Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/df766e3c223eb9dd389230ccbaa1be8fdbd36ca3.roa
File: df766e3c223eb9dd389230ccbaa1be8fdbd36ca3.roa (raw, json)
Hash identifier: 8jh4alcqKnOfgRk9HDA/O/Wk72hDtPMQ3RvrWDNq3CI=
Subject key identifier: B7:6B:AE:DD:1D:6A:B7:89:83:D4:B9:F0:87:58:D2:FC:CB:9B:84:35
Certificate issuer: /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial: 0346C5
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/df766e3c223eb9dd389230ccbaa1be8fdbd36ca3.roa
Signing time: Tue 20 Feb 2024 02:15:29 +0000
ROA not before: Thu 01 Feb 2024 02:00:00 +0000
ROA not after: Sun 01 Feb 2026 02:00:00 +0000
asID: 28003
IP address blocks: 2801:165::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214725 (0x346c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
Validity
Not Before: Feb 1 02:00:00 2024 GMT
Not After : Feb 1 02:00:00 2026 GMT
Subject: CN=df766e3c223eb9dd389230ccbaa1be8fdbd36ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:16:cb:1a:37:56:17:4b:8f:4f:4c:7e:d0:33:
d0:a6:3f:30:cf:82:17:c3:29:a3:59:20:e6:46:48:
0f:44:51:fa:a3:90:7a:e8:37:58:37:a2:b0:89:25:
ea:14:ab:7e:94:9d:37:f8:7f:08:14:89:f3:ab:88:
2c:ac:31:83:53:f8:68:ee:8a:b2:0c:25:59:04:17:
f9:32:c0:6e:91:ba:27:04:f8:ec:57:e4:96:ad:71:
f7:bf:47:94:74:0f:26:17:38:a5:be:f2:16:85:f4:
9a:a7:67:de:5f:ed:11:d8:4c:40:97:9b:36:40:2f:
68:87:3f:6e:bf:01:45:47:aa:fd:b3:e9:79:57:6f:
bf:94:c2:d3:a6:20:fe:59:c0:9e:95:81:73:45:7c:
0f:53:99:de:d6:52:8b:92:35:16:7d:3b:b5:d1:95:
f7:ef:e0:3c:20:39:cb:c7:ca:78:e7:b7:d5:76:f8:
b2:f1:69:f3:f6:dc:51:29:79:03:81:e5:70:97:e5:
1e:20:76:0a:58:ac:ab:90:f3:58:4a:0c:a5:b0:ac:
59:f7:ce:28:88:22:6e:c4:b8:19:60:d9:f4:dd:62:
4f:11:8d:50:24:a8:6b:fd:e4:9a:b6:a0:6c:f3:6a:
2a:15:bf:58:2d:b8:b2:45:13:c2:42:13:72:2a:d9:
46:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6B:AE:DD:1D:6A:B7:89:83:D4:B9:F0:87:58:D2:FC:CB:9B:84:35
X509v3 Authority Key Identifier:
keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/df766e3c223eb9dd389230ccbaa1be8fdbd36ca3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:165::/44
Signature Algorithm: sha256WithRSAEncryption
ad:5e:8f:70:7d:98:a5:7d:fa:17:00:92:e6:1b:8c:65:18:dc:
0e:73:48:bb:20:32:4f:81:20:f0:c9:f8:a7:2c:50:3c:0d:2b:
eb:ba:10:e1:46:63:7d:16:3b:c0:7a:75:a3:05:9e:88:90:de:
b9:ed:c1:b1:89:59:d3:e0:7f:b7:dc:16:26:4a:22:b4:b4:8e:
24:1e:92:ef:ee:96:98:d7:1c:f7:e7:49:6c:a5:68:15:60:08:
50:22:e9:5a:22:53:db:f5:34:cb:cb:ff:ea:7d:a8:04:5a:87:
1e:40:78:c2:01:2e:70:2f:b2:09:cf:70:80:73:0a:0a:2c:11:
d6:00:17:df:31:7f:36:4c:be:f4:12:14:0d:45:99:85:3b:0a:
1a:7e:82:bd:f1:67:5a:7e:db:48:b5:c8:07:04:b2:ef:66:a0:
96:ac:ab:d6:19:2e:7c:2d:cc:91:ba:6d:6c:d5:77:3a:ad:cc:
20:46:be:9f:da:77:9e:78:5c:d5:32:1c:c9:d1:a3:12:27:ca:
99:96:53:89:db:a4:83:4f:e9:ee:3a:00:b6:3b:97:2c:7c:74:
ff:34:f1:fe:0f:39:0e:69:e8:2a:eb:e3:87:8a:aa:4c:df:57:
00:81:c8:54:0d:4a:87:0a:e9:0d:a5:2d:aa:82:50:96:87:d4:
bf:af:eb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-ams.rpki-client.org