Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/bca00edbb458dee61c08c25810916e3cf42a2dfc.roa
File: bca00edbb458dee61c08c25810916e3cf42a2dfc.roa (raw, json)
Hash identifier: Z6a7eQ2JqLqCfMK/j+gmF+Rkq39VBc9w2eBDK2f766Y=
Subject key identifier: 7E:9B:7F:7A:F9:71:3D:13:74:8D:16:48:0B:32:5A:8D:17:25:5B:E4
Certificate issuer: /CN=3443505eddac7b5aa6eddaedee91340561a130ec
Certificate serial: 1236C8
Authority key identifier: D5:D4:C7:13:9B:11:47:DC:25:7C:2F:DF:A7:B0:B2:78:CA:FE:A8:6D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3443505eddac7b5aa6eddaedee91340561a130ec.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/bca00edbb458dee61c08c25810916e3cf42a2dfc.roa
Signing time: Thu 29 Jun 2023 08:30:03 +0000
ROA not before: Wed 28 Jun 2023 08:30:03 +0000
ROA not after: Fri 27 Jun 2025 08:30:03 +0000
asID: 52393
IP address blocks: 168.0.212.0/22 maxlen: 22
186.179.0.0/18 maxlen: 18
190.185.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193672 (0x1236c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3443505eddac7b5aa6eddaedee91340561a130ec
Validity
Not Before: Jun 28 08:30:03 2023 GMT
Not After : Jun 27 08:30:03 2025 GMT
Subject: CN=bca00edbb458dee61c08c25810916e3cf42a2dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a3:da:bb:05:45:c6:8d:60:5a:bf:37:37:31:
8d:7e:41:e2:f0:83:66:aa:02:85:24:d3:f3:c6:f1:
16:a3:1c:7a:56:02:9d:0a:bd:09:a0:54:14:b0:01:
ad:f9:c0:2a:61:b4:ac:c4:77:e2:8c:73:8c:85:d5:
a2:30:6f:09:7e:cd:fa:27:2f:20:58:32:00:2c:ba:
cd:c1:21:1c:ac:cb:a3:76:a3:91:07:bd:a2:f4:e7:
f3:9e:15:18:1a:c1:e6:15:e3:2d:01:b8:63:70:21:
f8:1e:57:ab:fc:29:af:90:ba:a4:4a:be:10:07:1c:
71:d2:3d:26:db:f8:12:c6:e2:a4:b0:28:76:fa:53:
f1:cd:a6:a7:fb:ed:36:82:28:d4:12:cc:e1:ca:90:
0f:38:52:4c:04:8e:cd:8c:c6:51:f0:9d:c2:c7:2f:
ee:5b:78:34:7b:21:bb:b8:43:c1:2a:b5:94:e4:4b:
89:e9:bf:16:84:a1:e0:c4:f6:07:d1:70:45:87:10:
36:23:28:11:79:63:e8:22:ad:c1:f3:8a:d9:ea:6d:
19:88:ff:66:f1:97:b6:fb:a7:d2:e1:c8:3b:b8:1b:
ba:0a:fa:8e:0f:a2:57:b4:08:da:4d:14:ad:00:74:
c7:a7:17:2b:5d:3c:aa:6a:82:e2:6f:69:ed:56:57:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9B:7F:7A:F9:71:3D:13:74:8D:16:48:0B:32:5A:8D:17:25:5B:E4
X509v3 Authority Key Identifier:
keyid:D5:D4:C7:13:9B:11:47:DC:25:7C:2F:DF:A7:B0:B2:78:CA:FE:A8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3443505eddac7b5aa6eddaedee91340561a130ec.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/bca00edbb458dee61c08c25810916e3cf42a2dfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/3443505eddac7b5aa6eddaedee91340561a130ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.212.0/22
186.179.0.0/18
190.185.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:7c:c9:28:3b:86:b3:30:8f:72:55:3d:02:4d:08:df:de:40:
a4:a4:29:c6:d9:7f:6d:6f:c3:c4:63:47:c8:24:5b:6e:0b:36:
84:89:72:a2:0a:6e:6b:0a:59:9d:7a:d4:78:83:26:2e:52:b3:
a4:f3:1d:2b:f2:c0:d2:44:d3:00:4b:1b:3f:bd:3c:3d:0b:75:
67:66:62:18:60:d2:ba:00:f0:20:21:17:62:d1:c0:cc:36:d7:
22:a1:e2:2f:22:23:39:be:33:6f:3e:5b:84:4a:82:87:89:f0:
4c:4c:f7:f9:30:f2:32:fb:73:f5:8a:62:14:5c:b2:3b:c6:83:
d9:75:a2:fd:6f:dd:97:81:d2:fa:d1:5f:9a:a1:65:01:3d:14:
4d:a4:ef:71:4c:3d:76:c5:a4:c7:f2:0f:fe:2f:6e:83:42:31:
5b:78:24:fb:8a:d2:93:36:7b:d9:bd:49:28:55:fb:d3:83:dd:
78:2f:59:d5:51:77:cc:fe:ef:b6:54:2e:68:a2:3f:9d:13:44:
ce:e9:77:aa:34:91:43:4d:3a:27:a6:49:9e:74:ac:98:0c:75:
37:20:19:89:b4:b0:34:5f:37:fb:ed:3d:11:fc:02:7f:9f:ae:
d7:cf:0f:e3:a3:1c:41:9c:ea:6c:d1:ac:4d:93:ff:6e:f2:e4:
c7:ea:e3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:43 2024 by rpki-client on console-ams.rpki-client.org