Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/a0f932603eccded3af42d2ddbc71eed8abf1d01d.roa
File: a0f932603eccded3af42d2ddbc71eed8abf1d01d.roa (raw, json)
Hash identifier: IMR1te29jsJa4TDPt1L9D6d01xSisj/CRI2labo9g8s=
Subject key identifier: 73:2C:B8:8D:7C:12:16:E1:6A:AD:2A:22:72:92:5D:4F:69:11:BC:91
Certificate issuer: /CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Certificate serial: 059ABE
Authority key identifier: 5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/a0f932603eccded3af42d2ddbc71eed8abf1d01d.roa
Signing time: Fri 23 Feb 2024 07:50:01 +0000
ROA not before: Fri 23 Feb 2024 07:50:00 +0000
ROA not after: Mon 23 Feb 2026 07:50:00 +0000
asID: 13999
IP address blocks: 201.159.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367294 (0x59abe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Validity
Not Before: Feb 23 07:50:00 2024 GMT
Not After : Feb 23 07:50:00 2026 GMT
Subject: CN=a0f932603eccded3af42d2ddbc71eed8abf1d01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b9:12:98:d2:39:62:31:93:65:d4:00:3d:f3:
24:c7:11:b9:e8:19:87:09:b7:55:02:26:6a:d1:3c:
61:57:2d:5a:a3:ee:8b:09:0d:d4:9b:9b:d3:1b:d0:
db:c6:65:9c:c2:d1:61:a7:8e:d2:a5:ac:e8:a8:98:
5c:85:42:a1:6b:fb:fc:27:7a:4b:8d:24:ca:ab:d8:
e2:1a:6a:df:28:dd:7d:3c:57:79:de:49:7b:a2:93:
0d:c8:03:b0:e5:ad:7c:1c:8d:77:0e:8a:16:e9:c6:
88:b8:6e:1d:ec:d4:02:f9:e9:fd:fb:ce:37:f1:df:
33:65:81:f9:c9:fb:15:2e:7b:84:1f:34:42:e9:25:
02:9a:47:9a:cd:04:50:c6:09:89:18:12:1a:7d:d5:
b4:a1:93:fc:44:43:f9:7c:90:2f:da:90:c7:73:83:
00:06:7f:bd:98:bb:9e:7b:71:b7:37:85:2d:e0:ad:
7f:54:e2:27:22:17:8f:e8:71:ee:20:49:79:09:61:
ae:2a:34:41:65:80:71:03:92:43:ae:4e:2a:f9:91:
1a:97:2e:2e:4d:90:1f:4a:bb:d8:c1:44:d0:37:d8:
33:27:a3:2e:37:6a:43:b9:ff:5a:f1:4f:3d:62:b2:
37:55:1a:06:71:f7:c2:74:93:35:40:df:c1:4c:57:
f4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2C:B8:8D:7C:12:16:E1:6A:AD:2A:22:72:92:5D:4F:69:11:BC:91
X509v3 Authority Key Identifier:
keyid:5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/a0f932603eccded3af42d2ddbc71eed8abf1d01d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.204.0/23
Signature Algorithm: sha256WithRSAEncryption
62:67:4c:b2:b6:fa:3f:ac:ff:12:a8:d3:5e:83:93:4e:5b:fa:
af:d2:42:48:86:bf:fb:c0:34:be:08:7a:45:75:04:91:6f:d8:
f3:dd:be:b5:f7:80:e3:d1:57:0c:37:6a:1b:03:83:33:df:13:
15:56:eb:65:11:a6:c7:39:45:86:ec:90:30:29:5b:41:dd:71:
c8:bf:f4:46:09:84:b8:e7:c6:9b:87:35:e6:60:89:ef:ab:92:
23:a3:c9:af:9d:94:59:ab:dc:f0:1d:5c:34:ba:fc:dc:b7:c8:
3c:18:2e:b5:28:42:3c:1c:bb:c7:a7:f3:3b:76:02:04:3d:94:
c6:0e:a1:db:69:d5:30:87:ba:cc:73:ca:36:b7:0a:aa:ee:3e:
8f:11:83:d5:93:fc:c5:7e:80:88:ff:d6:58:0b:e7:22:a7:e8:
33:36:20:77:87:4b:1b:11:fd:c5:10:46:25:81:78:af:db:53:
d5:fb:26:8c:62:b3:16:a2:c4:91:d3:b1:91:77:20:44:b7:60:
88:44:87:40:51:5b:54:d7:6d:b7:ae:0b:f0:66:8b:aa:9f:52:
28:ec:f4:fb:de:29:d2:fe:60:1d:21:ce:04:32:59:ea:ca:7c:
d2:69:4c:d3:d5:d6:05:a5:28:9c:62:59:3c:62:21:bb:38:c3:
19:86:79:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-ams.rpki-client.org