Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/940ff8cec642267d6c517e70a95344cb7b1d96cc.roa
File: 940ff8cec642267d6c517e70a95344cb7b1d96cc.roa (raw, json)
Hash identifier: wl+nzuGb5Z0Mnj1M+yjQj2jAZ5zP3ML50Lp5UY3VKs8=
Subject key identifier: 3A:39:15:19:64:16:A6:BE:90:57:22:CB:A0:29:2B:5F:AC:1C:43:87
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 0E36C8
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/940ff8cec642267d6c517e70a95344cb7b1d96cc.roa
Signing time: Wed 24 Mar 2021 14:30:55 +0000
ROA not before: Wed 24 Mar 2021 14:30:53 +0000
ROA not after: Tue 24 Mar 2026 14:30:53 +0000
asID: 27787
IP address blocks: 201.234.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931528 (0xe36c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Mar 24 14:30:53 2021 GMT
Not After : Mar 24 14:30:53 2026 GMT
Subject: CN=940ff8cec642267d6c517e70a95344cb7b1d96cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7c:95:72:92:ba:e0:9e:84:23:ae:1a:15:31:
41:0a:ed:bb:80:ca:40:74:76:66:c3:ce:ae:7d:6b:
92:1f:02:04:7d:95:85:4c:c1:1d:5f:f0:0b:3e:b7:
6b:e1:95:36:e2:8b:68:4a:af:40:16:db:2f:02:65:
86:f4:5f:4a:db:2b:9c:e5:58:af:10:05:2e:68:12:
5d:75:2f:e7:f9:39:0b:50:2b:72:88:27:72:ab:8a:
28:5e:cc:1f:3f:18:e4:da:e3:77:f7:bf:31:b2:e2:
80:82:d0:e0:e8:41:84:e2:bd:7d:31:b5:8d:7d:3c:
a5:46:39:b2:cd:5f:15:b8:fb:eb:e1:e0:58:ed:09:
58:b7:75:3f:f8:2e:e4:55:35:c5:0c:da:9e:9e:b2:
e7:56:5a:ea:11:6f:53:eb:93:92:a8:c1:b6:d6:be:
0f:26:02:db:ab:50:fa:eb:b6:cc:b6:99:b9:6c:18:
e7:88:c2:f3:77:58:a7:55:1b:69:02:b6:6f:3e:a1:
a6:bd:e8:e0:b1:0d:59:77:db:8f:55:81:58:71:d1:
c8:05:7e:bf:ad:b5:e3:41:72:12:ad:95:b7:d3:7d:
87:c2:eb:b0:50:79:d0:9a:e7:3d:26:4d:58:54:45:
26:74:01:17:8c:6b:77:92:2f:bb:ca:e3:4d:27:f2:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:39:15:19:64:16:A6:BE:90:57:22:CB:A0:29:2B:5F:AC:1C:43:87
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/940ff8cec642267d6c517e70a95344cb7b1d96cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.136.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:77:51:d2:55:2d:2d:30:e9:5f:e7:45:2c:9b:21:c4:3e:0a:
32:10:ca:01:69:71:42:c1:b8:a0:74:21:94:46:1b:02:a5:b6:
20:34:07:16:2a:84:4d:e4:22:bf:8c:f2:01:fd:ec:d2:1a:ef:
de:b9:11:b3:b9:4d:c3:9c:f5:1e:57:a6:92:5a:b6:6a:88:af:
ee:34:9b:d9:65:09:98:7f:34:be:f9:83:91:c3:09:d9:d1:2f:
93:4a:30:ad:6f:d8:02:43:11:23:e8:b0:66:b2:7b:b5:aa:e9:
1b:22:56:88:b9:d7:be:db:51:98:b6:55:5a:b4:fb:1d:09:b0:
3f:67:c4:fc:8a:21:ab:52:05:fa:f6:64:a7:0c:2d:2d:84:46:
de:05:fe:2a:fe:06:cc:0e:2e:ef:63:e2:9b:0c:50:47:c1:a7:
ff:8a:d7:ef:fa:19:e7:a1:29:12:dd:c5:fe:89:bd:1d:7d:10:
b4:2d:16:98:60:e2:28:c0:c3:ab:13:72:7c:b9:a4:88:02:ff:
98:e3:a5:18:cf:7f:ea:48:61:47:a4:ea:25:c9:35:a7:1e:95:
3e:dd:e9:f2:68:a0:cc:de:c8:e0:86:e7:ac:c4:24:95:a0:2a:
a1:2b:6e:7b:54:26:45:e4:97:12:7e:49:26:bb:7e:4a:c9:20:
27:38:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org