Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/5b6143466a392604d13279a90dc27b2f69dc9254.roa
File: 5b6143466a392604d13279a90dc27b2f69dc9254.roa (raw, json)
Hash identifier: KV7FcjoH0ouioCxkH7Hh6x2kZWC89iLaNIalqjXn4Po=
Subject key identifier: 22:A7:34:93:62:71:7F:07:13:B4:1C:C9:61:EF:BF:BC:A0:75:2F:50
Certificate issuer: /CN=d4919a8b2dab56309b76746e8d395e1b61b10da9
Certificate serial: 1FB9BD
Authority key identifier: BE:90:0F:2E:16:D1:40:7A:00:29:14:03:25:97:A9:CD:10:30:2A:FE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4919a8b2dab56309b76746e8d395e1b61b10da9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/5b6143466a392604d13279a90dc27b2f69dc9254.roa
Signing time: Fri 24 Mar 2023 08:31:38 +0000
ROA not before: Thu 23 Mar 2023 08:31:38 +0000
ROA not after: Sat 22 Mar 2025 08:31:38 +0000
asID: 265774
IP address blocks: 164.163.216.0/24 maxlen: 24
164.163.217.0/24 maxlen: 24
164.163.218.0/24 maxlen: 24
164.163.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2079165 (0x1fb9bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4919a8b2dab56309b76746e8d395e1b61b10da9
Validity
Not Before: Mar 23 08:31:38 2023 GMT
Not After : Mar 22 08:31:38 2025 GMT
Subject: CN=5b6143466a392604d13279a90dc27b2f69dc9254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:d0:2f:1e:73:ca:2d:b3:a0:49:91:13:58:
3e:11:7a:2c:e6:2b:ad:13:61:50:f7:e3:c7:82:ce:
f3:9d:5b:2f:dc:0e:26:92:ec:61:79:f5:3f:02:5f:
4b:a8:45:38:c9:63:68:98:fd:6c:77:88:d8:6a:d7:
d6:d7:bc:a5:2f:70:d0:74:12:01:3b:9a:f0:1b:7d:
a0:b0:24:37:ea:82:b0:95:62:f3:f6:00:af:a3:e6:
3b:73:d2:f4:f8:eb:48:1b:94:fb:5b:6b:df:09:9f:
cf:82:e0:b1:c6:c3:56:d0:3a:3f:dc:c7:d7:53:a2:
cb:20:ae:f7:1f:4f:75:83:8f:65:a8:1c:e3:24:99:
ad:2a:e7:ab:89:f0:5b:39:dc:89:28:18:f5:c9:f8:
ad:63:dd:87:f6:b4:28:bf:b2:bd:23:56:ed:09:43:
0b:8e:e2:f3:15:53:a4:be:88:cc:fc:3b:a7:67:8d:
b0:a0:d9:c9:57:ef:05:b6:88:b6:c7:6e:e2:3f:91:
71:0f:eb:7f:29:6c:12:56:d3:00:fc:97:ac:49:0a:
b1:3b:82:bb:e7:a6:c5:98:f0:e3:50:68:23:09:09:
a9:a7:bf:e5:5f:0d:b1:f6:a7:0d:bb:c2:24:cc:a0:
a4:9d:fa:a6:96:61:46:79:31:46:61:8d:fc:a6:a8:
93:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A7:34:93:62:71:7F:07:13:B4:1C:C9:61:EF:BF:BC:A0:75:2F:50
X509v3 Authority Key Identifier:
keyid:BE:90:0F:2E:16:D1:40:7A:00:29:14:03:25:97:A9:CD:10:30:2A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4919a8b2dab56309b76746e8d395e1b61b10da9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/5b6143466a392604d13279a90dc27b2f69dc9254.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f8eea971-5113-4c7c-9e24-f3ae8aa33ec8/d4919a8b2dab56309b76746e8d395e1b61b10da9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.163.216.0/22
Signature Algorithm: sha256WithRSAEncryption
37:70:ad:22:92:79:40:2a:ec:dc:46:8e:07:b7:28:f7:c2:92:
41:ac:0a:a3:9d:bd:e6:8d:f6:9f:3c:21:0d:18:d7:b2:17:cc:
06:78:43:de:73:01:f8:88:59:82:28:e0:9e:c5:6d:2f:db:85:
e5:c4:85:6c:02:72:f0:81:a3:5a:8e:e5:1d:bc:fd:7f:45:23:
7d:d7:5f:68:16:57:93:f7:63:47:fe:24:ed:fe:58:4a:02:7e:
75:78:24:f9:49:85:0e:87:ea:b3:2b:b7:95:e3:0b:9a:0b:07:
46:83:ef:bb:bb:15:9d:92:d4:2c:8d:e9:b1:b3:3d:50:ca:37:
bc:f0:a6:bc:64:55:70:3f:78:7b:31:02:85:14:01:4d:4d:1f:
3e:67:81:1a:a9:52:7b:bf:15:89:5b:e4:66:3b:bd:35:25:74:
25:51:bb:6b:fe:85:a6:fb:5e:72:3a:5a:07:9a:d9:4c:46:13:
4c:f1:b0:5f:41:97:7d:ad:bb:bd:8f:d3:ad:11:2b:da:fb:1d:
13:9c:c0:5d:6d:34:68:ba:db:1d:d9:89:17:0b:d7:fa:38:7b:
d8:b7:08:85:fc:4f:b7:09:55:13:6f:ad:3e:4f:e0:b7:7a:1d:
48:eb:99:d7:b3:53:3d:e9:0d:f3:b8:f1:2a:41:9b:84:d1:8a:
d2:3c:14:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org