Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e88ff82-cb4d-4f01-ade9-1d5f0a6965bd/e76cc6b4e6aca87341add612f40650a1885709de.roa
File: e76cc6b4e6aca87341add612f40650a1885709de.roa (raw, json)
Hash identifier: r564iFR2SiK+9c5HTZwBtqOsM1Gv2GpFkik7CaJ4jcU=
Subject key identifier: 8E:B5:AB:8F:4B:5B:28:AB:33:3C:67:95:63:D8:D2:F3:54:DE:73:2E
Certificate issuer: /CN=c97b9ab772c8af17300b7ec2506f748594cd8cef
Certificate serial: 010515
Authority key identifier: 3B:59:03:CF:51:C6:0F:45:AD:F8:AF:86:CB:0C:0B:59:B0:1F:46:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c97b9ab772c8af17300b7ec2506f748594cd8cef.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2e88ff82-cb4d-4f01-ade9-1d5f0a6965bd/e76cc6b4e6aca87341add612f40650a1885709de.roa
Signing time: Tue 02 Jan 2024 15:20:19 +0000
ROA not before: Tue 02 Jan 2024 15:20:18 +0000
ROA not after: Fri 02 Jan 2026 15:20:18 +0000
asID: 265800
IP address blocks: 201.182.108.0/22 maxlen: 24
2803:b020::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66837 (0x10515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c97b9ab772c8af17300b7ec2506f748594cd8cef
Validity
Not Before: Jan 2 15:20:18 2024 GMT
Not After : Jan 2 15:20:18 2026 GMT
Subject: CN=e76cc6b4e6aca87341add612f40650a1885709de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:24:1b:de:10:24:81:68:10:c2:a5:df:c7:
81:4f:b7:bd:14:24:32:7d:d0:a8:ee:7b:5a:9e:3b:
ce:79:14:eb:07:89:7f:95:af:d1:e9:de:61:cb:e2:
97:57:06:b8:cf:92:eb:fa:bb:5f:67:0c:a1:49:8d:
03:0e:12:c8:90:dc:9c:7b:e3:dc:bf:e3:b6:72:87:
76:b6:8c:18:56:30:69:e5:e7:a4:c8:6f:02:2f:3d:
29:f4:91:53:0d:40:f1:2d:03:d0:4f:71:0d:f2:20:
c3:a2:84:69:dc:3a:f9:0a:32:1e:a8:e2:74:66:3e:
4f:9c:7c:22:ca:6e:32:87:84:17:85:e3:10:2e:dd:
ff:c4:53:5d:97:ab:31:71:61:0a:a1:da:e8:8b:4b:
19:70:ab:d0:cc:cd:ac:6f:53:ef:8f:69:7e:95:82:
fe:6e:2a:67:29:9d:3d:a3:b4:84:1a:f8:a8:78:9a:
eb:dd:7a:9a:d0:48:52:41:6e:8f:93:20:a5:dc:2b:
19:a9:2e:27:16:41:40:7f:91:04:38:2c:22:a0:18:
f1:bb:cc:83:81:0c:c3:ca:cf:1f:09:75:f3:6d:dc:
e7:d8:a6:d5:1e:eb:43:20:3a:76:68:8d:b7:eb:50:
90:73:8d:d5:8a:b8:27:a0:79:c7:e2:68:9a:8b:f9:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B5:AB:8F:4B:5B:28:AB:33:3C:67:95:63:D8:D2:F3:54:DE:73:2E
X509v3 Authority Key Identifier:
keyid:3B:59:03:CF:51:C6:0F:45:AD:F8:AF:86:CB:0C:0B:59:B0:1F:46:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c97b9ab772c8af17300b7ec2506f748594cd8cef.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e88ff82-cb4d-4f01-ade9-1d5f0a6965bd/e76cc6b4e6aca87341add612f40650a1885709de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2e88ff82-cb4d-4f01-ade9-1d5f0a6965bd/c97b9ab772c8af17300b7ec2506f748594cd8cef.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.108.0/22
IPv6:
2803:b020::/32
Signature Algorithm: sha256WithRSAEncryption
6a:3c:76:ca:8f:ca:1f:7c:e4:70:0d:10:9b:a3:bb:df:33:47:
18:a8:52:b7:5e:9a:df:fe:c6:89:f6:60:51:89:e1:42:0b:d3:
86:ad:08:35:96:14:5d:9f:e7:c6:7e:1d:31:9b:d8:35:5d:5d:
0b:19:6a:05:e0:ec:79:80:57:b7:22:01:e8:be:eb:4c:0f:6f:
9a:bf:ec:5b:4d:67:e0:78:e3:5e:ea:2e:37:d3:78:ea:de:52:
a3:29:a5:76:4b:f9:a4:3d:27:3f:eb:e3:b5:9b:63:db:c0:77:
5d:db:58:59:00:13:ac:41:c1:e4:c1:0a:1b:94:e5:84:48:7b:
ad:1b:a8:28:73:05:03:7c:c6:b8:c2:94:37:93:b9:e5:09:fa:
3f:93:ff:d4:8c:62:b9:ca:9f:de:90:6f:5d:02:17:65:5b:1e:
4b:fc:93:6d:d1:f0:92:23:ab:75:b9:5d:8d:e0:1f:78:23:4a:
89:fe:dd:43:30:b9:19:23:ab:92:e3:63:ce:71:4e:9c:16:2d:
1b:19:96:ea:fd:20:15:ba:3e:21:89:23:56:db:43:cd:8e:89:
7b:f6:9d:19:31:3e:ca:d1:75:f6:91:33:3f:91:8e:07:5f:89:
68:96:94:c7:7c:6b:aa:03:cc:36:d2:d7:22:29:a0:e8:75:c7:
7f:6f:06:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org