Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/f9588e93ed20cd344f052b9573e4d9019629851c.roa
File: f9588e93ed20cd344f052b9573e4d9019629851c.roa (raw, json)
Hash identifier: djulVzGiWchcrSIB0QPOWYzOdTx4icYfRedx/yEAk30=
Subject key identifier: 8C:B8:F8:42:AA:A2:4F:21:88:11:93:F0:FD:70:F7:F1:7A:AB:CE:62
Certificate issuer: /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial: 202C9D
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/f9588e93ed20cd344f052b9573e4d9019629851c.roa
Signing time: Tue 16 May 2023 17:24:46 +0000
ROA not before: Mon 15 May 2023 17:24:46 +0000
ROA not after: Fri 16 May 2025 17:24:46 +0000
asID: 262166
IP address blocks: 168.234.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108573 (0x202c9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
Validity
Not Before: May 15 17:24:46 2023 GMT
Not After : May 16 17:24:46 2025 GMT
Subject: CN=f9588e93ed20cd344f052b9573e4d9019629851c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e0:d2:9d:fe:f6:22:d0:19:62:c7:d4:5c:3b:
cf:c2:d6:3a:1a:0a:ff:93:37:53:50:59:e9:86:b0:
0a:f0:56:03:ca:0f:19:0d:aa:0f:3b:2a:32:62:97:
03:d2:7b:01:0e:5a:f3:3d:d1:d2:2b:0e:88:3c:c1:
d9:f6:e4:70:06:c8:bd:dd:28:78:a8:e1:d8:18:d8:
18:1b:47:f6:02:0a:5f:cc:d4:94:36:85:38:36:a9:
e1:a6:8f:0e:eb:7c:5f:1a:ee:cc:21:b3:e6:73:37:
32:d3:e4:d7:18:3e:97:ed:d8:f4:73:1a:8b:20:dd:
3c:16:30:28:be:3c:ec:bc:11:6d:f1:f4:38:6e:b0:
bb:ef:4a:0a:7e:c8:e7:47:7f:06:db:a7:61:f5:fa:
a0:85:76:27:47:85:60:e6:a0:ce:b6:cc:0e:1d:d2:
8f:bb:ad:09:b1:11:1c:a2:77:4e:4a:06:62:72:e7:
05:ff:a2:30:d6:9c:07:41:59:92:86:28:5b:f7:cd:
23:4e:d1:60:55:64:83:dc:14:12:f2:1c:ec:1e:3d:
8d:4a:67:76:04:6b:5f:13:ca:d1:3d:2f:c6:41:79:
5c:8f:63:49:da:9b:21:65:0b:c8:1f:ad:48:93:23:
88:26:51:97:d1:5a:2a:69:a5:e8:22:08:ee:95:38:
a5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B8:F8:42:AA:A2:4F:21:88:11:93:F0:FD:70:F7:F1:7A:AB:CE:62
X509v3 Authority Key Identifier:
keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/f9588e93ed20cd344f052b9573e4d9019629851c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.96.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:1c:dc:c9:65:03:4c:e0:4a:83:3d:cc:71:86:ce:dd:8a:3b:
2c:74:8f:dc:3a:46:0f:10:61:95:e4:de:45:58:5c:32:73:64:
4e:ac:da:92:ba:9a:94:02:a4:61:bf:25:fb:c0:fb:1f:3f:6a:
a7:8f:89:87:1d:f3:7c:f8:fb:46:9e:72:81:53:29:f9:0c:92:
79:d4:30:03:9c:a4:82:bd:48:63:12:17:3e:3c:ce:c8:ea:fc:
8d:18:fc:10:fe:be:80:db:33:10:0a:99:11:d8:f6:87:19:c2:
f7:40:00:f5:49:6e:65:7e:90:bd:d7:80:49:81:d1:97:f0:2a:
50:6d:d4:91:80:10:0d:f5:86:01:34:0b:12:cb:c5:24:a7:47:
4b:1d:cc:eb:83:ab:95:6e:03:0e:79:87:53:b8:24:73:3e:92:
e3:cf:99:41:bf:19:e8:19:3c:dc:c3:cd:35:9a:0b:3e:ae:ab:
c5:e8:59:c7:4a:48:54:27:c7:f5:df:f7:50:80:5c:7f:9c:94:
56:cd:21:b3:a2:59:c0:52:32:d1:78:c4:d2:10:1d:73:31:2b:
07:65:7d:70:d1:a0:89:fc:78:71:da:3e:94:6b:e8:bf:df:8b:
90:a4:bc:2c:0a:b6:d2:cd:82:3a:6e:1c:be:a5:f4:4d:14:10:
6a:f5:7e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org