Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/d2be26311d498389ed4cca825d2aa910b0034b9b.roa
File: d2be26311d498389ed4cca825d2aa910b0034b9b.roa (raw, json)
Hash identifier: sd1wtGYM6EwQyzJbVoc1MjhFYBPDcOVGBbpbo85SVJs=
Subject key identifier: B6:EA:95:0B:71:69:E2:C7:0E:10:78:7E:BE:ED:7B:64:B8:34:DE:4C
Certificate issuer: /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial: 202FED
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/d2be26311d498389ed4cca825d2aa910b0034b9b.roa
Signing time: Tue 16 May 2023 17:37:07 +0000
ROA not before: Mon 15 May 2023 17:37:07 +0000
ROA not after: Fri 16 May 2025 17:37:07 +0000
asID: 262166
IP address blocks: 168.234.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2109421 (0x202fed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
Validity
Not Before: May 15 17:37:07 2023 GMT
Not After : May 16 17:37:07 2025 GMT
Subject: CN=d2be26311d498389ed4cca825d2aa910b0034b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:a4:2a:d5:0c:ca:b2:f9:7b:4d:7b:22:2c:
ad:a7:49:7d:61:96:48:ef:02:5b:c1:fa:59:38:41:
41:a3:fc:1b:71:4c:86:5c:e2:f7:8a:e0:0c:df:48:
88:54:d3:9e:02:57:76:95:28:a8:af:c1:93:39:44:
6b:9d:b6:71:34:1b:a5:70:14:d0:2c:52:73:17:de:
ae:dd:ee:c2:1c:d5:d8:3b:ec:75:1c:17:57:0e:8e:
3a:2a:a0:bb:92:ad:d7:e1:1a:34:20:3f:f8:6e:25:
e5:00:42:d1:24:9b:7e:fa:63:a4:ce:df:be:42:02:
15:55:9c:b2:4a:ea:81:03:cc:ff:32:51:e4:35:92:
18:0c:1b:17:1f:c3:6d:2e:cc:a6:be:4a:33:45:aa:
fe:04:f1:11:65:72:2d:fe:19:ac:73:79:1b:7f:a9:
08:5d:81:db:d3:d8:16:54:c3:6e:59:96:35:89:56:
5c:4e:f3:1c:70:64:9c:06:11:21:7c:f3:ba:0f:5c:
1d:e7:ae:02:26:f4:2d:11:c9:b6:41:c0:d9:67:05:
fb:b4:75:ff:85:4c:10:e4:89:e3:11:87:58:10:7d:
24:e1:bd:ed:14:86:e5:33:44:dc:9d:93:4f:a3:25:
20:aa:6a:39:99:34:ac:c0:67:83:58:63:7a:53:a1:
9e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EA:95:0B:71:69:E2:C7:0E:10:78:7E:BE:ED:7B:64:B8:34:DE:4C
X509v3 Authority Key Identifier:
keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/d2be26311d498389ed4cca825d2aa910b0034b9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.108.0/22
Signature Algorithm: sha256WithRSAEncryption
11:39:87:fa:5f:a0:11:04:12:35:60:cb:05:9f:88:26:e9:2e:
ab:59:17:24:a6:aa:fb:f1:20:4e:67:b6:e7:51:9c:e3:fd:bb:
6c:74:0c:02:bc:2f:1f:f2:1c:05:0b:21:9c:2d:33:37:49:da:
2e:28:2b:72:9f:0b:68:ab:4d:84:77:8f:02:ca:21:b7:4b:2b:
