Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/589caae7ab8f3b65270e0821005d5e21b84232c0.roa
File: 589caae7ab8f3b65270e0821005d5e21b84232c0.roa (raw, json)
Hash identifier: i1Vi99Z+4TYFy8CArY1W2yvd5icWA5NXja44MullzHY=
Subject key identifier: 4C:9D:71:4E:63:E6:4F:A1:D8:7B:78:07:18:C3:37:E9:8D:24:4C:D1
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 1F528E
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/589caae7ab8f3b65270e0821005d5e21b84232c0.roa
Signing time: Wed 26 Apr 2023 17:25:21 +0000
ROA not before: Tue 25 Apr 2023 17:24:40 +0000
ROA not after: Sat 26 Apr 2025 17:24:40 +0000
asID: 27770
IP address blocks: 170.210.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2052750 (0x1f528e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Apr 25 17:24:40 2023 GMT
Not After : Apr 26 17:24:40 2025 GMT
Subject: CN=589caae7ab8f3b65270e0821005d5e21b84232c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:62:91:fc:1d:f3:bb:3b:71:e4:01:a3:b0:
5a:f5:12:00:9a:84:08:5d:30:d5:1f:c0:d6:63:bd:
45:03:1f:b2:c5:d5:e5:d5:c2:8a:83:c7:41:08:1b:
56:95:83:2a:ac:18:f1:04:4d:9a:62:5f:07:f2:d0:
02:72:c0:06:93:03:63:3d:e6:eb:c4:ba:fc:0a:e6:
3d:b8:d4:85:76:8b:d0:6a:c6:9c:06:06:5c:5c:2c:
a8:c9:e5:bd:20:15:f7:2e:00:9f:c1:f5:c8:4f:b7:
9c:58:83:87:ef:37:e3:86:b7:85:b6:a4:56:2a:95:
1e:df:39:e8:16:a3:f7:f9:a7:fc:89:ec:39:dd:3e:
e8:17:dc:0a:cc:ad:96:28:34:37:0c:7d:bf:71:a6:
29:d0:ca:cf:fc:2b:48:42:a0:c0:8d:58:24:4c:da:
c5:2b:69:54:1e:2b:a5:c7:0c:14:be:ce:fc:25:86:
93:2b:97:6c:3b:e0:af:e2:83:f6:4b:9f:a0:34:fb:
62:47:b4:eb:d0:fc:cb:4e:06:6b:9a:5a:4c:ca:3c:
44:6b:9b:87:66:47:67:d3:52:1d:22:a1:aa:3a:a5:
65:8e:ea:0b:63:cf:ac:77:df:7a:cf:10:85:32:f0:
56:5c:3c:8f:af:cc:5b:37:0b:91:e4:18:0d:0e:09:
7f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9D:71:4E:63:E6:4F:A1:D8:7B:78:07:18:C3:37:E9:8D:24:4C:D1
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/589caae7ab8f3b65270e0821005d5e21b84232c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.128.0/21
Signature Algorithm: sha256WithRSAEncryption
32:8c:5f:2f:55:1d:d9:46:45:09:10:87:08:73:39:84:9f:29:
65:b2:05:3c:b5:ff:cc:a5:cf:a9:ff:30:af:9b:4a:ef:a1:9a:
f2:d4:c8:52:40:36:b8:b2:72:13:66:53:ca:8f:ae:55:a3:98:
9a:22:95:5a:ff:dd:65:5d:ed:c5:f1:fb:45:d0:96:30:b8:e3:
9d:ac:19:a5:41:76:81:0d:ee:74:8a:ca:d8:d9:53:cb:7e:cd:
b6:7a:5a:3c:e6:76:0e:81:a7:a7:62:15:96:c6:f0:d7:8c:a9:
54:45:7e:9d:c2:e2:9d:96:6d:26:21:cf:44:5b:a7:4d:9a:66:
e8:58:0d:c7:32:71:88:21:43:5a:ff:e3:53:36:80:94:58:5d:
bb:db:ac:69:0b:9f:03:29:6d:97:4f:f6:f4:ee:ac:77:6f:be:
6f:76:74:54:a9:55:aa:21:0f:63:a3:a7:2b:5a:f1:0e:27:8c:
a1:ef:ea:09:a6:96:81:45:6a:f7:33:70:1f:43:58:6a:68:31:
48:fa:43:63:0a:e7:2a:ad:c3:42:03:b2:17:9d:ef:22:95:2a:
30:88:5c:df:75:11:3c:5f:c6:90:c2:5c:00:87:a5:f8:12:4c:
9f:80:d0:52:c0:fe:48:f0:2c:95:8e:75:f6:7a:f2:d5:a1:7a:
d1:00:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org