 26 Sep 2023 17:26:24 +0000
ROA not before: Mon 25 Sep 2023 17:26:20 +0000
ROA not after: Fri 26 Sep 2025 17:26:20 +0000
asID: 271936
IP address blocks: 157.100.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315754 (0x2355ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Validity
Not Before: Sep 25 17:26:20 2023 GMT
Not After : Sep 26 17:26:20 2025 GMT
Subject: CN=72caa03d36e702d60f47d995f25590aaa3956fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:65:93:20:d4:58:58:06:94:d7:a0:2d:45:60:
78:5a:b0:2e:1b:8b:9a:7b:c4:b2:72:9b:fc:44:e4:
43:5f:35:da:f3:05:4e:42:17:c0:f5:d9:d9:0a:09:
4b:1e:08:e7:2b:f8:2e:74:3e:45:b8:f6:53:46:bb:
f4:62:e9:28:b7:ee:be:9c:a5:2b:f7:1c:a0:52:6a:
e2:38:09:c9:ad:fc:b1:c0:2b:d7:4d:88:39:14:a6:
d1:a1:a1:9e:8e:a6:11:41:63:6e:9b:06:df:f5:89:
e8:2a:df:80:63:06:cc:d1:1a:ef:3d:3d:c9:0d:95:
8b:a8:92:c3:8c:c7:67:8e:2b:49:af:88:d7:da:ec:
8e:5f:eb:e0:b0:4c:ea:09:7f:02:bd:25:01:bb:ae:
1a:72:2b:57:04:21:c6:95:41:dd:85:3a:63:9f:26:
18:10:9f:af:5c:04:8c:da:ea:ea:dc:bb:43:d4:1f:
26:57:37:e2:63:86:7e:c2:58:42:d1:71:70:f5:cf:
a2:58:01:be:6e:93:85:67:bb:2a:bd:88:d9:c0:a4:
57:00:ef:24:e9:a8:0f:17:bc:3e:85:36:a7:22:17:
4f:9f:75:e6:1d:e2:52:aa:f0:2f:dd:0f:49:79:a4:
61:32:e8:22:16:8c:d6:bd:9c:84:e4:b2:96:5e:7a:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:42:2E:FC:2C:0A:11:8F:C6:6F:49:4E:D8:09:D8:43:0E:AE:B2:12
X509v3 Authority Key Identifier:
keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/72caa03d36e702d60f47d995f25590aaa3956fad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f2:86:71:79:2e:3a:10:2a:f8:47:ef:e9:79:98:63:30:6a:
f3:0f:99:c8:b0:db:22:65:e5:40:cf:c7:b0:ed:67:4b:ae:9b:
5c:84:7e:0f:ba:47:2d:7b:fd:ea:df:21:b8:8e:63:46:24:63:
81:32:84:fe:9e:17:81:97:6f:80:9e:ef:ab:b1:78:a3:15:a4:
32:b7:43:4d:fb:ec:57:07:8d:5a:00:68:c8:04:96:68:7a:f9:
f1:7c:13:b1:98:81:45:2e:27:5a:13:15:8f:65:77:f4:85:62:
90:78:c0:ab:8d:73:ba:0d:0c:c8:63:03:92:b3:16:15:7c:19:
d0:be:4e:f9:4d:5c:c9:54:fa:bb:b6:41:20:0f:47:89:2a:fd:
51:98:87:c5:41:06:5a:2a:99:ba:1f:b5:a8:e8:b0:db:a0:ac:
e2:af:44:16:b2:99:3e:ca:12:1d:4c:d6:bf:0c:b2:ea:ee:5f:
d9:bd:b8:14:2c:dd:9c:6d:6c:d8:f7:74:35:c3:d2:6a:5a:e3:
5f:6e:89:d9:0f:7a:de:c6:86:96:3d:fc:c2:e4:63:b3:07:d5:
44:57:17:d4:18:5a:fa:7b:1a:cb:4a:d3:54:94:0c:f8:9a:28:
d3:a3:ea:c2:8a:5a:33:9e:8f:2a:c7:37:15:a3:05:89:63:cd:
62:d5:41:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org