Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/f3d7a57c4a3f103ab3cb85aaf609a94ee7a2dbe1.roa
File: f3d7a57c4a3f103ab3cb85aaf609a94ee7a2dbe1.roa (raw, json)
Hash identifier: AIi8Mick374Z3oXQPruqvb+GXRWBAHd2ZQDL19PcHV4=
Subject key identifier: C6:FC:BB:68:6E:1A:5B:57:C6:8D:C6:ED:56:16:5E:D9:77:21:53:3E
Certificate issuer: /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial: 275313
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/f3d7a57c4a3f103ab3cb85aaf609a94ee7a2dbe1.roa
Signing time: Tue 27 Feb 2024 23:07:45 +0000
ROA not before: Tue 27 Feb 2024 23:07:45 +0000
ROA not after: Fri 27 Feb 2026 23:07:45 +0000
asID: 263781
IP address blocks: 168.234.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2577171 (0x275313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
Validity
Not Before: Feb 27 23:07:45 2024 GMT
Not After : Feb 27 23:07:45 2026 GMT
Subject: CN=f3d7a57c4a3f103ab3cb85aaf609a94ee7a2dbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:3f:24:d5:40:84:fb:09:f7:c9:e7:5f:60:
0d:b1:23:b2:02:21:63:10:75:d7:1b:7b:fd:08:ef:
25:33:f8:c8:31:5e:8f:df:c8:70:5b:d2:fb:e7:6b:
56:24:8a:c2:fd:31:17:10:42:5c:62:12:82:20:e5:
5f:b1:b2:6d:a8:67:9e:66:83:bc:31:24:55:de:e0:
8c:a2:04:38:6f:9a:df:cb:94:4d:ef:72:d2:66:6b:
85:b1:b3:51:16:0d:f0:a0:ff:70:bd:6f:f2:c4:8d:
be:b1:5d:66:a5:42:e3:b2:eb:87:d3:31:ac:4e:79:
7a:b5:ed:48:a2:3d:f9:06:f0:08:cc:b9:8f:eb:34:
96:ba:21:e6:4d:e5:fb:4b:8c:c2:ee:32:1b:b7:43:
24:81:a2:23:55:81:35:58:cf:b4:e3:f7:55:05:a3:
69:47:42:13:58:82:ec:b2:e5:d0:b5:4c:31:1c:cf:
b3:db:51:7a:cc:98:85:47:39:c8:74:3d:ce:5a:83:
6e:b4:01:7c:b1:55:4c:b2:39:65:03:ef:4f:1a:6d:
bd:1a:d3:77:18:12:30:c5:ca:44:24:74:28:ba:9c:
51:a9:59:ea:4b:df:b6:ad:32:b6:33:aa:55:1b:f0:
e5:34:36:94:02:9b:b4:cf:3f:b3:53:16:dd:69:9f:
a1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FC:BB:68:6E:1A:5B:57:C6:8D:C6:ED:56:16:5E:D9:77:21:53:3E
X509v3 Authority Key Identifier:
keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/f3d7a57c4a3f103ab3cb85aaf609a94ee7a2dbe1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.106.0/24
Signature Algorithm: sha256WithRSAEncryption
20:e2:32:eb:1b:a5:df:5a:5e:42:00:29:0d:5e:04:69:84:44:
05:b1:1a:4b:53:ce:0e:8c:2a:2a:69:2c:33:02:9b:93:e8:34:
e3:bc:fe:0d:f1:07:1d:c7:5d:40:5e:a6:ca:3a:78:c4:5b:38:
c7:cc:4e:67:65:1d:a9:12:8e:ab:e7:6a:e3:d0:18:b9:ae:79:
3f:b5:ba:0f:15:83:24:ff:72:f5:5b:c0:2b:ea:a8:c4:f1:6c:
a9:ee:49:2e:7a:1d:3e:c4:ea:b7:c6:50:d4:62:31:ec:d8:44:
91:a8:91:1d:36:69:09:77:d8:f3:08:8c:60:3a:e8:8d:cf:7c:
95:78:fd:3f:49:a9:aa:de:72:70:b2:0e:1b:16:ae:b6:bd:c5:
2c:de:d2:18:1b:2d:f5:6c:63:fb:93:c7:6e:95:03:4a:cb:50:
20:5e:65:64:e0:a1:fc:0d:8e:94:55:e4:da:64:12:52:0d:05:
5f:1e:87:c0:db:78:82:80:6f:04:b3:f7:33:e7:39:29:22:ef:
d3:d6:b0:32:aa:b5:2c:73:ce:0f:a3:d3:da:4b:e2:81:3b:4b:
da:32:61:92:a5:65:46:6e:c5:7a:b3:07:b7:0b:0e:28:6e:6e:
52:31:dd:90:0c:4d:16:f5:7b:e9:1c:85:d9:92:d5:ed:a6:15:
1a:31:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org