Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/cc6fc8ae05acaddb7c016e45a3410be7d0213d18.roa
File: cc6fc8ae05acaddb7c016e45a3410be7d0213d18.roa (raw, json)
Hash identifier: GZN7HlbbVwDsm1w/2Ix8eiXKqxiJwLgzBj8Nvy0q3Q4=
Subject key identifier: 53:C2:9A:F7:6D:57:32:E1:0B:77:1A:EA:43:2C:1B:7E:A1:75:F8:00
Certificate issuer: /CN=16b44d2a0bda515371a4ded869185f017218c9f2
Certificate serial: 213F65
Authority key identifier: 8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/cc6fc8ae05acaddb7c016e45a3410be7d0213d18.roa
Signing time: Sat 10 Jun 2023 18:41:12 +0000
ROA not before: Fri 09 Jun 2023 18:41:11 +0000
ROA not after: Tue 10 Jun 2025 18:41:11 +0000
asID: 271970
IP address blocks: 170.83.108.0/22 maxlen: 24
190.103.84.0/22 maxlen: 24
2800:d00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2178917 (0x213f65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16b44d2a0bda515371a4ded869185f017218c9f2
Validity
Not Before: Jun 9 18:41:11 2023 GMT
Not After : Jun 10 18:41:11 2025 GMT
Subject: CN=cc6fc8ae05acaddb7c016e45a3410be7d0213d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:8b:4e:87:05:17:a7:b6:4a:c8:81:1f:4d:
b2:c0:08:d2:e6:d5:05:7a:0f:d9:bd:7b:40:45:e0:
79:a1:1e:80:e5:36:60:e6:a8:b6:84:fd:9a:98:fb:
91:03:27:aa:a2:df:f4:68:9d:01:0e:57:1c:29:41:
7c:59:9b:f7:d5:b2:09:8a:18:aa:e4:74:58:ae:62:
96:1b:9a:10:d5:8d:1e:02:11:c7:7d:d4:96:f8:71:
ac:16:b2:ef:1e:14:f1:b1:eb:dd:9a:17:9e:3c:dd:
0c:5b:68:16:a2:12:14:d4:29:a1:92:3a:d5:66:e9:
ef:b6:38:e2:48:f0:00:c9:a2:ca:cb:1e:b6:bd:d5:
05:5b:b0:e7:71:9b:69:e1:48:35:c5:76:75:f0:d8:
7c:45:f6:52:0d:43:44:b4:55:d1:b9:3a:9a:0d:70:
26:a2:aa:ff:00:eb:3d:8f:67:67:84:2e:41:12:07:
7b:62:22:c0:d9:28:86:28:40:27:e1:2b:98:0d:77:
4d:fe:55:c3:6a:e6:43:1f:0d:d7:fe:af:1c:26:d1:
43:ce:4a:a0:ff:21:72:8c:b6:f8:bd:a4:47:f2:47:
fc:e8:2a:be:91:2d:41:07:5e:b5:b6:01:9d:fd:3d:
aa:cf:32:5d:bd:5b:49:d1:48:b1:d8:6e:cd:c3:29:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C2:9A:F7:6D:57:32:E1:0B:77:1A:EA:43:2C:1B:7E:A1:75:F8:00
X509v3 Authority Key Identifier:
keyid:8B:D4:A3:27:C7:20:6E:AB:E2:43:83:6B:43:71:C4:D1:F1:5F:A1:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16b44d2a0bda515371a4ded869185f017218c9f2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/cc6fc8ae05acaddb7c016e45a3410be7d0213d18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/faa8a51d-f9ec-4d10-af6a-934be4556e5e/16b44d2a0bda515371a4ded869185f017218c9f2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.83.108.0/22
190.103.84.0/22
IPv6:
2800:d00::/32
Signature Algorithm: sha256WithRSAEncryption
00:b3:63:fa:5c:45:39:8e:41:da:9d:bf:fd:92:f5:62:0f:90:
5e:37:cc:34:dd:07:01:6a:6c:61:f4:d6:73:68:84:79:7c:91:
c9:2a:df:35:d5:c3:62:26:64:8d:54:f8:e3:68:cc:06:a5:d3:
a7:36:49:19:fa:d4:8c:fb:ee:bf:ff:bd:be:fc:d3:87:93:16:
37:37:a6:52:44:2c:e8:43:1c:2e:c6:48:06:a8:0a:e4:b2:f7:
6d:a5:94:41:91:b8:03:60:06:5f:20:38:f1:53:15:6b:d8:44:
7b:5b:52:cc:dc:14:38:93:ac:08:68:a2:87:ed:57:40:b3:87:
eb:92:d5:ad:6f:35:aa:d2:ef:eb:16:c5:78:d3:73:7b:2d:82:
60:84:a0:85:20:5c:5a:ac:40:dd:25:ca:53:c0:84:d1:59:50:
23:ae:d7:87:2c:08:26:a3:ed:86:20:7e:fc:ee:dc:e1:f1:1f:
a6:ad:dd:4e:38:4e:09:e1:54:65:26:a3:3e:ed:b9:1f:0e:2e:
63:e9:4b:c3:cb:16:95:67:f0:84:09:af:38:d3:0f:1c:18:7f:
cd:83:de:9e:ad:c7:ea:b8:a9:f7:07:ed:2a:53:38:75:fb:60:
62:96:29:64:ed:ba:7a:92:1b:54:25:10:3e:95:f4:ab:c0:fd:
c1:6f:eb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org