Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dd5ff694bf01613820beccdd3b21e8c5a250146f.roa
File: dd5ff694bf01613820beccdd3b21e8c5a250146f.roa (raw, json)
Hash identifier: al3YNCcQQrFwOVznj0psLMPE7CKzU9if0WpDXX8M+6M=
Subject key identifier: 5B:AD:E8:B0:A5:A1:F1:9A:62:35:03:8C:E7:AB:2B:BF:FB:E1:A8:8B
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 05D4A8
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dd5ff694bf01613820beccdd3b21e8c5a250146f.roa
Signing time: Wed 06 Apr 2022 04:01:45 +0000
ROA not before: Wed 06 Apr 2022 03:00:00 +0000
ROA not after: Thu 06 Apr 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 382120 (0x5d4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Apr 6 03:00:00 2022 GMT
Not After : Apr 6 03:00:00 2023 GMT
Subject: CN=dd5ff694bf01613820beccdd3b21e8c5a250146f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9c:3c:a7:00:f7:67:08:d0:de:33:31:90:23:
0e:47:b6:12:6f:08:b4:78:c6:0c:6f:26:5a:8f:72:
9d:7b:f3:64:0c:2d:61:60:91:d1:9a:07:2a:f3:b7:
21:eb:1e:26:a3:f0:3c:00:f3:d6:51:58:49:7e:9e:
96:eb:15:9e:48:3f:03:9e:83:6a:d8:49:6b:da:c4:
1b:e6:bc:f3:e5:76:ec:9b:6e:6b:00:40:30:52:e9:
86:36:f7:e7:ec:d9:e9:26:12:23:fa:49:74:b0:43:
0a:ce:2d:c9:b4:68:cd:a3:bd:77:e0:a9:e5:c4:36:
a9:3e:e2:a7:38:a9:0f:76:37:fb:d4:14:20:17:f1:
07:eb:c1:a7:68:99:2b:87:50:e0:bc:c7:53:3b:79:
ea:3a:13:27:35:08:b7:2b:ad:72:cb:71:30:ad:db:
40:f7:01:02:6c:e2:07:2b:8d:01:b6:9f:a0:b8:47:
66:b9:02:09:e7:1a:c1:87:52:ba:c1:8c:b0:48:6c:
90:05:a4:61:ad:1a:37:5e:92:24:b9:d1:9f:b4:a2:
54:e9:9d:14:70:86:be:6a:61:bd:1e:6a:b0:49:85:
13:58:03:4c:3b:ad:0c:49:51:00:98:76:20:27:2c:
af:5b:a7:33:6d:f5:2e:23:ac:85:2b:ab:ba:ac:15:
10:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AD:E8:B0:A5:A1:F1:9A:62:35:03:8C:E7:AB:2B:BF:FB:E1:A8:8B
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dd5ff694bf01613820beccdd3b21e8c5a250146f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
83:92:d8:14:2d:35:3e:03:d8:5a:e3:09:89:fb:63:d4:bf:b7:
4e:c2:b6:cc:10:3f:f4:4b:8d:2d:9b:88:2a:2e:f9:1c:58:9b:
70:ef:1d:2d:a6:14:5c:7e:47:df:5c:b6:80:81:9e:f4:3e:d9:
57:5f:50:18:80:ac:be:c4:db:d8:ae:96:fe:c2:5e:36:6e:7f:
f4:27:de:c0:14:e2:d4:c5:3a:94:af:6f:4b:dd:6c:fb:58:e7:
a4:43:e8:27:23:ed:9e:0b:96:4c:44:2c:47:5d:4f:76:02:6f:
a1:df:bc:aa:5b:1b:c8:b9:3a:6d:d3:f8:5f:64:09:d0:dc:d9:
b9:ab:70:3a:6d:84:ba:7b:2c:89:e4:8d:ea:d0:ff:f5:48:e6:
c4:cf:d0:9c:c3:de:1a:54:86:11:e6:e6:d2:ef:4c:68:f4:c0:
3a:a2:5e:85:a4:5a:bf:29:1a:b3:6f:72:05:b3:de:7d:f9:47:
a4:cc:de:1d:46:f5:48:2b:78:8e:cf:5b:ae:82:63:e4:66:3b:
0f:e0:6c:52:03:9d:6b:7b:4e:37:32:e0:5d:cf:5d:7e:1f:4e:
82:60:39:c4:a2:07:f9:81:4b:24:b0:80:32:3a:90:b4:6f:d9:
e7:f0:4c:0d:15:66:0f:55:89:3d:f1:2b:d5:e2:3d:5a:af:80:
dc:8f:1d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org