Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/0eaea8cc318d41be1f974e0977d90eeac74ff57e.roa
File: 0eaea8cc318d41be1f974e0977d90eeac74ff57e.roa (raw, json)
Hash identifier: kPUcsm2t3mVLMuKa0lgjhuNtcabqxduEKDMjh2e79Vs=
Subject key identifier: 51:DC:1B:BB:61:9E:D2:C9:2B:DC:59:08:FB:C8:54:6C:0E:87:66:51
Certificate issuer: /CN=8afdf29f9cf235b0bd49725c1d8db340c546c41d
Certificate serial: 77E9
Authority key identifier: A3:70:E8:DB:0D:4C:1C:F2:AA:EC:C7:C2:46:35:47:AA:7C:EF:CB:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8afdf29f9cf235b0bd49725c1d8db340c546c41d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/0eaea8cc318d41be1f974e0977d90eeac74ff57e.roa
Signing time: Mon 11 Sep 2023 15:35:30 +0000
ROA not before: Sun 10 Sep 2023 15:35:29 +0000
ROA not after: Thu 11 Sep 2025 15:35:29 +0000
asID: 28002
IP address blocks: 2801:165::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30697 (0x77e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8afdf29f9cf235b0bd49725c1d8db340c546c41d
Validity
Not Before: Sep 10 15:35:29 2023 GMT
Not After : Sep 11 15:35:29 2025 GMT
Subject: CN=0eaea8cc318d41be1f974e0977d90eeac74ff57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9f:db:9a:9a:65:41:d4:ea:c6:62:d0:f6:10:
93:22:d5:8f:3f:06:c7:57:14:2f:18:57:52:d4:41:
7e:b0:7e:4a:18:48:54:d1:4e:9e:35:45:b4:3b:8e:
7c:b9:55:0b:94:f1:c8:71:0b:93:5d:e3:38:32:bc:
36:17:34:f0:20:48:28:9b:2b:c4:b1:f7:a3:fc:23:
54:ec:4b:93:94:69:6a:29:62:35:68:f7:f8:35:8a:
f4:96:e7:8f:cc:28:4e:b7:d5:91:2c:e1:f5:96:9c:
af:96:0c:72:1c:44:88:1a:e9:de:fc:7f:02:16:2c:
04:bd:61:fb:c9:7a:80:e1:e9:06:dd:e6:dc:47:cc:
98:da:36:f1:4a:d4:8f:e9:03:f2:d1:f4:76:07:49:
00:62:95:39:ec:e7:9c:bf:d3:98:72:e3:c5:8e:bf:
17:7d:81:83:43:9c:e9:8f:da:ba:26:a4:f3:76:52:
44:b1:ac:26:1f:9b:fd:f3:78:3d:53:e0:db:cd:35:
1d:bd:4f:36:b7:19:bb:8d:7d:7f:16:3b:b4:8b:92:
5c:b6:0e:10:d8:ce:39:68:ed:8c:e9:82:cd:d3:23:
6d:e6:00:9b:ad:13:26:76:fa:4a:b9:33:5f:7f:f6:
06:4b:37:1f:e6:be:cc:14:b0:a3:6b:a1:81:dc:35:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DC:1B:BB:61:9E:D2:C9:2B:DC:59:08:FB:C8:54:6C:0E:87:66:51
X509v3 Authority Key Identifier:
keyid:A3:70:E8:DB:0D:4C:1C:F2:AA:EC:C7:C2:46:35:47:AA:7C:EF:CB:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8afdf29f9cf235b0bd49725c1d8db340c546c41d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/0eaea8cc318d41be1f974e0977d90eeac74ff57e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/8afdf29f9cf235b0bd49725c1d8db340c546c41d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:165::/44
Signature Algorithm: sha256WithRSAEncryption
8c:52:5e:c7:23:60:5a:0c:2d:d1:ce:3b:18:ff:9e:15:08:cc:
87:ae:df:92:b5:0c:8b:5c:e3:20:68:93:f9:df:92:9d:7d:c2:
91:e3:b4:76:7d:32:71:b0:81:bc:2e:e7:4f:f8:8c:6d:ed:a5:
c8:95:a7:60:24:10:db:82:d3:10:af:07:05:63:49:37:47:33:
d6:1c:21:f1:74:bb:4a:33:19:75:18:ee:d9:f9:96:0f:ef:0b:
fb:8c:cf:9a:19:05:87:7f:73:ce:d0:bc:19:cf:55:f7:15:8d:
94:bc:46:5c:d3:7a:3d:99:2f:61:79:80:fe:12:8a:59:1e:f3:
05:e1:c1:60:d8:e5:b0:65:9c:be:cd:17:51:9e:3f:18:aa:26:
2e:a0:22:02:ef:d8:81:e6:c3:43:54:cb:89:97:ee:0e:bb:fe:
72:04:3c:d0:ca:48:da:a7:91:7e:34:cd:85:c7:b4:3d:b6:2a:
ab:75:ec:39:d4:63:51:8c:fb:a2:84:5c:2f:f4:9a:7d:4d:f6:
9f:2f:98:8c:17:17:5d:55:f7:4b:65:49:aa:74:4d:a8:35:b9:
c3:09:13:16:66:5f:9f:c8:da:c8:2d:2c:55:63:9f:05:1a:ca:
62:74:33:70:87:c9:45:cd:a3:27:99:2a:97:c9:9b:94:4e:91:
cb:41:30:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:18 2024 by rpki-client on console-fra.rpki-client.org