Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/efe1470f6763c1cab101bd6103221d5526b72013.roa
File: efe1470f6763c1cab101bd6103221d5526b72013.roa (raw, json)
Hash identifier: gYIFIiSdPezAoG9yCrt1TdROvN1O0sfMbHUgfOvd7Oc=
Subject key identifier: C3:E1:A6:57:D9:0A:CC:92:E0:58:0F:8F:FF:C4:46:E1:45:CC:AB:3B
Certificate issuer: /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial: 1A07D4
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/efe1470f6763c1cab101bd6103221d5526b72013.roa
Signing time: Tue 08 Nov 2022 20:20:35 +0000
ROA not before: Tue 23 Mar 2021 14:31:57 +0000
ROA not after: Tue 24 Mar 2026 14:31:57 +0000
asID: 28068
IP address blocks: 170.210.168.0/21 maxlen: 24
2800:110:3400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1705940 (0x1a07d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Validity
Not Before: Mar 23 14:31:57 2021 GMT
Not After : Mar 24 14:31:57 2026 GMT
Subject: CN=efe1470f6763c1cab101bd6103221d5526b72013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:91:a7:67:8c:a9:95:cc:50:00:26:09:8b:
31:f4:2e:82:dd:9a:a7:2d:57:1d:27:59:ce:40:1f:
82:20:5a:06:53:f2:08:68:0a:95:ef:ee:16:46:8b:
91:7e:61:fd:11:f3:01:d8:1e:3a:55:54:6a:94:35:
36:ba:50:42:85:dd:b4:02:56:fa:51:6f:89:56:6e:
fe:de:65:d9:a3:f4:e9:ac:3f:a5:21:c8:09:96:2b:
37:a1:af:27:60:ad:ec:70:2e:be:36:8c:f4:fd:ee:
6f:10:9e:f4:56:b0:7e:59:bd:f4:75:2a:75:b5:66:
df:af:6d:f7:3b:30:03:8d:57:0f:61:3c:a7:a3:8c:
96:1f:47:18:c0:b3:67:3b:7c:e2:5b:eb:b7:77:98:
b8:14:91:57:f4:dd:e6:d7:2f:ba:9f:67:9b:27:67:
50:46:72:b3:9f:2d:ec:cf:3d:96:a3:7d:0c:02:6f:
0a:0a:11:d1:ce:c5:32:de:17:05:6b:f0:36:e8:9d:
01:82:7a:8f:98:60:a0:cf:83:69:30:cc:d0:55:ac:
59:34:da:78:da:7c:79:04:0f:47:2c:0b:a2:7b:51:
02:ca:0b:3b:2e:94:56:4d:ac:49:c6:d4:4d:fc:4a:
27:e5:be:66:2f:04:40:e5:84:3b:e6:85:33:bc:7e:
18:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E1:A6:57:D9:0A:CC:92:E0:58:0F:8F:FF:C4:46:E1:45:CC:AB:3B
X509v3 Authority Key Identifier:
keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/efe1470f6763c1cab101bd6103221d5526b72013.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.210.168.0/21
IPv6:
2800:110:3400::/48
Signature Algorithm: sha256WithRSAEncryption
5c:86:8a:1c:5f:b4:72:82:2c:80:ff:49:99:a8:6a:04:7e:ec:
10:07:f1:1a:ad:63:e2:aa:e0:48:ad:23:43:8d:f1:4b:15:ee:
4b:6c:16:b4:6c:0b:cd:3a:3a:e3:b4:96:1a:60:dc:48:e7:70:
b2:f3:2b:a4:a3:a3:3d:8c:cb:30:17:7c:6d:bb:ab:2a:2e:03:
bf:fd:7f:70:83:d4:9e:3f:28:08:3a:16:8c:0a:38:d1:cc:d8:
65:36:5f:25:68:e1:b4:6a:5e:a2:19:e7:80:20:f7:e6:24:ab:
af:bd:4e:b2:ad:2b:db:dc:95:a1:d0:a0:71:b9:ff:e5:9e:ed:
ab:1d:76:a5:45:c0:9f:f3:6b:21:7c:f7:76:b7:4a:ea:92:26:
8f:02:cd:23:cf:b2:e5:f8:10:12:ef:ca:d3:2e:85:d8:a4:ae:
08:8d:e9:a2:47:24:09:c7:be:56:f0:ba:b6:4c:40:5d:26:7d:
e6:b2:6d:2b:eb:e5:f9:34:bc:1e:42:ce:0d:88:2e:a9:f9:dc:
52:f9:af:f2:c7:87:62:35:9b:00:fc:5c:40:16:06:be:db:0a:
04:27:ff:e7:a7:06:c9:d7:4c:a1:62:be:c8:bd:cf:26:32:30:
7a:88:86:98:d4:66:74:4a:2f:fe:6f:ce:f6:b5:65:df:f2:96:
92:78:ee:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org