Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/f525abc7390cb0308830adc374e2c934ab548830.roa
File: f525abc7390cb0308830adc374e2c934ab548830.roa (raw, json)
Hash identifier: DY4zVNJ7Kmc9DYF1LZ8GSZb4dL6CtLO3vSQnfGQzam8=
Subject key identifier: 52:6E:66:80:0F:5F:A4:C5:C1:ED:93:D9:E3:DA:E0:3E:2E:1E:08:B1
Certificate issuer: /CN=fd59a2161d14de91096d6cf6cd532d586f95771c
Certificate serial: 111629
Authority key identifier: 45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/f525abc7390cb0308830adc374e2c934ab548830.roa
Signing time: Mon 11 Apr 2022 15:17:01 +0000
ROA not before: Mon 11 Apr 2022 03:00:00 +0000
ROA not after: Thu 11 Apr 2024 03:00:00 +0000
asID: 269924
IP address blocks: 207.191.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1119785 (0x111629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd59a2161d14de91096d6cf6cd532d586f95771c
Validity
Not Before: Apr 11 03:00:00 2022 GMT
Not After : Apr 11 03:00:00 2024 GMT
Subject: CN=f525abc7390cb0308830adc374e2c934ab548830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:bb:80:75:87:e8:0c:57:60:ca:3c:7c:ad:
91:b7:98:6a:7d:7b:ea:1c:d5:b7:77:5c:3d:b4:6a:
84:91:3e:d6:77:f2:e5:8a:b6:81:2d:9a:44:85:6b:
79:f6:53:98:ab:9b:be:e0:2f:ed:85:69:84:b1:23:
e2:92:4e:fa:ef:9d:bd:74:86:62:14:9b:60:c9:30:
6c:29:54:3c:0f:c1:8b:30:81:cc:a4:d2:13:f6:94:
a2:6c:3a:33:c9:4a:d0:ea:42:4a:16:05:46:e8:54:
30:42:14:dc:c0:0b:c8:66:ab:c4:11:0f:9d:b1:22:
56:f5:ef:f1:b3:0e:76:0f:57:08:91:90:0a:bb:35:
e0:b7:dd:64:fc:12:75:36:82:ff:1f:15:9f:36:fc:
d7:0e:01:c0:97:e7:ac:3f:14:f2:63:8c:f7:0d:4f:
50:15:bb:42:3b:9a:54:96:92:77:84:7b:00:40:90:
81:16:e4:6a:36:d4:8a:92:85:f6:85:62:5d:7d:42:
0d:7c:64:28:9d:4a:3d:37:e7:6a:2c:d8:6c:f3:71:
55:82:88:ba:ec:34:a4:85:e4:3b:d4:78:d4:0c:64:
56:b9:8d:5d:e7:17:b4:6b:6b:2a:b7:ab:3c:3e:f4:
92:80:da:7c:8a:23:7d:11:a6:11:99:c6:b4:f5:e8:
48:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6E:66:80:0F:5F:A4:C5:C1:ED:93:D9:E3:DA:E0:3E:2E:1E:08:B1
X509v3 Authority Key Identifier:
keyid:45:61:FF:81:E1:21:65:FD:CB:8B:02:06:F2:A5:43:43:B3:F5:59:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd59a2161d14de91096d6cf6cd532d586f95771c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/f525abc7390cb0308830adc374e2c934ab548830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e5eced18-bd57-40b6-b194-5ce78b4b7f31/fd59a2161d14de91096d6cf6cd532d586f95771c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.191.164.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:8e:0a:cc:ae:c6:61:ec:7e:56:fb:b1:0c:aa:d1:42:98:0d:
0b:f4:f3:15:d8:95:2e:c1:4a:49:b0:0e:5b:0f:7f:50:a1:72:
66:af:ad:51:13:63:47:41:bb:1f:3c:c8:c9:ce:88:c6:6d:c7:
b1:a4:df:a1:cc:66:e6:6a:e5:68:7d:ad:23:ee:eb:2a:ee:e1:
4c:4e:76:26:33:01:75:0d:dc:2c:45:6d:a6:6a:90:97:60:c1:
f5:3d:a5:aa:0e:77:4d:c8:9c:79:8d:75:7e:4d:19:d3:a2:84:
50:66:68:54:f9:78:f2:22:fe:57:e0:2d:ae:be:81:e0:fb:f0:
d8:83:2b:7d:1f:85:38:ba:06:da:31:9a:a3:4b:bb:91:47:d7:
ee:e2:56:ad:0a:a2:ce:f8:a8:ab:02:d3:f4:6f:a3:be:8c:00:
d0:c8:62:f0:50:c8:ad:8c:e9:07:87:12:18:72:45:eb:d6:4b:
9b:ec:ba:b3:4e:19:ce:38:a8:74:26:f2:ec:8a:db:d2:84:c0:
18:7f:ea:f1:a2:bb:27:f5:ba:c8:2b:71:74:8f:3e:21:c8:14:
43:bc:e9:3f:4c:47:e0:b0:a3:18:9c:1d:e9:e3:b5:41:c4:79:
03:ca:83:20:5e:e1:59:29:c0:de:9a:f1:be:14:01:5b:39:f2:
fd:4c:08:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:41 2024 by rpki-client on console-ams.rpki-client.org