Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a9b50d439f481319c2ed3a14c4c888224d4e07b8.roa
File: a9b50d439f481319c2ed3a14c4c888224d4e07b8.roa (raw, json)
Hash identifier: kyHBF+8RZ0Ajk2O3WfVM+li+wsBtmZvK7BREwhrZ0QY=
Subject key identifier: 87:75:DC:3D:3E:89:AB:C6:D8:92:30:FB:5C:3B:9E:B6:22:E1:D0:A3
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 243EB2
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a9b50d439f481319c2ed3a14c4c888224d4e07b8.roa
Signing time: Fri 21 Jul 2023 20:54:57 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 262208
IP address blocks: 201.234.3.0/24 maxlen: 24
201.234.6.0/24 maxlen: 24
201.234.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2375346 (0x243eb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=a9b50d439f481319c2ed3a14c4c888224d4e07b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:64:bd:5a:3c:26:f3:41:10:63:f9:6f:23:d1:
b9:51:7d:7a:f7:8c:55:d2:42:7d:b1:8a:57:13:80:
e8:85:40:c3:ab:8b:f7:9d:56:e1:80:da:f0:37:16:
ac:1a:e6:f4:95:38:d6:73:5a:07:da:a2:0b:e7:c3:
54:c1:73:05:34:14:13:0f:c1:70:09:87:7a:de:fb:
5d:19:6a:c1:f8:1b:80:78:c7:ca:43:56:7c:b0:6c:
11:4b:99:8d:1d:ca:e0:06:f6:a5:5c:3f:f6:0a:97:
98:33:f8:2f:ee:b5:71:e9:5b:fd:4b:7d:57:6d:2b:
f3:c6:25:4c:d7:22:ec:29:c4:71:68:11:c7:c9:de:
44:6e:59:f8:75:08:01:10:fc:2c:8b:40:de:1c:39:
bf:d9:9c:0c:74:f9:41:26:94:19:8a:6d:d4:f9:56:
26:40:41:3d:e6:55:8f:a8:db:9d:5f:65:23:9d:ba:
44:9b:c9:4e:2c:2c:31:63:3c:af:08:bf:44:07:5f:
c8:1b:14:f0:4a:6c:4d:14:c7:1b:4f:91:3e:da:b7:
56:c3:7a:80:a7:2a:76:65:29:63:16:dd:7c:50:be:
aa:fb:a2:ad:bd:fa:52:23:86:88:48:e9:6f:d3:3b:
43:6c:ec:c4:ba:96:d5:44:e9:be:fa:4a:93:b3:77:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:75:DC:3D:3E:89:AB:C6:D8:92:30:FB:5C:3B:9E:B6:22:E1:D0:A3
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/a9b50d439f481319c2ed3a14c4c888224d4e07b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.3.0/24
201.234.6.0/24
201.234.9.0/24
Signature Algorithm: sha256WithRSAEncryption
78:aa:25:bd:cb:cb:e5:68:8f:75:f8:73:89:fa:18:e5:08:74:
84:0c:38:e2:7f:84:97:f5:48:a6:04:de:69:3c:4c:be:9c:53:
ff:0c:cc:2c:98:cd:d6:31:96:d4:3f:47:79:38:c1:cd:69:34:
52:9e:09:c7:63:26:04:d8:00:b8:5b:6c:ab:9d:f3:f5:5c:5d:
5e:66:9c:e5:14:55:83:f3:f7:dc:54:ea:f1:4e:c6:94:3a:3e:
05:8a:b3:53:ca:14:4f:c2:a3:26:6d:01:88:b3:8a:fb:b0:0e:
ad:7b:27:04:82:6d:5b:52:a1:79:04:bb:b7:68:61:4e:95:d5:
25:c8:e4:de:68:d9:f8:d3:75:0d:e6:e3:0b:0e:13:16:7f:e1:
df:ce:6a:b7:38:62:d3:95:63:0b:b3:ea:bc:9e:90:27:08:76:
04:ca:71:f2:4a:72:1f:44:d2:4e:6c:f1:ba:e9:98:82:c6:b3:
06:9b:45:20:80:5a:1f:57:3e:35:7f:e8:1c:b5:29:6b:df:5c:
7b:ce:21:53:7f:b9:b2:a9:20:5e:31:e2:4f:1a:50:15:52:4f:
0c:0f:b3:27:b4:ba:7c:d9:aa:86:fc:cb:23:49:f1:9a:64:71:
bc:1c:6a:1a:c9:20:c1:3e:4e:71:a6:84:5d:53:91:eb:1b:85:
f0:91:f4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org