Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/20ac6eacf4a7c151e9e52f38f210fcfcdf49ec39.roa
File: 20ac6eacf4a7c151e9e52f38f210fcfcdf49ec39.roa (raw, json)
Hash identifier: gUfmGL4ULtYWKHEsKjA80Ta1CHBhURHD70hlLSUHc+E=
Subject key identifier: AA:11:AF:6D:BF:BF:51:2E:75:33:B0:0C:75:9E:4E:85:5A:47:86:2D
Certificate issuer: /CN=d4919a8b2dab56309b76746e8d395e1b61b10da9
Certificate serial: 0D854D
Authority key identifier: BE:90:0F:2E:16:D1:40:7A:00:29:14:03:25:97:A9:CD:10:30:2A:FE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4919a8b2dab56309b76746e8d395e1b61b10da9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/20ac6eacf4a7c151e9e52f38f210fcfcdf49ec39.roa
Signing time: Wed 24 Mar 2021 14:30:01 +0000
ROA not before: Wed 24 Mar 2021 14:30:00 +0000
ROA not after: Tue 24 Mar 2026 14:30:00 +0000
asID: 265774
IP address blocks: 164.163.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886093 (0xd854d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4919a8b2dab56309b76746e8d395e1b61b10da9
Validity
Not Before: Mar 24 14:30:00 2021 GMT
Not After : Mar 24 14:30:00 2026 GMT
Subject: CN=20ac6eacf4a7c151e9e52f38f210fcfcdf49ec39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c0:f8:10:f9:ba:20:2f:8f:21:d9:62:c6:ae:
b0:b8:0b:47:d4:87:71:d0:68:1c:3a:f4:69:09:1a:
bc:bc:d1:1a:f9:8f:50:1d:39:57:e1:e5:3c:3a:a7:
17:51:e3:9b:c8:0e:c2:95:86:89:5e:a1:c8:4d:63:
64:91:3c:0a:65:1b:e7:e4:a6:52:19:5f:dc:3a:d6:
84:3f:47:6d:c2:5c:f4:43:7f:6e:c5:ac:4f:09:41:
0d:f4:a3:78:0b:bf:23:1d:7c:05:4e:30:da:91:e1:
15:d7:10:64:d6:d3:5f:9f:7a:ae:71:ab:b3:88:0c:
f6:e9:73:1d:8a:4d:de:9d:67:3a:c7:0f:1c:f4:de:
14:1b:25:cc:5c:27:95:fc:53:5b:2d:3a:32:32:56:
2b:b4:fe:ec:a9:37:34:85:b0:7a:5e:1b:51:03:3e:
de:cc:19:1c:05:5f:90:8a:df:bd:b8:ae:7e:48:fe:
27:93:b7:ec:9e:4d:09:84:14:8c:4b:51:4a:16:87:
4a:3e:31:e5:af:79:08:06:71:a1:5f:98:d5:5c:22:
be:86:2a:41:69:97:02:a8:8e:04:96:3b:ef:a5:94:
91:5a:bd:11:7d:bd:dc:2d:a3:2c:0e:2d:9a:f2:7b:
67:3f:41:4a:42:eb:1d:91:05:6a:8f:2b:51:f1:27:
66:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:11:AF:6D:BF:BF:51:2E:75:33:B0:0C:75:9E:4E:85:5A:47:86:2D
X509v3 Authority Key Identifier:
keyid:BE:90:0F:2E:16:D1:40:7A:00:29:14:03:25:97:A9:CD:10:30:2A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4919a8b2dab56309b76746e8d395e1b61b10da9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/20ac6eacf4a7c151e9e52f38f210fcfcdf49ec39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/d4919a8b2dab56309b76746e8d395e1b61b10da9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.216.0/22
Signature Algorithm: sha256WithRSAEncryption
28:cd:f0:94:73:c6:44:3b:b6:68:28:68:60:c3:ea:fe:1a:1f:
0d:06:13:7b:b8:97:a3:16:1f:14:e7:f8:68:50:33:87:ad:0d:
4d:df:c8:a0:f4:ee:53:9c:f2:d3:23:cf:ae:a0:a6:d4:a5:ee:
5f:49:87:55:2d:c9:f7:94:16:97:d8:f4:e0:8b:99:64:aa:1a:
2a:12:21:a0:f0:78:71:3f:1c:6f:9c:7d:b9:b0:14:e9:ba:c6:
0e:5d:57:8f:4a:60:0d:31:d8:a3:e6:72:46:fa:ba:5b:59:04:
ed:72:c7:c5:0b:ec:bd:8a:d0:88:1d:60:ab:2d:0f:a7:fb:e8:
e4:94:f3:f7:6c:88:00:f9:55:2f:f9:e0:a9:29:a6:88:e1:19:
50:de:95:1f:32:23:78:1f:dd:c1:66:44:d6:a0:99:06:c4:e2:
1f:23:05:9b:eb:40:fc:49:6f:1a:54:90:ee:17:6e:0a:e2:01:
77:94:f5:4b:1e:23:87:f8:22:26:b8:ba:37:6a:1e:26:41:19:
51:64:8f:fb:f6:9a:4f:30:09:06:db:c9:4c:63:70:c8:91:6f:
8e:ee:56:ac:c9:01:8e:ff:7b:40:cd:98:29:a8:17:e6:2c:63:
66:3a:d1:c6:32:c6:d7:c3:08:89:28:d5:8b:2c:da:81:37:60:
ed:48:a2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org