Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/04bd1ffc7595672097f7dd70c7a97b977273609c.roa
File: 04bd1ffc7595672097f7dd70c7a97b977273609c.roa (raw, json)
Hash identifier: 3/kD1lluWGk+2PWCi1zZ4YxTfsRxSAHAfVzqyJpsRH8=
Subject key identifier: A9:D2:64:EE:0A:6B:AD:46:9E:79:11:84:2D:70:C5:28:03:A3:61:BE
Certificate issuer: /CN=b7f1296c01cda2bce364cd2e1662759a0dfc92bd
Certificate serial: 0D8ABC
Authority key identifier: CB:8E:5F:B1:CF:1C:FC:20:81:36:1B:EB:51:E0:A2:36:F6:EB:87:9E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/04bd1ffc7595672097f7dd70c7a97b977273609c.roa
Signing time: Wed 24 Mar 2021 14:37:26 +0000
ROA not before: Wed 24 Mar 2021 14:37:26 +0000
ROA not after: Tue 24 Mar 2026 14:37:26 +0000
asID: 263248
IP address blocks: 170.84.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887484 (0xd8abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f1296c01cda2bce364cd2e1662759a0dfc92bd
Validity
Not Before: Mar 24 14:37:26 2021 GMT
Not After : Mar 24 14:37:26 2026 GMT
Subject: CN=04bd1ffc7595672097f7dd70c7a97b977273609c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:1e:05:84:a6:30:0f:2c:f7:97:a7:85:d4:
e3:d5:c1:0c:9a:7b:71:3c:91:11:75:d2:ad:cd:69:
2c:fe:3d:b8:99:9e:d7:ca:da:63:51:00:5c:0e:25:
a8:9e:49:11:20:43:2b:ea:23:32:dd:3e:cb:06:da:
d2:55:75:3f:c1:97:2f:8a:26:a9:49:6d:5a:fb:fa:
6c:b2:96:4a:d8:e9:db:bb:23:6d:75:f0:16:a4:09:
fb:27:0d:94:64:cd:c1:4b:59:19:85:7d:63:b5:9d:
70:90:0b:33:60:e2:2a:bd:a8:2e:4e:e3:03:bb:95:
a1:d1:60:76:8e:bc:bd:50:b9:dc:5f:a9:05:52:96:
bd:d1:82:ef:74:4d:75:a6:f6:ad:34:4c:b2:28:10:
3a:70:42:ef:c7:d0:06:7f:a6:d2:7f:06:37:d9:da:
1b:d5:76:d9:41:ae:a7:32:c5:92:cc:b3:99:e0:ab:
f1:f1:00:c8:af:9b:5f:fa:97:bc:7d:d3:b2:f7:a3:
be:45:ea:69:c3:1f:0f:f4:cd:f4:b1:21:26:eb:79:
8d:81:94:6a:51:6b:14:c1:34:35:8f:88:39:24:f1:
da:d0:c4:04:59:ad:d4:c5:cb:8b:4f:66:ed:f1:22:
7c:25:1f:ca:71:57:0d:74:5d:0b:69:75:bc:6a:5f:
61:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D2:64:EE:0A:6B:AD:46:9E:79:11:84:2D:70:C5:28:03:A3:61:BE
X509v3 Authority Key Identifier:
keyid:CB:8E:5F:B1:CF:1C:FC:20:81:36:1B:EB:51:E0:A2:36:F6:EB:87:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/04bd1ffc7595672097f7dd70c7a97b977273609c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.108.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:92:2f:e9:40:57:ef:12:fe:53:e1:3d:48:77:55:ed:94:ca:
22:23:f0:b0:fe:c1:20:3e:42:e4:b5:bb:91:ce:ed:bb:8f:4f:
f6:b2:9e:d5:f6:8d:38:c1:19:61:dc:45:2a:74:83:e0:4b:29:
d4:7a:91:78:c9:2b:b3:28:fd:93:1a:54:62:ef:71:d2:9e:ad:
54:0b:5e:48:3e:76:eb:09:9b:e3:16:e0:4e:64:05:4d:2d:5d:
11:d6:75:0d:a8:ae:37:2a:55:95:1a:b5:d2:ce:23:6c:75:29:
b8:e9:d2:f2:60:bb:48:0e:8c:4b:c0:86:a1:32:74:71:7d:b7:
db:55:5d:11:9a:4c:7d:0c:61:2d:b8:a7:e8:f6:92:c5:ac:d4:
c0:22:53:36:e2:bb:e7:cf:5d:72:de:b5:01:03:f4:02:7c:4a:
f9:e9:b0:0b:df:47:58:b3:7d:20:93:f6:ac:c0:ee:56:1c:2d:
7b:88:97:8d:a6:d0:84:d9:b8:27:9c:eb:8b:89:d7:69:d4:6c:
69:8b:7d:44:61:22:5f:0c:b4:d9:a0:8e:e4:fe:ee:5b:6c:73:
1e:dc:d7:5a:77:a6:0f:38:86:7e:07:17:d1:22:fe:36:ec:fd:
f7:cc:88:a3:bd:41:93:60:24:99:98:93:d3:44:fc:92:8e:d5:
05:21:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:33 2024 by rpki-client on console-fra.rpki-client.org