Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/ff3106f0fc9d16bf568cdff39471f61c6056781a.roa
File: ff3106f0fc9d16bf568cdff39471f61c6056781a.roa (raw, json)
Hash identifier: uQysG9Ga6rsImyw87YWdPZAmZ+WukmoGWHI/3o5uX/Y=
Subject key identifier: 3D:4F:32:6A:1A:E6:86:1A:3C:D0:B6:BC:43:6D:C3:15:73:D1:94:40
Certificate issuer: /CN=9f4add842c04cc0e056fa508d773c646d1b9f40c
Certificate serial: 09B221
Authority key identifier: 64:09:9B:1E:EC:9F:C9:14:C9:1B:E1:02:28:4C:D9:C6:4A:CE:B3:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f4add842c04cc0e056fa508d773c646d1b9f40c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/ff3106f0fc9d16bf568cdff39471f61c6056781a.roa
Signing time: Wed 24 Mar 2021 14:34:46 +0000
ROA not before: Wed 24 Mar 2021 14:34:46 +0000
ROA not after: Tue 24 Mar 2026 14:34:46 +0000
asID: 19429
IP address blocks: 2801:10a:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 635425 (0x9b221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f4add842c04cc0e056fa508d773c646d1b9f40c
Validity
Not Before: Mar 24 14:34:46 2021 GMT
Not After : Mar 24 14:34:46 2026 GMT
Subject: CN=ff3106f0fc9d16bf568cdff39471f61c6056781a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:5e:04:3b:d9:42:8c:0c:8d:a6:26:6b:c9:
f0:56:25:97:92:88:92:4a:6e:c6:d4:95:3d:81:7b:
e1:e6:fd:d2:e1:d3:b6:8d:75:86:e6:ac:d4:f0:4f:
3a:1f:54:f6:4e:90:bd:59:9e:1c:af:67:8b:86:91:
ba:6b:58:27:13:6f:74:74:7d:d9:b3:45:9f:c3:1b:
83:1a:90:52:f5:f0:a4:d9:c9:29:e9:07:b2:f2:5f:
43:ec:4b:eb:b2:49:be:b8:f8:00:8c:aa:e0:fb:cb:
04:48:75:c1:98:6d:e4:16:bb:8b:1c:fa:95:0c:a8:
32:e9:73:13:90:20:5c:67:c1:93:17:77:f3:69:53:
4f:98:8d:cf:45:9e:0c:12:34:58:0d:e3:c9:fa:d9:
4b:dd:c8:ea:40:c6:8b:66:70:f9:73:36:fe:e1:d8:
b5:fa:f6:26:6f:d8:b8:32:9f:5b:15:14:51:8a:08:
b6:f0:30:ee:a6:b4:1e:28:41:73:a1:f0:f8:36:c7:
75:99:7b:1e:9b:f6:7b:9a:db:1f:56:eb:91:bb:81:
08:97:46:99:32:88:74:1f:c7:4f:1d:a7:82:14:70:
de:d5:3f:83:77:3a:c5:fb:55:68:10:17:62:67:c7:
04:d0:d0:6d:cf:88:02:a2:33:68:66:c0:56:46:07:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4F:32:6A:1A:E6:86:1A:3C:D0:B6:BC:43:6D:C3:15:73:D1:94:40
X509v3 Authority Key Identifier:
keyid:64:09:9B:1E:EC:9F:C9:14:C9:1B:E1:02:28:4C:D9:C6:4A:CE:B3:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f4add842c04cc0e056fa508d773c646d1b9f40c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/ff3106f0fc9d16bf568cdff39471f61c6056781a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/05e46e16-457a-49dd-9d43-b080f42555b4/9f4add842c04cc0e056fa508d773c646d1b9f40c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:10a:2::/48
Signature Algorithm: sha256WithRSAEncryption
47:20:eb:58:7e:06:db:fd:ee:6f:ad:fb:64:d5:f7:8a:5a:45:
40:39:4a:b4:9d:ba:ba:09:73:a8:a9:99:ca:4d:a0:c0:16:84:
0c:e7:08:9f:df:0c:46:cf:63:2a:21:e5:e8:c7:32:f4:6d:cd:
4b:66:ac:34:b8:d3:4f:28:c6:a9:2d:26:61:c7:d3:e9:16:c7:
3f:85:0e:fe:81:65:a1:fe:b2:a5:99:65:2d:66:95:47:4f:ff:
93:97:1c:64:9f:d3:bb:b6:6e:58:8b:a5:fe:89:01:76:8d:7e:
c3:4e:46:4b:49:3b:09:90:d9:32:97:55:fd:a7:ad:c5:e9:a2:
7f:50:0b:18:64:86:ed:96:90:e5:1f:11:d6:b1:13:a8:27:07:
a8:f9:0c:c4:fe:cf:ab:e7:a5:da:b6:48:b3:40:39:25:ec:bd:
d0:69:3d:80:d0:dc:f6:26:04:c6:21:4f:a5:9a:c1:b9:20:e4:
af:73:92:fe:1c:82:4e:9c:9a:d1:53:80:b4:8d:65:f0:02:5b:
c1:fb:26:dc:f6:c0:b6:6d:0c:4a:fe:5f:9c:55:59:8a:51:43:
4c:b8:eb:0c:fc:b4:d9:81:2b:99:81:cf:32:77:a8:26:8c:ed:
57:76:ec:14:b9:41:88:39:80:18:85:8a:26:11:03:e8:94:8d:
f0:a0:ce:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org