Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2783e781c80cbccb9c3e988c79d2c15781f528c3.roa
File: 2783e781c80cbccb9c3e988c79d2c15781f528c3.roa (raw, json)
Hash identifier: 7iSU7jhASBFWy3lugJdcSEb5GeJaqZcUHTdEK8sd93A=
Subject key identifier: 62:38:B4:B3:09:05:14:68:0E:C2:92:48:84:42:23:E3:F9:9B:30:91
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 06B92B
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2783e781c80cbccb9c3e988c79d2c15781f528c3.roa
Signing time: Wed 24 Mar 2021 14:33:37 +0000
ROA not before: Wed 24 Mar 2021 14:33:29 +0000
ROA not after: Tue 24 Mar 2026 14:33:29 +0000
asID: 36351
IP address blocks: 191.96.120.0/24 maxlen: 24
191.96.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440619 (0x6b92b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 14:33:29 2021 GMT
Not After : Mar 24 14:33:29 2026 GMT
Subject: CN=2783e781c80cbccb9c3e988c79d2c15781f528c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ab:db:21:68:c5:b9:a4:de:0b:32:0a:ce:2a:
cb:63:36:e6:c9:2b:50:9d:18:b7:a6:1a:dc:fc:7d:
57:66:3a:c3:f1:db:0c:f9:41:4e:c7:92:fa:1a:79:
58:3b:e2:47:0a:06:b2:bd:de:58:8a:bd:56:a6:85:
f5:c8:bd:e1:7d:6d:93:32:6b:f1:5f:0c:61:f4:5f:
f4:c4:9b:bb:0a:95:5c:b3:a3:a7:7c:73:3c:9f:32:
40:8e:40:ac:4d:10:9a:00:38:5f:d1:27:8f:56:18:
5c:e5:77:67:26:f4:9a:33:12:5c:fd:65:fa:3e:a6:
27:bd:59:2b:9e:67:7a:96:fc:a5:23:f5:06:ae:e2:
39:c9:a2:8e:f0:09:dd:ac:0c:c8:84:82:d3:0e:76:
ec:97:9e:7f:2e:e1:2a:6e:9d:0e:9c:29:a6:c8:75:
d5:da:e7:b0:37:e7:59:ca:e8:f6:3c:30:41:81:2f:
0c:44:cb:4a:6c:14:13:5d:9a:12:d2:f3:21:09:17:
e1:e0:0d:a6:15:cb:f7:83:08:ff:68:10:9e:60:ab:
5b:2b:0a:bb:34:2b:fd:ad:f7:51:49:40:03:0d:d8:
15:37:96:2d:2b:05:f8:f6:b7:f1:30:15:93:2d:da:
fe:c0:8a:9e:88:c0:90:c4:27:b5:0b:3e:7e:41:da:
05:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:38:B4:B3:09:05:14:68:0E:C2:92:48:84:42:23:E3:F9:9B:30:91
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2783e781c80cbccb9c3e988c79d2c15781f528c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.120.0/23
Signature Algorithm: sha256WithRSAEncryption
36:38:10:9a:9d:a7:73:f6:b3:8a:3e:8d:e1:8e:76:18:58:56:
60:e5:b4:e5:33:35:09:01:6a:12:61:f2:47:f2:e3:54:92:6b:
fd:30:56:f5:d1:35:9c:0b:4b:fd:da:49:f5:f1:c2:9b:17:c1:
0f:6e:22:03:03:30:51:60:20:e5:b3:5d:e7:9e:85:12:94:ff:
c6:aa:71:47:60:7b:9d:f7:d7:b7:cd:81:4b:7d:61:41:86:d0:
63:56:6e:3e:f5:8b:28:b4:56:d4:4b:f6:a3:fd:2d:9b:94:5c:
2d:f9:e2:08:d3:d5:9c:80:6f:1d:6b:df:6a:bd:e4:a0:6c:1d:
87:72:39:d4:5c:c1:95:03:71:52:d8:b8:14:21:e8:cd:dd:2a:
9d:67:f3:39:51:cb:08:b5:64:6b:d1:c7:7c:a1:c7:03:89:17:
24:e4:16:09:15:a9:3a:fa:55:11:5f:4b:68:85:7e:bb:3d:be:
9f:f1:00:46:1f:01:b1:30:72:10:d0:08:ca:86:10:37:25:dd:
51:7c:9a:be:13:28:b5:e1:85:f4:9d:e2:a9:67:dc:8c:f3:7e:
fc:19:cd:bf:7a:1f:08:35:d7:86:08:e5:31:98:40:53:fe:05:
8b:10:91:3f:eb:c9:41:5d:e7:16:cc:eb:0e:c2:d9:8b:31:4c:
a1:ad:d6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org