Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/378df0f4fb980de47e13e53bb3ae396fb9d4fe42.roa
File: 378df0f4fb980de47e13e53bb3ae396fb9d4fe42.roa (raw, json)
Hash identifier: S7wKdR8m+IxpM09WHl9std6sIjiujdoFfpPMt3SyQvk=
Subject key identifier: 1E:83:96:03:8C:DF:73:2E:24:14:3B:02:1A:19:E7:6E:FF:11:DF:37
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 1F3437
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/378df0f4fb980de47e13e53bb3ae396fb9d4fe42.roa
Signing time: Wed 26 Apr 2023 17:24:50 +0000
ROA not before: Tue 25 Apr 2023 17:24:40 +0000
ROA not after: Sat 26 Apr 2025 17:24:40 +0000
asID: 61486
IP address blocks: 170.210.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2044983 (0x1f3437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Apr 25 17:24:40 2023 GMT
Not After : Apr 26 17:24:40 2025 GMT
Subject: CN=378df0f4fb980de47e13e53bb3ae396fb9d4fe42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:9e:ac:10:21:97:38:0b:9e:62:8e:af:b7:
8d:55:70:56:0b:0c:49:fd:b5:09:1a:94:c7:84:6b:
15:12:2c:00:51:bf:c8:ae:c2:2a:91:78:93:78:e2:
5d:f1:36:5f:b5:8a:8a:8b:a6:ba:35:6e:71:ac:62:
1a:2a:db:1e:02:ee:64:c3:bd:1f:99:85:34:dd:c3:
af:66:6d:11:3c:33:59:13:76:a1:1c:9b:bb:e1:3b:
5a:1a:02:4e:f9:3c:51:4f:5e:db:06:09:0b:e8:d8:
35:94:62:64:f0:53:84:9f:6a:ea:26:10:ed:58:8c:
ab:4a:f5:5b:a7:b3:72:b9:fa:20:35:9d:55:d4:54:
b3:e6:10:cd:df:51:3d:e4:98:f5:a8:0a:6d:f4:1b:
f3:21:76:a8:f1:7e:25:e9:18:eb:ec:32:3c:1c:a2:
21:fc:bf:01:03:ba:9b:9b:67:bf:e2:5e:a7:ad:0e:
57:56:ac:d0:b1:78:74:77:9f:b2:98:4c:6d:77:c3:
9c:d7:19:4b:20:bb:f0:f2:86:04:04:3e:40:26:3f:
9e:12:47:66:0c:32:f7:e6:b0:54:90:ce:0c:91:7c:
b7:d8:aa:f0:ef:af:58:6d:b0:48:b7:fd:7a:cc:9f:
32:3b:3f:7a:1e:21:75:72:b1:7d:d9:83:5f:3f:3b:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:83:96:03:8C:DF:73:2E:24:14:3B:02:1A:19:E7:6E:FF:11:DF:37
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/378df0f4fb980de47e13e53bb3ae396fb9d4fe42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:fc:25:da:fa:0f:5c:5d:6f:82:0c:a6:66:d5:e6:e5:ef:f8:
cf:b3:7b:7b:03:89:9e:0f:3a:86:2d:13:d7:bf:10:95:92:e7:
95:b2:8e:69:8c:cc:d9:97:3f:ad:30:5e:48:71:ff:fc:ab:5c:
0c:fd:17:37:28:1a:f7:30:8c:48:28:10:58:45:7e:b5:a8:d1:
e8:2f:76:a6:cd:4a:bc:11:66:3a:88:1e:62:30:bd:a4:35:c9:
92:2a:c9:b6:8e:f6:fb:86:ab:71:fc:48:a2:d6:c4:a3:52:17:
34:c6:88:79:82:35:3f:bc:21:3a:ed:3b:41:6d:3c:dc:a0:9c:
eb:e5:4b:1f:ea:cf:54:03:52:78:3a:ca:c2:60:c2:b8:e6:d1:
e5:07:d6:9f:43:f2:11:63:c9:47:32:fa:f9:9b:29:c9:f0:23:
9f:2a:be:40:3a:2d:94:8e:42:2c:95:a1:09:02:83:1e:35:24:
76:3f:7a:8a:f1:3e:79:f7:9f:da:b6:fd:b6:15:90:d9:55:33:
e4:c2:90:23:d9:46:c2:65:78:6f:c1:f1:db:95:fc:4a:1c:ea:
79:9d:28:4c:88:a3:31:59:d1:a5:61:a2:5b:23:9b:e8:a2:63:
96:2b:54:6d:b2:46:1d:95:e3:ce:6e:8b:b8:56:8b:ec:b4:5d:
cb:de:d3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org