Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/acc709412ed067162079fbce68d90bdaa5a2d4ca.roa
File: acc709412ed067162079fbce68d90bdaa5a2d4ca.roa (raw, json)
Hash identifier: ZcHpjgWFfOF7lV5M5jFsHkIAHTyq7mBYHNPx3epsdP0=
Subject key identifier: 6A:53:93:F0:B6:6F:80:F6:EA:85:14:F3:3D:2E:E0:08:16:9F:98:F6
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 1F4F61
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/acc709412ed067162079fbce68d90bdaa5a2d4ca.roa
Signing time: Wed 26 Apr 2023 17:25:00 +0000
ROA not before: Tue 25 Apr 2023 17:24:40 +0000
ROA not after: Sat 26 Apr 2025 17:24:40 +0000
asID: 27993
IP address blocks: 170.210.8.0/21 maxlen: 24
170.210.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2051937 (0x1f4f61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Apr 25 17:24:40 2023 GMT
Not After : Apr 26 17:24:40 2025 GMT
Subject: CN=acc709412ed067162079fbce68d90bdaa5a2d4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6e:05:50:63:33:44:c9:36:90:c1:56:9b:39:
f9:dd:45:00:52:66:7e:13:fe:8b:3a:f0:6b:35:f0:
b7:ea:91:40:1a:87:5f:d2:3c:04:2b:ec:1d:8b:ca:
de:3c:17:81:c5:ec:a3:2d:bc:09:f4:e7:b0:98:3c:
c4:40:47:23:fa:60:b7:de:b1:99:53:d9:68:64:1c:
37:7e:84:a6:76:df:ae:89:a2:de:d0:00:95:3b:58:
08:39:4e:ac:81:e4:5e:dd:f7:c0:c0:f6:78:5e:0f:
83:2a:77:57:35:a2:eb:00:d8:86:66:c7:6b:1d:34:
46:26:5c:35:f3:15:f6:57:46:7d:f3:f0:2f:06:d7:
77:fa:65:53:05:5e:c4:2b:5a:62:e0:7f:fa:36:ca:
f2:41:d1:b9:3d:e7:ff:be:e2:ba:b9:c0:b4:7c:e9:
ba:e4:a7:fc:1f:f8:29:55:57:85:bc:f5:24:1e:ca:
c9:97:97:fa:97:51:b0:23:32:98:d8:eb:f1:3e:4a:
09:fd:1a:fe:10:be:84:12:20:88:76:a3:e5:03:2c:
35:6f:e3:fe:9a:99:cd:e0:61:3e:34:04:04:20:18:
d7:54:0e:0b:22:e3:92:2e:f9:de:9a:70:e9:69:4c:
64:0c:03:36:55:af:e4:b7:fb:6a:1d:9c:3d:ad:7e:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:53:93:F0:B6:6F:80:F6:EA:85:14:F3:3D:2E:E0:08:16:9F:98:F6
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/acc709412ed067162079fbce68d90bdaa5a2d4ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.8.0/21
170.210.36.0/22
Signature Algorithm: sha256WithRSAEncryption
21:6c:03:08:48:11:eb:b8:0d:3b:bb:c8:48:a1:43:65:2c:9b:
3a:22:b8:d8:69:97:21:27:04:b9:d2:5e:b6:7c:0e:d4:30:89:
d3:59:ad:cf:b6:74:da:45:e5:7b:70:f9:9b:6c:48:ca:bf:56:
42:26:fd:e7:63:82:56:f5:9e:94:1f:5f:7d:cd:8f:68:f6:da:
68:c1:14:08:64:09:69:54:32:21:52:ad:3c:d9:3d:4e:d1:83:
d6:5a:e8:fd:5b:9e:3f:e8:ad:7b:13:da:6b:7a:2f:52:ac:dd:
b4:af:0a:73:eb:ef:b4:86:6a:f6:4c:51:48:1b:30:61:90:02:
bf:fe:b9:b3:d4:34:2b:77:a4:5d:db:a1:da:22:3a:2e:d5:44:
83:5c:14:35:f1:39:3b:c3:d1:60:16:ff:fe:05:f8:d8:b4:3b:
d0:ec:54:35:11:0b:8c:fe:36:ae:53:77:46:42:44:74:af:6a:
4a:01:f8:07:b3:9b:d9:4c:09:ca:5f:df:d2:98:82:28:82:16:
91:a6:7a:cd:85:10:ab:7c:1d:bf:14:ae:7e:b7:db:95:db:6c:
15:b5:81:de:32:6f:fb:33:b4:2c:2e:96:bf:d6:08:c5:87:a1:
3b:a7:c4:52:ea:74:48:fc:4d:38:b9:7d:8d:3f:90:1c:5b:49:
98:e1:db:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org