Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/a72e3c254700a1c295e8b50cbf2389284daa488b.roa
File: a72e3c254700a1c295e8b50cbf2389284daa488b.roa (raw, json)
Hash identifier: DdXaDldn/oeWC9LjQxlgLk8FQCwUMl6wBz8WLYDW9IE=
Subject key identifier: B3:A5:3A:FE:8D:41:33:DA:2F:05:B6:D2:89:23:C4:60:C2:58:9E:54
Certificate issuer: /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial: 23432C
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/a72e3c254700a1c295e8b50cbf2389284daa488b.roa
Signing time: Tue 26 Sep 2023 17:26:21 +0000
ROA not before: Mon 25 Sep 2023 17:26:20 +0000
ROA not after: Fri 26 Sep 2025 17:26:20 +0000
asID: 23216
IP address blocks: 157.100.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2310956 (0x23432c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Validity
Not Before: Sep 25 17:26:20 2023 GMT
Not After : Sep 26 17:26:20 2025 GMT
Subject: CN=a72e3c254700a1c295e8b50cbf2389284daa488b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:1c:17:97:db:88:d3:e8:88:40:12:02:24:
bc:11:18:a0:49:39:5a:49:f7:7d:6c:65:0f:f7:d3:
ba:0e:aa:0b:8b:3a:62:45:22:a8:80:b0:2e:cf:b8:
3c:dd:df:dc:41:ee:b5:3b:3d:bc:65:0c:b4:60:2b:
b6:9c:44:6e:30:2b:fd:4f:5b:62:ec:02:df:5d:22:
72:ca:7f:87:da:f0:7f:1e:7c:58:32:d1:dc:c4:ec:
6f:48:e4:30:1f:21:cf:6e:ee:b8:8c:1b:ce:c6:e5:
f0:89:24:1e:eb:07:d7:d6:35:eb:d7:3a:be:64:d9:
96:e3:a8:35:b0:be:1d:26:1c:97:84:0b:11:eb:50:
f9:30:d5:7f:34:7d:7f:3a:95:9f:91:c5:bc:b8:fa:
4c:4b:73:72:3d:3c:76:f0:0e:be:ca:8c:ec:68:b1:
12:09:75:1b:ab:19:47:90:59:e9:6b:09:b4:a9:c6:
14:bd:25:61:2f:57:8b:e9:e4:40:5b:90:a6:f4:1e:
2b:44:b5:e5:b9:42:d9:2a:10:4e:d1:c9:ef:6a:05:
c5:95:e6:37:3c:4d:7a:ae:b9:bc:10:25:ab:be:d7:
68:05:f9:b9:ec:c2:16:74:83:d5:f3:28:21:e2:6f:
73:9d:12:3f:c7:c2:8d:08:8f:00:87:1c:a2:f2:aa:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A5:3A:FE:8D:41:33:DA:2F:05:B6:D2:89:23:C4:60:C2:58:9E:54
X509v3 Authority Key Identifier:
keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/a72e3c254700a1c295e8b50cbf2389284daa488b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:88:53:aa:0b:59:5b:18:9b:f0:19:41:12:2c:c3:30:f7:e7:
84:d7:19:57:d0:03:c0:5e:30:5b:26:f5:de:a8:e9:a5:0e:54:
84:ba:41:a0:f9:db:06:40:a9:3f:fd:37:cf:a9:f5:33:ef:27:
b8:55:25:f4:5c:79:f4:8f:d6:40:ef:e9:4d:84:c2:5e:2e:1e:
79:57:37:4f:7e:09:7d:ec:59:cc:76:42:c2:61:18:71:41:77:
d7:a6:66:30:c8:21:91:d5:6b:2c:fb:13:cf:89:28:cd:dc:c0:
2b:e0:c3:9b:a5:f6:5f:5b:5f:ed:1d:4d:21:83:4a:66:b8:ea:
cc:45:91:90:7a:76:7c:59:31:76:87:5c:fe:c6:7c:35:15:9f:
7b:1e:b1:f8:a7:31:ec:5a:8f:6e:b2:58:99:9f:21:7d:d1:81:
df:6e:55:4e:c1:dc:6e:85:fc:7a:f6:8d:c8:08:ed:3b:d5:74:
7c:c4:5f:78:03:09:20:b1:07:5a:82:42:be:59:38:99:e6:98:
c1:8b:63:e8:d1:b4:e2:88:3b:2f:bc:b2:9e:cf:99:96:88:47:
75:66:e4:b9:0c:1d:9d:d1:be:96:32:e7:09:9a:72:16:ad:f6:
41:1f:2f:b4:02:1c:57:63:75:7f:ab:61:20:7b:55:73:3a:89:
e0:53:73:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org