5c:a7:eb:31:ab:c3:b0:5c:51:99:f0:d3:21:08:97:e8:11:59:
29:4a:bf:95:c4:da:52:24:5a:11:6a:93:10:4a:8b:e5:2f:47:
78:51:59:c9:1b:ba:c9:78:cf:b3:42:bd:02:62:65:47:c3:6b:
5c:a0:c4:7a:74:12:c2:c1:b6:2d:c0:a2:c8:95:99:31:96:c0:
c2:26:79:e3:e2:c0:77:6f:f2:bd:b4:50:e3:ea:40:8c:8e:23:
94:a6:59:d6:fe:56:5d:1b:1b:85:aa:8e:a3:19:ec:ef:89:a0:
15:8b:90:eb:df:c4:f1:43:77:96:a9:e3:12:20:63:bf:a9:e3:
02:ab:73:e3:47:8f:cf:21:42:16:2a:b5:86:e1:23:64:15:d9:
bc:38:39:f2:d5:aa:ca:3f:e7:95:f4:b7:34:47:11:6b:91:40:
ad:ab:a1:0e:6e:09:24:97:e7:d2:6c:73:37:2f:12:40:d2:fc:
17:13:10:71
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDIC/tMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDM3
YTA3NDBlMGI0NjJiMzZmZDIyN2IyMjBhZmYzMzUzOGI5MzJhNzIwHhcNMjMwNTE1
MTczNzA3WhcNMjUwNTE2MTczNzA3WjAzMTEwLwYDVQQDEyhkMmJlMjYzMTFkNDk4
Mzg5ZWQ0Y2NhODI1ZDJhYTkxMGIwMDM0YjliMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsmukKtUMyrL5e017Iiytp0l9YZZI7wJbwfpZOEFBo/wbcUyG
XOL3iuAM30iIVNOeAld2lSior8GTOURrnbZxNBulcBTQLFJzF96u3e7CHNXYO+x1
HBdXDo46KqC7kq3X4Ro0ID/4biXlAELRJJt++mOkzt++QgIVVZyySuqBA8z/MlHk
NZIYDBsXH8NtLsymvkozRar+BPERZXIt/hmsc3kbf6kIXYHb09gWVMNuWZY1iVZc
TvMccGScBhEhfPO6D1wd564CJvQtEcm2QcDZZwX7tHX/hUwQ5InjEYdYEH0k4b3t
FIblM0TcnZNPoyUgqmo5mTSswGeDWGN6U6GeqwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFLbqlQtxaeLHDhB4fr7te2S4NN5MMB8GA1UdIwQYMBaAFM7h2MxrM3HBmchw
TET0Qk7gI9K+MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMzdhMDc0
MGUwYjQ2MmIzNmZkMjI3YjIyMGFmZjMzNTM4YjkzMmE3Mi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZjViODQ1ZGYtYjQ0NS00ZTlhLTliN2UtMzQxZWM0
ZjY5NDUzL2QyYmUyNjMxMWQ0OTgzODllZDRjY2E4MjVkMmFhOTEwYjAwMzRiOWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9mNWI4NDVkZi1iNDQ1LTRlOWEtOWI3ZS0zNDFl
YzRmNjk0NTMvMzdhMDc0MGUwYjQ2MmIzNmZkMjI3YjIyMGFmZjMzNTM4YjkzMmE3
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAqjqbDANBgkqhkiG9w0BAQsFAAOCAQEAETmH+l+gEQQSNWDL
BZ+IJukuq1kXJKaq+/EgTme251Gc4/27bHQMArwvH/IcBQshnC0zN0naLigrcp8L
aKtNhHePAsoht0srXKfrMavDsFxRmfDTIQiX6BFZKUq/lcTaUiRaEWqTEEqL5S9H
eFFZyRu6yXjPs0K9AmJlR8NrXKDEenQSwsG2LcCiyJWZMZbAwiZ54+LAd2/yvbRQ
4+pAjI4jlKZZ1v5WXRsbhaqOoxns74mgFYuQ69/E8UN3lqnjEiBjv6njAqtz40eP
zyFCFiq1huEjZBXZvDg58tWqyj/nlfS3NEcRa5FArauhDm4JJJfn0mxzNy8SQNL8
FxMQcQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org