Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/9edd1a3ce0943ec9ef76685cdb4d3884e7350635.roa
File: 9edd1a3ce0943ec9ef76685cdb4d3884e7350635.roa (raw, json)
Hash identifier: odPCTwLpnLzOF1kFC5frydMFNFhIti+cB6f0dyaN/DE=
Subject key identifier: 8C:7D:74:53:8B:D7:68:F2:DA:05:CB:5C:47:8B:F8:7B:DA:2B:73:C0
Certificate issuer: /CN=89b05c9212d6b33b390c81f3fc8958af7050b896
Certificate serial: 230997
Authority key identifier: C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/9edd1a3ce0943ec9ef76685cdb4d3884e7350635.roa
Signing time: Wed 02 Aug 2023 19:36:27 +0000
ROA not before: Tue 01 Aug 2023 19:36:27 +0000
ROA not after: Sat 02 Aug 2025 19:36:27 +0000
asID: 52423
IP address blocks: 160.223.203.0/24 maxlen: 24
199.60.215.0/24 maxlen: 24
168.197.96.0/24 maxlen: 24
168.197.98.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296215 (0x230997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b05c9212d6b33b390c81f3fc8958af7050b896
Validity
Not Before: Aug 1 19:36:27 2023 GMT
Not After : Aug 2 19:36:27 2025 GMT
Subject: CN=9edd1a3ce0943ec9ef76685cdb4d3884e7350635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:fb:1d:69:35:dd:69:a8:c3:d5:71:c2:e4:
e8:fa:fd:fb:8c:8d:a8:a2:01:09:bd:b4:c3:01:2b:
08:0f:38:a8:c9:0d:b6:e3:9e:29:16:27:88:f4:6e:
e9:57:da:d7:dc:3a:19:9e:30:fd:0d:c5:e5:82:e1:
e0:1c:ea:45:8d:85:2c:68:68:3b:cc:55:a1:ab:2c:
d7:b6:b6:2e:92:5f:ae:ef:b3:a7:cd:7c:be:2e:0c:
f6:2a:3d:9c:76:ce:df:c8:bb:95:97:4a:b0:28:86:
b3:1c:b0:e5:4e:88:e7:0a:6d:10:b1:31:0f:9b:77:
d6:64:61:09:7c:d4:17:53:d0:c0:8a:d5:56:f9:a8:
5a:05:3e:96:52:1c:84:5a:6e:47:ec:13:77:f9:ce:
c1:d8:1e:c5:33:89:bf:57:f0:68:7f:2d:ca:3b:36:
ba:89:eb:ca:47:13:3d:82:d7:5f:a8:6d:cd:e2:a1:
02:d3:96:d3:f6:08:6d:b0:09:ea:48:d7:fb:fb:7b:
0c:ce:da:6f:b4:f4:05:07:03:52:d5:15:7a:9a:66:
45:bf:a1:69:68:06:fe:a5:a6:b0:16:81:98:f4:01:
64:34:38:f7:0a:a7:b2:e0:7a:00:cc:38:53:ca:fe:
68:97:1b:d2:97:9a:9c:08:97:f8:dc:38:17:21:47:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7D:74:53:8B:D7:68:F2:DA:05:CB:5C:47:8B:F8:7B:DA:2B:73:C0
X509v3 Authority Key Identifier:
keyid:C5:61:39:2E:B1:6D:D9:6D:FB:14:BF:C3:26:82:38:A8:E9:81:83:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b05c9212d6b33b390c81f3fc8958af7050b896.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/9edd1a3ce0943ec9ef76685cdb4d3884e7350635.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7dd2c100-dc30-40ac-85d2-5182570ac2be/89b05c9212d6b33b390c81f3fc8958af7050b896.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.223.203.0/24
168.197.96.0/24
168.197.98.0/23
199.60.215.0/24
Signature Algorithm: sha256WithRSAEncryption
19:75:48:33:15:ae:eb:2c:8a:38:b6:96:d3:5d:ac:3d:e2:96:
37:0f:ca:5b:3b:18:3b:fe:db:0b:a8:0c:c6:b4:64:50:2b:89:
93:27:05:50:41:05:78:c1:6c:26:36:b2:f5:ae:48:22:44:d1:
3f:86:3a:97:ee:b9:f7:f0:de:8d:39:ad:a8:08:b8:77:8a:41:
f3:30:8e:b6:62:be:b9:12:56:a5:3b:6c:db:86:cc:2f:2e:6e:
26:95:7c:7a:9d:b3:1a:84:2c:20:7b:52:3d:1f:7e:7c:72:7e:
46:69:a2:76:60:0b:fb:bd:a7:38:fb:ee:d3:bd:42:05:79:c5:
68:ad:eb:16:66:9b:fb:4b:bc:38:d5:1c:39:59:3f:87:48:49:
26:c8:6f:77:24:34:be:9d:2f:68:0d:61:ac:e2:fa:d6:fe:df:
3c:ba:6f:b0:b5:27:5f:a4:b9:b1:13:81:1d:0a:7c:24:6f:21:
da:ae:4f:8a:d4:50:48:16:85:92:94:f9:be:71:8c:53:b9:de:
b7:ef:2d:98:3c:80:03:b5:46:88:85:d6:8b:88:ce:48:cd:60:
51:b7:84:dc:dd:ae:e4:8d:bf:63:13:f4:69:90:8e:df:f7:bc:
a9:65:df:76:77:2a:ef:0c:1b:10:35:0c:3a:37:8b:aa:99:58:
41:26:af:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 02:24:55 2025 by rpki-client