Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/3224c469d1995467460852b8d5649be3bd25338b.roa
File: 3224c469d1995467460852b8d5649be3bd25338b.roa (raw, json)
Hash identifier: 3EgnODNgPS9nLLaUcPrSwy801S/fgIqGWXM3QQfa6OA=
Subject key identifier: A7:B9:BB:7D:5F:24:B8:6D:BC:49:AF:2E:9E:3D:26:81:A8:FA:77:63
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 24F532
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/3224c469d1995467460852b8d5649be3bd25338b.roa
Signing time: Fri 21 Jul 2023 20:56:34 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 22699
IP address blocks: 201.234.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2422066 (0x24f532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=3224c469d1995467460852b8d5649be3bd25338b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:42:7e:5b:1a:49:35:01:fa:a7:73:bc:ee:85:
4d:62:32:b0:02:c1:a7:2f:f9:3d:9a:62:b8:15:d1:
4f:01:ba:e0:ae:7d:64:76:47:de:53:1f:c0:ef:57:
17:51:0d:ae:10:32:48:35:9b:9b:b8:a9:b0:ab:0f:
28:dc:f5:42:21:ca:a6:d0:c0:24:8d:95:9b:e1:18:
a5:26:a9:4a:8b:7e:07:59:0e:27:06:a7:92:0f:1f:
48:26:93:59:01:1c:a4:34:12:33:ab:5c:7c:67:e8:
44:48:92:cb:0c:37:6f:68:2c:96:4d:74:97:74:d7:
0c:31:72:6b:4d:a3:3c:4d:b0:f3:c9:5c:f8:da:3e:
42:20:7c:8b:cb:eb:cd:d8:5d:8c:a2:04:f9:b2:ac:
b7:72:9b:80:c4:cd:94:e4:99:3e:09:ef:35:cd:9e:
d9:59:01:68:8f:7d:c6:3e:a2:5b:00:39:54:be:93:
f4:5c:da:12:fb:ca:42:ae:a8:5d:07:20:49:ce:e6:
86:4b:eb:07:d4:1f:ea:df:fd:19:36:fb:b7:9a:23:
6b:66:4e:cf:e1:6c:e8:7e:4a:ea:9b:6e:64:7a:ea:
20:7a:5a:74:f2:9e:bb:64:a6:2f:1d:50:0b:36:42:
04:f9:50:83:01:ed:04:d9:52:8a:1b:a6:b6:d2:90:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B9:BB:7D:5F:24:B8:6D:BC:49:AF:2E:9E:3D:26:81:A8:FA:77:63
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/3224c469d1995467460852b8d5649be3bd25338b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.251.0/24
Signature Algorithm: sha256WithRSAEncryption
95:0f:76:77:c2:51:8f:95:d6:f5:5e:29:14:29:84:af:5b:34:
1a:43:3f:cf:2a:15:12:66:4b:fd:d1:95:02:55:9f:95:8c:6a:
67:80:aa:45:a7:27:9b:a3:b7:d4:1c:a7:00:c1:91:cf:b7:50:
86:1f:30:fc:f2:c9:51:b3:d5:58:30:ed:b8:99:b8:5b:c6:16:
16:39:2e:d6:6a:8f:b4:00:49:d7:46:7c:4c:7f:71:bb:6a:4e:
34:2c:35:b3:15:4f:a2:0b:da:68:52:fa:1a:f3:57:08:16:ed:
41:3a:0a:a9:02:87:c4:ac:92:78:ab:d3:9b:f3:d4:d2:d2:6f:
ec:8d:9d:8e:db:d9:b0:65:fa:85:9b:e8:3e:bc:b5:62:f2:03:
8c:4a:10:64:94:d8:95:ba:28:e5:c1:34:83:c5:2e:46:d2:32:
bc:25:39:0e:9f:d4:be:67:c2:67:0d:8f:54:d8:7c:48:38:5c:
25:41:7d:19:27:ec:a0:8b:42:c0:91:dc:3c:9f:3f:52:6f:5b:
b9:c4:76:7d:dc:9e:6a:30:a3:29:45:21:5e:f7:a4:b9:6f:7c:
e8:ee:94:50:fd:e6:b8:89:c0:26:11:b8:3f:32:ab:57:1e:65:
11:77:81:83:36:c8:66:1f:1d:e9:ec:ab:ef:e2:42:55:7c:3c:
dd:e5:d5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org