Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f35b5db39b0b102ef05a4c6bdc694ca0bbdae49e.roa
File: f35b5db39b0b102ef05a4c6bdc694ca0bbdae49e.roa (raw, json)
Hash identifier: hQOWl0gW35+Uc3DD0CheUPuIvZR1QPMEocK+Em/fWtc=
Subject key identifier: BD:9E:60:66:74:1B:01:6A:60:B1:40:23:B4:43:B3:83:3B:7F:B4:D4
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 24B907
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f35b5db39b0b102ef05a4c6bdc694ca0bbdae49e.roa
Signing time: Fri 21 Jul 2023 20:55:50 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 52255
IP address blocks: 201.234.101.0/24 maxlen: 24
201.234.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2406663 (0x24b907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=f35b5db39b0b102ef05a4c6bdc694ca0bbdae49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:1d:85:a1:c7:2a:51:ba:19:b1:4a:64:f9:
87:4c:22:31:3f:cc:9a:82:77:18:1e:c8:dd:a8:09:
41:37:f9:6d:1b:42:35:7b:d5:cf:93:50:90:b4:ec:
ba:09:72:61:40:30:c9:68:5a:39:40:bc:0d:66:32:
e2:be:f9:a6:91:56:e9:31:4d:8f:b6:1a:ca:60:6b:
55:15:eb:90:0a:2d:eb:12:be:9f:6f:1c:ed:6c:08:
9b:7a:0c:29:04:94:92:38:ce:07:dc:46:1a:7e:7d:
72:31:17:b2:89:31:72:30:bf:31:f8:4d:5b:6c:14:
fb:5d:c7:29:e2:56:72:4c:fe:0e:48:3e:6a:c9:02:
74:32:77:47:8c:76:26:b1:64:f1:d2:26:03:8a:99:
15:05:1a:2f:64:45:c7:61:e9:fb:26:3d:3f:ec:9e:
69:6a:65:a3:c3:d7:dd:45:9a:44:23:8c:d6:aa:63:
80:77:ee:ca:d8:d9:d5:c8:b0:5a:3e:bb:fb:a8:99:
0a:8d:6a:ab:b6:46:05:25:d5:5c:0c:2d:12:7d:4a:
ae:af:17:0b:9f:52:1f:16:f6:d9:69:f6:da:45:23:
d4:51:65:07:c6:5f:13:16:19:56:a8:7e:d6:40:a4:
cc:24:13:55:ed:3d:79:bc:21:0d:3a:d3:c1:1e:89:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:60:66:74:1B:01:6A:60:B1:40:23:B4:43:B3:83:3B:7F:B4:D4
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f35b5db39b0b102ef05a4c6bdc694ca0bbdae49e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.19.0/24
201.234.101.0/24
Signature Algorithm: sha256WithRSAEncryption
72:56:60:fe:a8:f8:20:78:a0:10:e4:16:60:8a:5d:31:95:0c:
ea:d6:1a:1a:8c:30:34:a9:6b:6a:fa:92:78:93:c9:a1:8e:30:
8a:73:6e:76:7b:f6:35:59:64:5a:77:7b:39:e4:4b:e8:67:80:
b3:3d:bc:08:72:84:20:ed:50:7c:d3:63:de:2c:d7:6c:24:f0:
77:d7:e5:a5:df:84:89:0a:b4:07:30:2e:e7:9f:5c:29:53:44:
50:d6:ba:0d:8f:8b:f0:b7:99:57:56:a6:ca:60:8e:40:a8:aa:
e9:df:d4:a3:8d:5a:66:95:a3:c6:0d:a0:bb:db:bd:7f:93:74:
7f:e6:d5:39:7b:b3:42:c5:a7:86:49:1b:f8:92:b1:b1:f2:ae:
ac:9e:fa:b2:e5:0e:0b:16:0f:ac:88:78:59:68:6a:2e:d6:2d:
fe:c6:47:2b:c4:05:ad:75:83:95:d0:ca:a6:7b:69:fb:cc:d0:
79:a7:4b:e0:3c:55:c0:9c:53:d9:ed:8a:74:28:36:ac:70:00:
73:97:f3:30:04:68:c1:f2:51:ba:81:a2:ae:d1:77:fd:aa:26:
5a:c4:59:6c:8c:33:d2:c4:e3:e6:06:44:71:ce:1c:a7:81:a3:
79:d4:07:8c:b6:ca:e3:c1:a3:2e:86:f8:b5:c8:1d:e8:4c:6c:
43:d9:9d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org