Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/ad04cbf73b125a9c427bb1dcaa75c146531e409b.roa
File: ad04cbf73b125a9c427bb1dcaa75c146531e409b.roa (raw, json)
Hash identifier: G1o6pg3CWwYvv5Vdob2+hQaJD+M2HYpe348l9SIR0ow=
Subject key identifier: 4C:AB:10:EC:60:C1:F9:67:1E:1A:DE:7F:81:85:57:D7:00:CA:65:C3
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 1F3D81
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/ad04cbf73b125a9c427bb1dcaa75c146531e409b.roa
Signing time: Wed 26 Apr 2023 17:24:53 +0000
ROA not before: Tue 25 Apr 2023 17:24:40 +0000
ROA not after: Sat 26 Apr 2025 17:24:40 +0000
asID: 264785
IP address blocks: 170.210.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2047361 (0x1f3d81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Apr 25 17:24:40 2023 GMT
Not After : Apr 26 17:24:40 2025 GMT
Subject: CN=ad04cbf73b125a9c427bb1dcaa75c146531e409b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e3:c7:c7:0f:6c:e1:f0:d5:89:29:7e:c1:9b:
59:e8:23:a7:3f:ce:e8:99:ba:e7:69:88:fe:38:53:
21:f7:b5:b2:6a:a6:1d:d2:59:58:cc:ae:45:e6:0b:
72:d0:4e:aa:bc:3d:77:68:4b:45:1a:26:0d:f4:0e:
5b:5b:e0:63:02:5d:f0:1c:5b:28:b4:e8:6c:1c:c4:
91:09:fa:4e:a7:36:c0:4a:2c:4c:46:23:4c:7d:53:
78:32:9e:88:51:19:3a:92:26:5c:d4:bd:d6:0a:d8:
b5:62:3a:b5:ef:eb:ce:7e:3d:1e:7b:c6:46:ce:ef:
84:23:70:db:a8:76:ed:c8:2c:94:6d:17:d4:2b:b0:
97:31:d9:85:2b:99:f2:1a:61:c7:c8:47:dd:4c:46:
ec:33:82:27:88:e6:6c:36:15:a5:18:6a:37:8b:78:
62:72:9f:e7:30:af:a8:c1:c4:19:79:41:ba:88:63:
05:f8:9d:14:0b:29:fa:2f:a6:f9:03:85:22:06:4d:
39:92:ec:5c:a6:c1:73:ad:7f:bc:d0:79:86:28:c1:
76:fb:86:d1:8e:27:7a:60:43:ec:4b:60:f1:f7:59:
ea:9e:71:89:62:1e:51:47:c2:80:d9:f0:8f:23:de:
51:65:fd:cb:31:ca:17:a1:c4:8a:1c:a0:e4:32:50:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AB:10:EC:60:C1:F9:67:1E:1A:DE:7F:81:85:57:D7:00:CA:65:C3
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/ad04cbf73b125a9c427bb1dcaa75c146531e409b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.84.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:11:e5:57:68:39:5a:a6:c7:d0:75:c0:e2:ba:8a:ca:a4:4c:
12:a9:b4:ee:fb:96:9f:e2:f9:8e:5c:18:f5:7d:04:c1:06:16:
17:63:bf:3a:2e:72:46:6a:81:83:56:3e:db:15:6b:4d:4d:89:
28:09:01:09:95:3a:96:81:01:8f:e2:6d:3f:11:92:d4:ab:d0:
9e:b1:de:88:9b:20:a5:15:d7:e6:7d:ff:a5:95:95:40:5f:72:
0d:ef:8d:25:ff:46:fa:a0:6a:a9:e0:15:09:ea:24:37:5f:6f:
5c:1e:81:5b:b4:3d:36:cd:e3:e1:7d:00:69:1f:10:ea:ed:63:
21:89:af:d5:70:d0:70:3b:c2:1b:51:9a:f6:81:b7:20:b0:1f:
ba:4b:be:8f:b4:8c:c5:bd:19:e1:c5:63:a2:30:71:04:a6:5a:
04:89:8e:ec:79:cb:78:f6:a2:9b:1b:aa:30:37:80:9f:53:43:
f8:18:04:86:49:3e:a0:e8:34:ba:38:84:45:78:83:de:1c:3b:
d3:17:bd:e3:33:3a:87:4d:e8:bd:ca:64:79:21:ee:ab:cd:9f:
ea:cf:7c:42:c4:07:ab:2a:1f:c4:8d:b4:36:2a:2d:bc:62:89:
f6:3d:50:bd:26:4b:88:67:d3:d8:c4:a4:e5:63:38:fb:82:2b:
2f:e0:ee:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org