Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/79a9074cab6cb958dc173b3a792ccae316f65d6f.roa
File: 79a9074cab6cb958dc173b3a792ccae316f65d6f.roa (raw, json)
Hash identifier: RyleEcIwNJGcTIdQK5D/RbHfE1m4seF8Nl3N0iCixiA=
Subject key identifier: 78:01:0C:9B:B5:73:C5:DD:4A:E5:B5:95:22:A8:32:D9:24:E1:A3:B6
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 246C1A
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/79a9074cab6cb958dc173b3a792ccae316f65d6f.roa
Signing time: Fri 21 Jul 2023 20:55:24 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 27787
IP address blocks: 201.234.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2386970 (0x246c1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=79a9074cab6cb958dc173b3a792ccae316f65d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:bd:10:8c:ad:de:cc:18:7b:06:c3:48:2f:
ca:29:d6:85:21:b4:8d:be:d8:40:b7:c4:c0:f4:25:
76:1c:87:9c:f1:c1:ba:11:d9:a6:bd:25:67:e5:91:
ed:cb:62:8e:21:84:a7:23:44:b4:6a:ad:44:ba:48:
e7:09:a9:d9:cc:2f:7f:0a:be:84:0b:77:d8:89:d7:
bd:e2:1b:54:56:2b:c7:19:e8:4e:63:4d:aa:5c:2b:
5e:41:6f:33:b1:15:ac:86:0e:fc:89:82:a7:06:76:
ca:c5:9a:14:23:1a:45:74:fc:74:24:40:b6:a7:e6:
15:e8:5d:81:14:ea:43:ef:32:5c:31:74:ca:50:93:
85:bb:e7:52:68:6e:7d:d2:e3:6d:10:74:99:54:8a:
df:9d:37:97:37:6a:d9:90:38:d2:8f:57:46:24:22:
f5:38:48:93:be:db:b3:06:d8:27:03:f3:50:fb:3a:
e1:5a:4c:28:56:b1:87:57:02:e6:26:a6:93:6a:00:
74:54:dc:90:71:ee:38:c9:0b:d0:4c:9a:52:51:74:
5a:14:ce:22:b3:4b:f1:e7:20:52:53:2e:5d:ed:aa:
a6:76:38:40:b5:79:34:69:72:57:62:37:f6:f6:26:
23:09:2e:a2:fc:aa:7a:0e:c9:b8:7c:4c:2b:25:91:
eb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:0C:9B:B5:73:C5:DD:4A:E5:B5:95:22:A8:32:D9:24:E1:A3:B6
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/79a9074cab6cb958dc173b3a792ccae316f65d6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:0a:45:b2:85:6c:c1:94:3a:d5:96:a3:cd:cd:60:cf:50:91:
4d:2b:8f:e0:1a:7f:3e:99:00:89:c7:6e:e5:71:8e:80:11:0d:
28:e1:ec:b4:dd:02:b6:70:f8:a8:63:ae:eb:ad:6e:af:a2:dc:
27:cb:de:58:75:e2:df:01:d5:b0:44:78:2b:89:32:06:5f:fc:
4c:9a:45:59:c5:f7:f2:d8:b0:c1:6b:48:79:0f:60:60:94:e7:
40:08:5c:9c:fa:87:ce:2b:b6:97:e8:6e:06:52:13:f2:ab:40:
42:b0:f5:3e:62:71:d0:5a:0e:50:9d:1b:76:87:84:53:67:af:
25:73:f4:97:b5:ca:b1:40:23:52:88:b2:f4:31:d5:cf:a2:92:
cf:b4:24:b9:05:9b:2c:82:69:68:17:f2:85:fb:21:7a:66:de:
fd:b3:a0:9b:7d:2e:f0:64:5a:c2:9f:b3:ea:05:6a:dd:3e:33:
2b:c2:cf:b9:e2:47:c3:bb:68:ad:94:28:da:75:4c:90:ee:61:
e3:07:ca:72:78:36:37:3e:2c:28:1f:d5:20:a8:a5:fb:24:52:
64:93:4b:15:36:ae:a6:91:a1:53:0b:60:a9:dc:5a:10:f6:c1:
f2:a8:07:2a:99:bf:59:7f:38:10:1e:33:87:8a:45:c1:02:a8:
10:12:58:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org