Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/fae2ed66e9700045285793ea4907be2a1b8a2d42.roa
File: fae2ed66e9700045285793ea4907be2a1b8a2d42.roa (raw, json)
Hash identifier: 1Bt3CqUz2LCauBHNVo7GK8GIUSY7b8LZJhaghJc2dg4=
Subject key identifier: 8C:77:66:00:7C:1E:34:74:02:B3:0E:FA:03:A5:1C:3D:1F:DE:E5:1F
Certificate issuer: /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial: 204662
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/fae2ed66e9700045285793ea4907be2a1b8a2d42.roa
Signing time: Tue 16 May 2023 18:21:09 +0000
ROA not before: Mon 15 May 2023 18:21:09 +0000
ROA not after: Fri 16 May 2025 18:21:09 +0000
asID: 262166
IP address blocks: 168.234.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115170 (0x204662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
Validity
Not Before: May 15 18:21:09 2023 GMT
Not After : May 16 18:21:09 2025 GMT
Subject: CN=fae2ed66e9700045285793ea4907be2a1b8a2d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:88:9b:0b:08:60:6b:71:02:9c:c0:4b:04:a4:
e2:b2:1e:40:5b:5f:58:f1:a7:c1:6d:e0:62:6a:13:
9e:ee:83:11:6f:00:59:4e:3c:2d:06:e0:0d:cb:a4:
42:55:72:c2:2c:c2:12:ed:66:38:55:9a:ed:91:63:
c6:e6:7b:c8:e6:b9:5c:2c:ae:1d:a4:7d:8a:16:13:
52:3d:ce:35:90:8b:8d:78:ef:22:b3:d7:40:42:76:
9f:12:20:fb:8d:5c:54:c5:78:26:5e:f5:0f:08:71:
cb:0b:2e:c0:b5:90:c0:42:e4:f7:14:68:d1:11:7b:
f0:6a:de:cc:44:de:23:3c:75:fa:88:1e:42:a9:bf:
30:13:69:7e:bb:66:9f:08:c7:4a:47:32:7a:22:e3:
57:3d:3d:91:a3:5e:73:00:66:ea:fb:c3:89:53:3f:
b1:68:72:ef:22:94:99:38:e7:b0:05:5a:d6:de:b3:
e0:13:e2:48:0b:6d:f8:af:c6:0c:52:29:e4:4f:e3:
af:3b:55:a9:9d:96:0e:c9:7e:9b:dd:c4:6b:ee:cb:
1a:0f:8e:8a:88:88:38:d9:18:46:c4:4f:86:40:a1:
55:14:45:cc:1b:15:b3:99:bd:3e:17:93:16:01:a7:
23:e3:29:5b:5b:3c:c8:63:61:6f:99:c9:91:ba:9d:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:77:66:00:7C:1E:34:74:02:B3:0E:FA:03:A5:1C:3D:1F:DE:E5:1F
X509v3 Authority Key Identifier:
keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/fae2ed66e9700045285793ea4907be2a1b8a2d42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.17.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:27:32:d9:53:44:b6:1c:28:c4:38:60:5c:5e:02:46:93:b3:
67:6d:d0:1b:67:78:7b:04:4f:a3:60:dd:2d:e9:09:b8:7a:ec:
bf:59:53:4a:f0:fd:72:7a:91:bd:af:91:5d:f8:9c:a6:d1:d7:
cf:64:c7:d1:76:63:76:70:92:8e:84:82:ef:f9:4a:99:4a:35:
c2:e4:e4:25:93:5c:60:d1:6c:6f:2f:b4:6e:af:23:8d:d8:aa:
1a:51:31:90:78:1c:a6:da:de:66:6c:2e:af:3f:b2:38:66:85:
e7:1f:40:54:46:b5:83:3f:95:e9:e5:4b:0a:b7:d3:82:4d:18:
06:0c:9c:d2:bd:25:3b:d9:e6:d0:8c:cc:a5:21:43:9f:79:1b:
f4:26:59:84:de:ee:39:db:c3:35:66:f3:07:f4:e0:01:c5:90:
e4:5f:a1:e7:fd:b3:a2:de:71:1d:fa:39:87:e9:ac:37:42:cc:
b1:01:4f:a5:49:35:2d:97:2d:bb:16:ee:95:b5:fc:c5:cb:b9:
0c:e0:f8:e2:91:f7:f1:00:6c:19:43:a8:9d:8b:1a:b2:8b:a9:
b1:a4:a5:1e:9c:b9:6b:ab:50:4d:e6:10:8d:f6:58:b5:4f:83:
3f:e7:2b:a4:36:00:f6:af:51:bb:6e:60:4e:81:a3:4c:3d:0d:
ec:dd:e5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org