Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/f75e737aed34c6a5d8c1f8863244c9979fb5b74a.roa
File: f75e737aed34c6a5d8c1f8863244c9979fb5b74a.roa (raw, json)
Hash identifier: 6iYUuuIHs2Mg06bjk1roETwqMaJisTkXUS4sMR/csnE=
Subject key identifier: 24:40:76:4E:B8:BD:7C:23:4E:65:A4:C8:84:1E:0E:15:80:45:B0:17
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 225693
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/f75e737aed34c6a5d8c1f8863244c9979fb5b74a.roa
Signing time: Tue 25 Apr 2023 15:05:53 +0000
ROA not before: Mon 24 Apr 2023 15:04:37 +0000
ROA not after: Fri 25 Apr 2025 15:04:37 +0000
asID: 28031
IP address blocks: 201.218.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2250387 (0x225693)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Apr 24 15:04:37 2023 GMT
Not After : Apr 25 15:04:37 2025 GMT
Subject: CN=f75e737aed34c6a5d8c1f8863244c9979fb5b74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a0:4b:f0:da:e8:20:ec:97:4a:f4:f6:58:55:
6f:e3:2a:29:82:bd:0a:aa:9d:4d:1f:0f:9c:ac:19:
88:2b:c4:66:f1:31:9e:c0:50:b6:cd:f9:98:66:5d:
66:b5:25:0b:49:39:37:9c:f8:c1:79:b2:12:ac:27:
f5:e6:de:07:98:0e:96:8e:5c:a5:53:bf:aa:00:c1:
d2:a3:73:ac:cb:fc:67:61:0f:08:3d:9c:bc:53:af:
27:e6:66:df:73:1b:92:e0:25:59:0b:41:d9:b4:f7:
f9:dc:7f:72:69:4e:56:34:ee:3e:96:6d:db:a2:37:
4a:88:8e:df:8f:5a:81:64:bc:32:30:ab:e3:58:d8:
8e:7c:b2:7d:97:63:66:a0:11:c6:9a:be:fe:c3:57:
33:e6:50:bd:83:e1:a2:d2:c6:2b:9c:2a:e7:7c:2e:
e6:b5:51:5f:05:d4:3f:52:d3:d2:f1:e0:d0:25:8f:
2d:94:8a:8f:12:28:d6:2f:26:26:80:28:4f:6a:45:
e3:c4:ee:66:aa:ad:11:76:99:18:b9:27:3b:b5:eb:
27:85:a0:f6:9b:f9:29:eb:19:1f:ac:41:16:a0:98:
d8:27:1a:53:ca:14:1f:52:72:b6:a9:dc:ec:40:81:
e5:43:36:cd:8b:1a:b2:8d:13:b4:79:78:8b:fc:54:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:40:76:4E:B8:BD:7C:23:4E:65:A4:C8:84:1E:0E:15:80:45:B0:17
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/f75e737aed34c6a5d8c1f8863244c9979fb5b74a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.218.212.0/24
Signature Algorithm: sha256WithRSAEncryption
20:21:8f:a7:f6:9f:d0:fd:95:9f:18:ab:db:07:dd:01:12:59:
ea:db:36:db:8e:f3:9c:b8:0e:0a:5f:ee:b2:06:5c:b2:ef:34:
ae:b1:fe:cc:ff:60:5e:a7:b9:ad:93:f9:55:15:87:0d:58:b1:
2d:f4:4f:e1:5c:b9:d3:1a:54:69:12:bf:fc:67:99:a9:eb:8a:
e2:a8:7d:9a:7e:6e:6e:80:c5:0c:af:4a:52:98:77:61:48:85:
74:03:6a:50:b6:4e:f7:3d:37:dc:a5:77:29:fd:6a:ce:a2:e1:
55:92:2b:61:a5:45:c8:37:37:b4:89:e4:be:f0:59:9d:46:c6:
c8:28:62:e5:94:60:b6:b8:c0:a8:56:83:79:77:38:53:ec:91:
34:26:3d:0c:71:71:46:e3:83:cc:b8:ef:1e:56:53:81:f1:8f:
89:ce:dc:b5:da:59:c5:8a:25:8b:5f:26:b9:3b:4c:c9:de:20:
88:80:a2:73:f7:91:26:0d:d2:44:ad:d8:1e:22:67:5b:0e:09:
14:50:81:91:14:7a:59:a9:c2:2f:f2:c5:0c:7f:14:24:2d:1a:
2e:72:c5:52:d1:c6:b7:67:b0:8f:79:f0:fe:ec:3a:27:02:54:
76:52:6c:0a:06:a4:02:ed:8a:49:6b:1f:2a:a7:77:9f:71:11:
d4:25:9e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org