Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/64097e4aa8e90eef8305845cbfba253529bcdc98.roa
File: 64097e4aa8e90eef8305845cbfba253529bcdc98.roa (raw, json)
Hash identifier: 4HCMvMgkZEqTWfWyQmLLnR+WwHpUikuXonVWtX4Ub4o=
Subject key identifier: 8E:1C:66:45:19:9F:9A:27:96:1F:BA:B1:50:D0:FA:6B:4D:9F:29:EA
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 2A212A
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/64097e4aa8e90eef8305845cbfba253529bcdc98.roa
Signing time: Thu 21 Mar 2024 15:27:02 +0000
ROA not before: Thu 21 Mar 2024 15:27:01 +0000
ROA not after: Sat 21 Mar 2026 15:27:01 +0000
asID: 28075
IP address blocks: 198.12.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2761002 (0x2a212a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Mar 21 15:27:01 2024 GMT
Not After : Mar 21 15:27:01 2026 GMT
Subject: CN=64097e4aa8e90eef8305845cbfba253529bcdc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:e5:6b:8c:75:c3:9f:85:cc:a6:a1:ea:9e:
c5:67:a3:02:28:8c:1a:42:bb:1d:01:b1:54:5b:bc:
02:4c:26:5a:cd:d9:ca:47:54:cc:7c:70:df:52:c8:
18:a7:9d:6b:21:d1:b4:8e:db:3e:ab:f2:32:68:92:
c2:19:9f:d3:8c:17:94:ce:72:c5:0d:59:1f:93:16:
00:fd:45:a6:ff:1b:e2:27:6c:36:5c:f4:b3:87:17:
45:b7:cb:ad:77:31:64:45:e8:99:00:de:e0:87:75:
57:b7:76:72:d8:53:c4:d7:48:cc:70:ae:c3:d1:84:
3e:46:c0:62:6b:37:42:2e:f3:80:29:6e:7d:e5:0d:
5a:d4:e7:24:33:14:fb:20:34:20:2b:a8:88:ba:aa:
94:24:3b:61:ce:e1:98:a3:99:20:89:f3:1d:09:a0:
6b:20:4b:af:6f:8a:2f:09:bb:da:67:d7:c7:9d:ba:
1a:7b:34:e2:cc:48:b5:fb:e7:82:f1:e5:89:e0:b7:
1a:74:96:96:d7:6a:aa:17:83:72:9e:29:ec:79:0b:
8b:25:af:18:ac:70:95:31:2b:ea:e7:63:4d:7c:5c:
b3:16:c6:89:68:99:e0:b3:c7:55:16:56:e6:cb:2d:
71:18:bc:43:94:d2:e7:d7:df:07:33:32:29:91:19:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1C:66:45:19:9F:9A:27:96:1F:BA:B1:50:D0:FA:6B:4D:9F:29:EA
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/64097e4aa8e90eef8305845cbfba253529bcdc98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.12.45.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:eb:62:f5:2c:67:3b:bd:51:c2:76:2d:c5:98:f8:48:de:a3:
4c:a6:8b:70:26:f5:e1:78:28:db:4a:1b:45:e4:89:58:99:77:
09:4d:33:b2:db:bf:5d:10:0f:ff:e6:29:49:74:67:c4:76:b2:
50:6c:de:5b:2d:23:5e:bd:2a:d1:81:6e:73:ed:fc:d2:55:2f:
93:dc:ea:a8:32:cf:4e:77:81:05:73:df:d9:97:b3:cc:23:d4:
a9:63:29:30:4a:f8:07:fa:eb:37:bd:14:96:49:7f:83:e6:6e:
03:dc:f9:ce:ca:e2:15:7c:93:a5:73:04:d4:0e:aa:3c:b4:7c:
1c:f4:15:30:0d:ab:10:bf:57:1b:d8:2c:5f:7b:ef:61:b6:bd:
b2:42:38:f6:98:59:9a:94:5b:99:a1:70:38:fc:3b:3b:42:7d:
a7:72:17:22:af:b1:f2:9e:58:ff:ef:88:32:1b:47:ae:96:dc:
73:1d:59:1e:36:a1:16:50:00:c4:a3:36:31:6e:ae:77:26:43:
a7:bf:e3:a5:b1:ce:e6:dd:53:d4:cb:10:d1:c5:0a:75:85:7d:
23:c6:a3:aa:51:11:57:52:25:9b:84:be:6f:2b:53:bd:3d:05:
ea:ef:c1:24:4e:bd:68:a5:9f:cb:34:a0:6a:d0:8f:16:18:f5:
6d:23:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org