Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/ffbdfc99dd93ffdedc86b4424153358bc4cd9537.roa
File: ffbdfc99dd93ffdedc86b4424153358bc4cd9537.roa (raw, json)
Hash identifier: fLKNdFjgdGGPtJa5MfYrtjdp5w2ixGGt/67ImPXzjfE=
Subject key identifier: 0B:53:E6:FB:68:8C:F3:C6:0C:18:E2:BB:EE:26:22:11:4E:78:06:85
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 23DC06
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/ffbdfc99dd93ffdedc86b4424153358bc4cd9537.roa
Signing time: Tue 11 Jul 2023 17:10:53 +0000
ROA not before: Mon 10 Jul 2023 17:10:53 +0000
ROA not after: Fri 11 Jul 2025 17:10:53 +0000
asID: 28075
IP address blocks: 198.12.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2350086 (0x23dc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Jul 10 17:10:53 2023 GMT
Not After : Jul 11 17:10:53 2025 GMT
Subject: CN=ffbdfc99dd93ffdedc86b4424153358bc4cd9537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f4:52:12:d7:5e:0d:4d:fa:ee:44:70:14:4c:
40:75:5e:cf:f6:3c:a4:a2:ba:38:d7:6e:31:78:93:
b9:cb:44:67:4f:41:89:83:4b:e0:10:b4:ff:b7:35:
b4:f5:a0:c0:44:ff:7d:4e:a2:42:60:f8:a7:ea:e0:
f8:c1:f3:b4:2f:be:4b:f2:ba:72:93:c0:01:e6:0c:
4d:e1:f4:f5:15:ea:dc:07:46:14:de:18:17:83:18:
a3:5a:78:60:36:26:72:c9:fa:52:d1:45:11:15:6b:
95:eb:24:a7:49:65:11:87:49:b8:07:f1:bb:19:19:
4d:60:b2:af:b2:6b:4b:79:ae:b2:a4:e9:7f:e3:d6:
a4:d7:0f:40:70:71:c9:4b:8b:98:18:f2:67:dd:5e:
7f:5b:5e:db:ab:42:02:08:5c:47:c5:11:27:2d:04:
6a:0c:0f:f4:83:cf:b1:83:f3:1f:01:84:dd:57:4f:
fd:bd:11:65:ac:8c:00:80:68:a1:b2:10:fc:ba:91:
56:bf:7d:93:1a:9a:95:1a:8c:db:14:ae:61:9b:2c:
72:53:8c:be:d0:17:1f:bf:2f:a0:a6:7a:8c:b6:8f:
8e:de:d6:f0:53:9b:b4:f3:dd:c2:ee:d6:be:d2:a4:
d6:36:91:9d:07:43:ff:14:a1:40:52:f6:ed:77:4d:
27:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:53:E6:FB:68:8C:F3:C6:0C:18:E2:BB:EE:26:22:11:4E:78:06:85
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/ffbdfc99dd93ffdedc86b4424153358bc4cd9537.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.12.44.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:b7:dc:65:db:2d:e8:22:d8:8b:ca:f9:c5:10:36:ec:cc:a7:
6b:46:f7:2e:f5:1e:7d:9c:50:8c:3f:a9:f4:22:ee:8f:8c:c1:
9e:8c:f8:dd:8a:6c:4a:fd:7e:8e:c4:87:13:f0:63:06:8d:5a:
a8:da:82:59:29:b9:52:80:6f:e6:6e:d9:1e:98:a7:0c:3c:d9:
fb:1b:25:a4:38:e7:26:13:1e:78:3d:de:95:ff:66:cb:4c:0b:
97:26:3d:4a:d9:8e:21:45:57:de:95:d9:5b:02:11:37:4d:31:
cb:b5:fc:08:6f:ad:01:6d:7a:58:4c:4e:de:9e:da:eb:d2:29:
9f:22:96:dd:f0:80:9d:9e:f9:6a:21:2b:bf:0b:d6:a6:fe:7b:
20:23:49:41:66:32:ce:85:f8:f1:c0:7e:db:c8:43:d6:90:47:
c5:b0:51:79:47:b3:c7:47:67:99:d1:b5:7c:5c:21:e0:4d:a6:
1e:4f:c8:e9:3f:44:a6:e4:49:01:62:07:68:95:5a:df:33:5c:
00:fe:fe:45:d0:a0:c3:80:6b:9f:87:93:8f:a1:9f:29:80:8d:
f3:f9:38:3d:a7:7b:be:37:3e:64:a1:be:ed:de:dc:7e:33:20:
ab:d1:e6:b6:b3:27:15:0b:35:fd:b9:a5:ee:2d:9f:18:82:a4:
90:95:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org