Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6540c51-b8fe-488d-b3bd-fe6a38f6a4bc/582dad589808559aa1ba3aaed0a068bfbac75f4b.roa
File: 582dad589808559aa1ba3aaed0a068bfbac75f4b.roa (raw, json)
Hash identifier: yplWOp7EC+OHohi4AExizsYukvcs/zXwrk4nH/vR+5Q=
Subject key identifier: FB:76:CA:06:2E:C3:7E:C2:F1:9A:F5:39:78:6F:9F:BC:BD:C4:A9:FE
Certificate issuer: /CN=e608a47f53edec039c8c0ac51d745d44cfdb8a00
Certificate serial: 0CF97D
Authority key identifier: 2B:E0:79:98:78:C7:4A:58:B7:B5:58:4F:1C:AA:85:A9:99:E9:9A:99
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e608a47f53edec039c8c0ac51d745d44cfdb8a00.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e6540c51-b8fe-488d-b3bd-fe6a38f6a4bc/582dad589808559aa1ba3aaed0a068bfbac75f4b.roa
Signing time: Wed 24 Mar 2021 14:42:27 +0000
ROA not before: Wed 24 Mar 2021 14:42:27 +0000
ROA not after: Tue 24 Mar 2026 14:42:27 +0000
asID: 264812
IP address blocks: 170.238.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850301 (0xcf97d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e608a47f53edec039c8c0ac51d745d44cfdb8a00
Validity
Not Before: Mar 24 14:42:27 2021 GMT
Not After : Mar 24 14:42:27 2026 GMT
Subject: CN=582dad589808559aa1ba3aaed0a068bfbac75f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a5:58:cc:8f:82:31:0a:9a:00:53:7b:46:47:
3b:81:53:cf:94:12:48:d8:fd:c0:35:f7:75:81:04:
42:34:95:0c:b7:27:e2:3f:16:33:42:74:3d:39:30:
84:72:35:98:2c:e8:d2:c9:c5:60:4f:1d:3f:08:ab:
b9:38:5b:31:83:de:e9:51:ef:2b:ea:5d:ac:aa:94:
44:36:b0:6a:05:b9:0d:bd:7c:3e:72:f9:a4:87:51:
84:e8:82:1c:0c:ee:84:4d:c4:3c:98:4f:e8:37:0a:
41:03:9c:a5:07:e7:f2:99:87:f2:24:50:5a:9a:02:
61:75:d0:93:92:e6:17:c7:51:46:53:26:ea:7b:a5:
0d:4f:a7:9f:68:83:d2:dc:db:76:b1:22:3f:a1:d7:
e7:8b:8d:ef:12:bd:2e:b8:46:7d:77:88:ad:8e:00:
a9:4b:ba:05:12:0a:f1:ab:75:33:68:18:90:db:00:
3a:70:71:c0:b5:3f:b8:98:76:10:bd:b1:30:e0:22:
35:50:8f:90:41:73:e7:66:8c:e2:92:04:fa:eb:94:
6b:83:e1:42:5c:a1:e1:80:93:e1:03:7d:08:13:e5:
bc:8b:3c:bb:6a:cf:e0:d1:ed:0e:cf:b7:48:ab:53:
a3:3b:32:68:c6:93:45:63:34:6f:a8:c8:79:70:e9:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:CA:06:2E:C3:7E:C2:F1:9A:F5:39:78:6F:9F:BC:BD:C4:A9:FE
X509v3 Authority Key Identifier:
keyid:2B:E0:79:98:78:C7:4A:58:B7:B5:58:4F:1C:AA:85:A9:99:E9:9A:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e608a47f53edec039c8c0ac51d745d44cfdb8a00.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6540c51-b8fe-488d-b3bd-fe6a38f6a4bc/582dad589808559aa1ba3aaed0a068bfbac75f4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e6540c51-b8fe-488d-b3bd-fe6a38f6a4bc/e608a47f53edec039c8c0ac51d745d44cfdb8a00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.238.108.0/22
Signature Algorithm: sha256WithRSAEncryption
39:30:c8:af:fb:4c:cd:6a:28:85:2f:20:8c:d1:d7:96:30:aa:
8e:71:68:b8:86:a9:4a:ce:95:6f:e4:68:1b:e1:a6:50:0c:d7:
96:a0:40:af:1c:f8:9d:e9:f7:f9:69:f0:5f:e9:c1:0b:81:70:
a6:bd:9f:92:db:30:66:f7:ae:89:98:ea:f8:b7:ee:f7:01:b4:
3d:8a:54:f7:6e:a0:26:6d:2c:c3:bf:f0:34:2c:52:70:c3:6c:
68:2b:b6:78:34:05:cb:1c:46:65:29:e0:09:13:7c:d4:2d:4f:
3d:b0:48:4f:a2:2c:47:b3:d5:a6:3a:97:30:e9:ea:43:5d:f8:
63:d1:6a:0f:33:97:89:a8:f7:d0:98:2f:19:0b:fe:51:a9:54:
19:31:f2:47:a9:9d:89:29:73:96:18:f0:9a:6e:31:18:41:93:
1d:3c:d8:97:d2:fa:f0:ab:26:79:51:63:1a:51:84:8d:52:2d:
79:be:6c:cf:70:27:29:dc:cc:63:27:34:c0:f6:19:5b:6b:59:
24:37:a1:bb:40:e5:e8:2e:34:be:84:6b:84:94:cd:83:e9:bf:
18:e9:89:41:4a:3f:70:71:68:7a:64:2e:41:e2:60:7d:05:55:
60:95:64:60:26:12:f9:79:c3:f5:d0:f0:a3:02:cd:9d:f9:7a:
33:50:27:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org