Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/9ef199793b1ea529c2467962c213c6bd92ba8edd.roa
File: 9ef199793b1ea529c2467962c213c6bd92ba8edd.roa (raw, json)
Hash identifier: yNetEHzq1Img5MWUDkHxQQ6ox/Q3eKBEQV0MtasVW3U=
Subject key identifier: 2C:2B:EF:8D:B0:7E:2A:A6:4B:97:B2:94:D7:E7:FE:3B:8A:E1:77:BF
Certificate issuer: /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial: 03839D
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/9ef199793b1ea529c2467962c213c6bd92ba8edd.roa
Signing time: Tue 27 Feb 2024 12:58:40 +0000
ROA not before: Thu 01 Feb 2024 02:00:00 +0000
ROA not after: Sun 01 Feb 2026 02:00:00 +0000
asID: 28003
IP address blocks: 2801:165::/44 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 230301 (0x3839d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
Validity
Not Before: Feb 1 02:00:00 2024 GMT
Not After : Feb 1 02:00:00 2026 GMT
Subject: CN=9ef199793b1ea529c2467962c213c6bd92ba8edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:83:41:4e:b9:e0:eb:1e:1f:e2:0f:ce:c3:b5:
37:b9:04:3b:bf:3b:e8:c8:e6:c9:06:e5:9b:a6:de:
b0:3c:b1:0c:4b:3d:ed:11:89:ee:ef:2b:bd:e6:a6:
c8:af:00:10:83:b4:49:fb:04:92:f4:60:fd:48:37:
d0:ab:b7:5b:b4:e3:4c:f8:47:87:17:2d:aa:f3:bf:
3c:0e:27:a1:ec:b4:5d:4c:69:32:d6:0c:9e:05:1f:
1b:2d:18:32:1a:56:a3:41:e0:39:cb:fb:ea:67:75:
1e:f7:a7:6e:58:a2:b9:e7:db:ea:dc:14:f9:b5:f2:
86:c7:8d:06:dd:df:11:c6:30:71:ab:b7:ff:11:3a:
91:4a:a1:de:c2:c5:4a:e4:94:61:78:f0:0c:99:73:
a4:e3:2d:1f:d3:8f:8a:d5:6d:5d:fd:c7:b7:8c:8c:
db:6e:3c:2d:7a:3a:e4:4c:d4:2c:12:89:77:dc:b6:
76:00:12:9d:55:93:cd:6a:75:bd:20:a2:03:7d:a2:
c8:7a:5d:f1:a7:73:39:04:00:d7:27:b3:97:4f:9d:
aa:4e:84:12:aa:38:bb:5a:0a:1c:56:b3:f2:69:d4:
6d:49:a6:cc:8e:53:97:7d:26:3a:d5:32:84:19:c1:
47:0f:84:e8:3e:db:f1:11:b3:4c:ed:9e:78:9a:8e:
1a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2B:EF:8D:B0:7E:2A:A6:4B:97:B2:94:D7:E7:FE:3B:8A:E1:77:BF
X509v3 Authority Key Identifier:
keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/9ef199793b1ea529c2467962c213c6bd92ba8edd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:165::/44
Signature Algorithm: sha256WithRSAEncryption
32:e9:28:d1:d1:33:b0:1c:86:3a:d3:8d:48:f3:df:80:d2:12:
c5:9a:10:69:a6:bd:58:e3:09:0e:f3:34:88:ab:bd:11:f1:35:
ac:80:e5:10:74:f2:ad:19:14:94:c3:39:06:1c:8f:3f:8e:da:
1a:78:b4:6d:75:6e:c0:c8:51:96:e8:e7:a2:d3:61:83:26:a8:
a1:46:d0:b2:96:68:d7:4b:49:e5:60:f1:14:ec:06:06:cf:c5:
49:4b:30:cc:11:28:74:9c:12:31:08:a1:a0:36:ef:c9:77:8f:
b9:86:07:49:91:3f:50:ca:c8:e7:32:2b:a1:3c:3a:fd:00:b4:
06:30:56:d2:47:31:9f:8e:56:5e:a0:4c:0f:60:74:a0:46:55:
24:48:f2:2d:b4:b0:70:90:56:30:73:6c:1c:e0:f0:12:78:e7:
8a:fd:ce:ce:03:ea:af:7f:b0:5a:48:d3:7e:2f:62:4a:c8:37:
43:36:dd:bc:fe:b0:cb:36:32:49:9e:5f:81:2b:02:b3:a7:ab:
c8:f4:4f:ef:17:3f:ab:c5:82:63:9e:99:a4:7d:e8:e2:aa:38:
23:d8:76:51:f8:90:28:49:5e:55:fe:04:f0:19:f7:f3:cf:a8:
35:bb:2d:76:e8:3d:8b:58:ae:30:01:67:c7:cc:41:66:a3:2c:
ed:08:59:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org