Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/7f4459549ddc6d59147212bb34f4e9974b44522a.roa
File: 7f4459549ddc6d59147212bb34f4e9974b44522a.roa (raw, json)
Hash identifier: BuKXlG9s3pkimrfZaqLbV/44j1yo8mi0KUQhDqB0V0w=
Subject key identifier: 18:C3:51:B3:97:AB:1A:E8:D1:EE:A9:1B:71:F9:D9:AE:A1:BB:86:D0
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 235131
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/7f4459549ddc6d59147212bb34f4e9974b44522a.roa
Signing time: Tue 10 Oct 2023 13:47:47 +0000
ROA not before: Mon 09 Oct 2023 13:47:47 +0000
ROA not after: Fri 10 Oct 2025 13:47:47 +0000
asID: 263204
IP address blocks: 170.210.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2314545 (0x235131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Oct 9 13:47:47 2023 GMT
Not After : Oct 10 13:47:47 2025 GMT
Subject: CN=7f4459549ddc6d59147212bb34f4e9974b44522a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ad:54:83:8d:1c:6a:72:74:ce:31:10:f3:f2:
26:4a:b1:d1:8e:c2:9f:7a:87:1d:fc:1d:a9:36:17:
12:f0:34:d5:62:11:4f:37:4b:d8:61:e6:2e:25:66:
fa:68:f2:63:b1:c8:02:e9:ca:a7:40:b5:c4:7c:d5:
c8:5e:b9:b5:6a:66:e7:e0:ab:03:2f:69:03:e6:f8:
95:13:ec:6c:9d:9c:c6:41:43:9f:60:34:02:f3:88:
f7:7d:5c:b0:b5:a4:f7:88:88:7c:49:60:dc:e9:be:
c8:b9:e9:d8:ba:20:84:9f:70:68:63:29:f6:a2:94:
34:80:e8:1f:9a:ad:7f:e1:8b:54:f8:35:45:91:38:
7f:b1:c3:30:8c:de:3d:4a:45:c7:c3:f5:dc:3a:c1:
7c:f9:ba:4d:26:9e:14:45:12:42:03:f7:ee:e5:74:
92:09:57:e2:c8:34:0e:96:03:7d:0e:da:c4:d0:c2:
aa:58:30:9a:2d:cb:21:3c:d7:5c:fe:17:f9:1a:de:
1b:db:34:8e:13:ab:37:6a:9e:cd:50:f5:39:5f:21:
0d:19:e6:47:92:76:a8:a8:a3:44:69:ac:74:a1:3a:
49:84:b6:a0:89:d2:8f:71:bc:ef:9c:8e:1f:1a:2d:
8f:dd:51:40:95:e8:e4:9f:39:c3:2d:fc:93:b7:3f:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C3:51:B3:97:AB:1A:E8:D1:EE:A9:1B:71:F9:D9:AE:A1:BB:86:D0
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/7f4459549ddc6d59147212bb34f4e9974b44522a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:89:47:4b:ea:81:48:c1:f4:e0:0d:44:7b:16:e1:52:62:50:
51:08:5d:0d:51:4e:52:c1:e7:5e:df:76:55:98:ab:26:4a:f0:
79:32:f8:97:ec:fe:91:b1:91:4a:07:ef:9c:57:95:19:a8:a6:
4e:6c:46:4a:eb:c2:be:86:c9:18:8d:d8:35:bd:79:1b:ca:4a:
ab:2f:1a:1c:0e:46:64:f8:a9:1e:14:f5:95:46:c8:82:62:8b:
93:50:c7:05:66:dd:61:3c:93:d1:88:88:e6:73:9b:3b:e5:c9:
85:df:47:cf:d4:c2:36:16:d6:c5:b2:1a:76:bc:1a:d5:6c:b8:
1a:38:d9:de:a4:f3:fe:87:9c:9a:5b:5a:e1:18:99:72:99:c5:
4a:d5:b0:d1:3a:74:75:10:8a:6c:40:6c:ba:bc:0e:6f:e8:75:
bc:8c:de:93:e7:43:1c:8b:c5:fd:31:57:11:82:c2:5e:d2:64:
41:e6:72:9f:46:f0:0f:98:dd:37:dd:e3:d2:6d:ea:50:18:b1:
66:f0:cc:44:54:a7:1e:3f:b0:7a:45:f7:b2:48:27:1b:c2:ed:
5d:76:ac:3a:37:12:37:25:3a:db:ac:0d:82:d5:95:33:43:d4:
18:21:a2:4f:67:09:a7:fb:27:c1:10:ea:70:14:64:da:6a:d5:
c5:81:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org