Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/d7d443639ee1a25060c447c87c3a0b6ff291a15d.roa
File: d7d443639ee1a25060c447c87c3a0b6ff291a15d.roa (raw, json)
Hash identifier: KfhrX4Lr/teZaM9adrMbwmkq1F8uN9UTwnRnCiPpUTI=
Subject key identifier: 53:D8:E1:2A:41:FE:81:50:09:CD:68:87:4E:2B:35:D4:7C:57:7B:87
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 2503B0
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/d7d443639ee1a25060c447c87c3a0b6ff291a15d.roa
Signing time: Thu 21 Dec 2023 02:56:11 +0000
ROA not before: Thu 21 Dec 2023 02:56:11 +0000
ROA not after: Sun 21 Dec 2025 02:56:11 +0000
asID: 61476
IP address blocks: 170.210.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2425776 (0x2503b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Dec 21 02:56:11 2023 GMT
Not After : Dec 21 02:56:11 2025 GMT
Subject: CN=d7d443639ee1a25060c447c87c3a0b6ff291a15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:55:25:b8:47:dc:9f:c8:01:bd:d7:1d:ad:5f:
25:95:32:2a:db:ac:65:9d:8f:40:82:ff:67:fc:ac:
38:d2:5c:2a:83:20:fd:af:96:75:da:eb:67:09:48:
01:1b:e7:21:b6:ec:21:97:76:6b:17:4c:ea:74:0d:
c9:2a:1a:23:40:ec:40:f3:09:af:41:09:c2:b6:e6:
66:a5:64:13:9e:77:54:a2:37:f9:72:dc:c8:28:e8:
b0:91:09:6a:0d:f5:86:7a:0c:40:7a:ae:63:7a:08:
df:85:03:4f:80:73:75:0b:d0:4c:0e:eb:37:73:fc:
67:36:88:2d:08:64:1e:cd:5d:df:8f:e7:1a:f7:4d:
30:34:1e:26:b0:f7:59:80:70:78:98:86:20:3e:35:
20:0a:1e:77:90:a0:54:25:89:cf:f8:5d:bf:df:62:
69:82:01:71:c8:c3:bb:7d:b7:88:b5:1e:5c:df:89:
cb:11:a8:b8:85:e1:42:20:67:05:b2:8e:bf:aa:bc:
7d:ac:c3:e1:84:dc:f4:43:8e:1c:a8:f9:86:28:63:
81:ac:d9:8d:8f:26:6e:ce:a6:44:df:a0:13:2a:cc:
ec:a5:85:82:94:79:0f:17:2e:0d:c7:6f:be:96:b3:
99:c8:6f:d2:cb:18:4a:f7:4b:6e:8b:39:58:9e:35:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D8:E1:2A:41:FE:81:50:09:CD:68:87:4E:2B:35:D4:7C:57:7B:87
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/d7d443639ee1a25060c447c87c3a0b6ff291a15d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.120.0/21
Signature Algorithm: sha256WithRSAEncryption
71:9b:61:c3:dc:bf:08:8b:a0:01:89:9f:e2:3b:e5:b0:ee:ff:
d9:bf:b0:bf:3b:f6:f9:b4:ff:38:20:40:8a:db:08:5a:19:63:
18:ba:37:4c:c6:29:f7:1e:61:36:56:e8:97:e8:9c:1c:e7:63:
ff:7a:66:df:12:c8:dc:80:0f:92:c1:5f:42:16:f9:01:65:3c:
85:ab:5b:54:b6:eb:42:bd:4c:c6:49:04:f4:40:d1:9c:a5:cd:
17:ef:d8:22:ff:8e:c3:7d:62:0f:65:cc:5a:30:69:0d:d7:b5:
dd:65:f9:4e:7f:76:94:25:9c:78:6a:c7:09:0b:e2:bd:dc:84:
36:89:a9:7b:a1:64:c6:97:fa:04:63:58:74:f1:f9:7c:1b:18:
22:26:6c:9d:1f:52:84:48:85:c6:67:7d:bf:8b:43:09:57:0e:
6b:3d:5f:2e:de:cb:a1:db:a0:57:92:bd:75:52:26:be:f1:2f:
1a:5d:13:83:22:29:5f:92:ec:f9:ad:91:45:ab:31:06:7c:1a:
dc:6d:4d:1c:e8:46:99:97:0e:af:21:2f:7b:ef:e9:ae:a7:07:
f9:b7:c2:b9:fb:82:07:24:78:de:93:a9:10:af:9e:5b:ce:b6:
bd:81:99:bd:f6:32:0e:63:42:48:35:1e:e1:09:ed:59:3b:1c:
fa:59:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org