Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/213a0f507079f5ffb801a3f646b5545e30a10717.roa
File: 213a0f507079f5ffb801a3f646b5545e30a10717.roa (raw, json)
Hash identifier: OnN21pBciBoq2tC0/vHKV6l84K0Zux/crvwU3Gm0+n8=
Subject key identifier: 92:A6:4E:9E:36:1D:FF:31:F2:CB:39:CF:74:B5:CF:02:5B:00:5B:61
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 24DEDD
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/213a0f507079f5ffb801a3f646b5545e30a10717.roa
Signing time: Fri 21 Jul 2023 20:56:25 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 27953
IP address blocks: 201.234.249.0/24 maxlen: 24
201.234.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2416349 (0x24dedd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=213a0f507079f5ffb801a3f646b5545e30a10717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:87:c6:0e:19:b0:12:76:2c:c1:a0:33:a1:
ef:c7:c8:f2:4f:2a:61:0d:ea:70:4b:7b:a8:69:bd:
f3:59:af:29:6d:50:4d:0e:7a:ed:6e:ab:4c:42:82:
a5:ed:17:c0:ca:74:b5:7d:2d:28:81:8b:42:79:b5:
ee:51:6a:ca:bb:7e:90:20:9b:7a:e0:b5:86:41:ce:
25:b1:3b:6c:73:e8:99:b8:ad:69:6f:a0:72:ac:cf:
36:cb:b7:5f:40:37:1b:7c:09:68:f7:0b:cb:47:0b:
9e:05:39:9c:b3:50:9b:ea:35:aa:43:b2:ab:b8:79:
e8:b2:d4:33:aa:d0:bd:0b:bd:15:37:5f:82:61:58:
75:20:a0:b3:97:92:94:4e:31:47:ec:6c:51:f7:2b:
09:f3:0f:da:41:44:a2:1c:1a:bb:02:0f:07:c1:60:
0e:96:7b:23:21:d9:07:13:bb:bb:72:33:c9:88:b4:
50:7b:36:dc:30:c5:65:2c:91:f4:5b:ca:d6:f9:53:
1f:e0:30:da:07:19:bb:d7:f4:ae:77:42:84:f7:08:
d9:9d:72:fc:85:0f:d1:dc:12:ab:0f:d5:43:6d:26:
c5:b6:b4:4b:3b:50:f8:ab:0e:7e:84:f1:67:88:35:
f2:7c:c0:aa:3e:fa:80:a7:a9:cb:9e:21:c2:91:5e:
9a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A6:4E:9E:36:1D:FF:31:F2:CB:39:CF:74:B5:CF:02:5B:00:5B:61
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/213a0f507079f5ffb801a3f646b5545e30a10717.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.249.0/24
201.234.251.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7b:8f:bc:23:f4:74:f3:84:c5:5c:2b:86:0c:ff:68:f2:62:
30:89:ff:08:66:80:e5:b1:27:10:ce:41:25:fe:d3:ac:69:91:
e6:8b:ad:94:ab:3c:52:2a:75:36:03:28:d8:43:7d:09:c3:f3:
5c:c0:b8:62:1a:59:43:9a:c7:65:7d:fc:9f:0d:e3:b3:2b:b7:
b7:2f:e1:ba:f8:2c:db:43:f6:1a:f8:20:66:59:c7:97:85:37:
c6:16:23:98:d5:2a:a5:9d:23:1e:68:f9:a3:e3:a6:bf:35:4b:
de:d9:7f:1e:cb:f5:d7:e5:15:7e:39:7d:39:9e:3e:cc:61:da:
f7:94:19:a7:ba:79:ff:9a:ef:71:6f:0a:1d:58:98:55:22:57:
b1:a2:84:e9:c7:06:cc:1d:41:45:d1:ed:49:13:1b:19:57:04:
7d:dd:74:6b:3b:ad:b8:5f:97:e9:a1:5d:a9:bf:51:da:4d:0d:
2d:e2:c4:e3:b8:78:61:50:75:9d:ed:a7:72:0d:ce:de:51:59:
b7:62:72:e0:ba:45:c7:7a:d3:0a:17:35:8d:e4:75:61:be:8c:
bb:17:87:0c:fe:b5:d7:d0:37:74:c1:57:33:65:6c:f7:e3:7d:
bc:41:66:1a:17:b7:41:27:9f:95:09:7c:28:15:f8:00:56:6f:
07:23:92:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org