Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/e0dd88b8b908f37723d7b17e4f6b4be130859446.roa
File: e0dd88b8b908f37723d7b17e4f6b4be130859446.roa (raw, json)
Hash identifier: 3tQJHOgpQ2+aKM3bbbYH5FyWxMsy0psW3ohvUWosnDY=
Subject key identifier: 6D:70:D3:56:0A:08:B6:FB:D3:2D:3D:17:2F:65:E4:63:CB:85:B9:FB
Certificate issuer: /CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Certificate serial: 23517A
Authority key identifier: B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/e0dd88b8b908f37723d7b17e4f6b4be130859446.roa
Signing time: Tue 26 Sep 2023 17:26:23 +0000
ROA not before: Mon 25 Sep 2023 17:26:20 +0000
ROA not after: Fri 26 Sep 2025 17:26:20 +0000
asID: 52468
IP address blocks: 157.100.52.0/22 maxlen: 24
157.100.56.0/22 maxlen: 24
157.100.52.0/22 maxlen: 24
157.100.56.0/21 maxlen: 24
157.100.68.0/23 maxlen: 24
157.100.71.0/24 maxlen: 24
157.100.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2314618 (0x23517a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701ea5e2aba4c6c0929eabf0a14b88f403a726e2
Validity
Not Before: Sep 25 17:26:20 2023 GMT
Not After : Sep 26 17:26:20 2025 GMT
Subject: CN=e0dd88b8b908f37723d7b17e4f6b4be130859446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a7:68:06:2b:b8:41:2c:7a:f1:aa:d4:a6:fb:
bd:60:13:ae:b4:f1:ad:62:72:ac:4c:74:90:27:0b:
50:70:49:28:98:3a:dd:41:87:52:ac:f1:17:f5:4a:
29:02:3f:33:c4:1a:85:62:5b:ee:87:5a:18:64:f1:
ed:f4:c1:91:16:0b:e1:6b:8d:e0:c9:52:90:1c:99:
6e:54:a3:ad:93:a1:ef:9a:53:30:7d:ca:97:aa:77:
19:a4:de:47:04:ae:bc:c8:68:d0:11:67:04:b9:f5:
c7:12:a2:9b:6b:ec:e2:a0:27:50:65:4e:e3:3d:89:
5d:d3:f8:58:98:dd:83:d7:be:ce:9f:7c:aa:39:b4:
d8:25:d7:6a:d7:1f:d0:bb:8f:58:ed:51:09:41:f8:
94:c7:d9:04:58:20:b4:1b:64:46:be:ae:47:b1:1e:
bb:cd:20:d2:f6:3c:d8:6c:2e:37:ef:9d:8a:ad:91:
ab:1e:c4:3e:8d:7c:d8:40:5c:0e:4a:d2:49:7b:6c:
09:c8:87:49:e4:01:40:c1:b8:eb:69:ac:e8:dc:f1:
b9:5e:9f:71:5c:a0:4c:a7:80:94:e5:35:f1:64:9c:
22:58:d2:a8:49:02:d8:55:9d:0b:ed:27:3d:bb:01:
26:b7:a1:12:bf:d6:37:05:d0:9f:51:b2:18:9d:75:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:70:D3:56:0A:08:B6:FB:D3:2D:3D:17:2F:65:E4:63:CB:85:B9:FB
X509v3 Authority Key Identifier:
keyid:B6:3F:DC:95:C1:3C:6E:F5:BD:51:84:5A:09:64:BF:E0:0B:14:9E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/e0dd88b8b908f37723d7b17e4f6b4be130859446.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5948434-4056-4394-b7a7-433f5175173a/701ea5e2aba4c6c0929eabf0a14b88f403a726e2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.100.52.0-157.100.63.255
157.100.68.0/23
157.100.71.0-157.100.72.255
Signature Algorithm: sha256WithRSAEncryption
66:62:84:c0:68:67:c1:b9:f7:9c:cc:97:26:6f:9c:b5:f1:2c:
ce:13:38:27:ee:34:dc:bc:26:97:00:81:00:1b:ab:fc:bd:55:
5f:1d:49:39:29:da:3b:6b:05:a7:41:59:e0:4a:f1:d2:0b:8b:
6e:b7:62:58:b2:10:86:76:e1:9e:85:62:e7:79:5d:1e:a7:3b:
74:dc:d3:86:db:a7:87:6c:ae:dd:c8:97:c0:a3:62:e4:9a:78:
7e:69:b7:cb:a8:ef:b0:9a:f9:87:2d:08:25:c9:f3:07:d2:d3:
d7:c0:3a:f3:21:a8:3e:d9:1e:51:f7:c2:17:16:64:d6:ee:30:
31:3d:91:5c:71:ab:bc:bb:24:ec:f7:9d:94:c5:3f:d6:9a:30:
19:8c:ac:b6:1f:dc:93:23:c8:54:17:60:5d:b9:dd:ac:fd:41:
39:2f:a0:b8:09:d1:a4:15:1b:92:64:e1:99:c3:8a:43:b4:fc:
b5:39:d0:53:57:cd:cd:fe:94:2e:25:5c:0f:3a:5c:ef:88:95:
7f:4e:77:11:71:d7:c5:64:78:57:f7:08:ad:b0:7c:35:e6:84:
54:4a:10:86:10:d2:28:63:ea:d5:20:0b:dc:9e:db:04:3b:3f:
43:1c:42:be:8a:91:72:13:cd:e3:28:7f:ae:46:12:ba:ba:93:
1b:97:59:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org