Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/b6a1eb5307a2ba02d8f8968366016053e4e4dfde.roa
File: b6a1eb5307a2ba02d8f8968366016053e4e4dfde.roa (raw, json)
Hash identifier: Qn3RRbFtSfDRIg3qlEnuTVhyPPzFa1JB/8lMze+v0yk=
Subject key identifier: 4F:AE:AC:2A:88:AD:AF:40:5E:10:A0:26:AF:5A:BD:BE:A9:B0:F3:B4
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 24463F
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/b6a1eb5307a2ba02d8f8968366016053e4e4dfde.roa
Signing time: Fri 21 Jul 2023 20:54:58 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 262208
IP address blocks: 201.234.3.0/24 maxlen: 24
201.234.6.0/24 maxlen: 24
201.234.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2377279 (0x24463f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=b6a1eb5307a2ba02d8f8968366016053e4e4dfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bf:d0:47:58:45:93:64:59:51:15:c4:f7:9a:
fe:a2:d0:33:ef:24:6a:c4:20:af:8b:36:d5:bd:73:
f1:9d:42:54:3e:93:ed:ac:49:d5:75:94:56:7f:d5:
76:ba:db:2b:50:76:16:db:ed:e7:cc:5e:e2:43:bb:
f2:33:a3:b1:7c:01:19:fc:3a:24:9b:fc:2c:91:e6:
1c:72:30:b7:be:c1:99:8f:ce:94:44:5f:51:17:84:
1f:5a:ca:66:28:ab:3d:39:4c:ab:eb:a2:50:e8:8e:
c2:6d:6f:3f:d5:76:e7:24:41:fa:4b:cb:57:fd:c2:
4a:03:72:a2:08:f6:86:0b:e8:bb:69:59:9a:20:aa:
7d:33:c6:0d:0e:ee:4b:5b:bd:24:f4:35:2f:04:86:
27:f5:3d:b8:dd:6c:de:0b:0a:30:27:0e:a9:7d:b6:
b3:a6:02:49:a6:ca:b7:56:9f:df:3c:1d:13:4a:e5:
c1:32:4c:33:ca:a2:40:09:3d:c8:38:ca:a0:dd:f8:
6f:c2:25:87:37:85:2a:f6:2b:c3:45:f7:cf:73:c2:
68:81:82:d0:9f:c9:0c:71:78:52:64:ef:bb:81:95:
69:01:c4:22:4f:62:8b:ae:0b:22:4f:24:c7:f1:8b:
a0:4f:53:2e:0a:1f:52:c1:f0:81:04:05:17:8b:11:
d9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AE:AC:2A:88:AD:AF:40:5E:10:A0:26:AF:5A:BD:BE:A9:B0:F3:B4
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/b6a1eb5307a2ba02d8f8968366016053e4e4dfde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.3.0/24
201.234.6.0/24
201.234.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:75:24:52:9f:f1:99:81:68:8f:4b:f0:c5:10:cb:2e:35:6e:
b5:c3:77:57:21:be:c2:eb:2d:9d:ce:71:3f:3c:0e:57:ef:a1:
80:91:c1:ba:c1:b1:11:7b:a6:eb:89:a4:6e:ca:d1:7d:e2:82:
6d:16:28:2a:01:38:28:d5:1c:c8:a5:07:fe:81:95:30:cb:e7:
68:f4:de:26:11:c7:f8:92:5a:53:b8:0d:da:bc:85:12:34:8c:
a0:0d:68:a4:22:75:71:c8:ad:15:1d:4f:52:03:63:a5:9c:bd:
04:1b:57:c7:6a:66:fd:76:17:c2:75:00:cb:b2:bc:bc:c4:83:
d1:d1:78:1c:f6:42:18:44:b0:b2:fc:d7:a1:0b:b6:d4:30:26:
12:2b:84:93:5d:bf:27:43:b7:e1:ee:26:e6:2c:c0:8d:e8:cb:
7c:21:6a:a4:78:73:be:3c:13:eb:99:d7:0c:79:1f:2c:e9:63:
67:2a:04:49:68:66:85:28:23:9a:5b:e6:29:4a:26:a0:29:f8:
4e:7f:a0:5d:d3:1a:ae:41:3e:5d:81:8f:09:ee:c6:aa:c7:40:
61:43:90:56:4f:b3:47:da:5d:87:ec:b7:d1:b1:d2:fc:13:07:
bd:e8:ed:4f:c0:2d:88:9a:25:b9:35:03:cc:19:b3:cc:b8:21:
c1:4e:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org