Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2b38ede87011608090c644e6454b064067d0ff94.roa
File: 2b38ede87011608090c644e6454b064067d0ff94.roa (raw, json)
Hash identifier: qdF9ioa/4p4PGdwjfiosF66HtZsipsPgn6IvIwPnnco=
Subject key identifier: 95:EA:AA:ED:2F:F3:B0:55:A4:7A:45:B9:58:D1:86:F9:20:E6:7A:F8
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 0C5DB1
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2b38ede87011608090c644e6454b064067d0ff94.roa
Signing time: Wed 11 Aug 2021 06:56:31 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 30633
IP address blocks: 191.96.108.0/24 maxlen: 24
191.96.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 810417 (0xc5db1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=2b38ede87011608090c644e6454b064067d0ff94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c4:15:c8:e4:68:f4:ef:f2:9a:e6:90:66:7d:
ea:5a:51:8e:d1:80:3a:23:26:95:ba:ce:91:57:d1:
5e:09:ba:e6:97:c5:b1:ac:31:dd:b6:03:44:b1:0b:
d3:32:b4:40:4e:4d:9c:7e:bd:13:52:8f:5d:bc:1f:
a7:16:5b:2c:13:46:0a:86:83:31:ad:c1:0a:1d:bd:
01:52:75:36:92:df:e4:f6:aa:88:4d:fe:46:f2:d4:
5e:0f:81:8d:93:ef:7c:63:9b:32:db:86:a9:f9:27:
62:f4:6f:73:df:ec:4b:70:ee:3a:01:0e:83:18:b7:
fb:4e:57:3a:af:ed:ca:f6:a6:f3:fc:8c:98:e7:4e:
df:46:53:f6:0b:f6:26:7e:83:5f:59:ca:f3:cb:fc:
17:15:8c:68:d6:4f:fd:45:16:ec:0b:d7:23:ad:2f:
5c:28:19:72:53:01:44:79:21:d5:56:02:a1:d2:16:
ab:e5:78:c3:e9:95:bc:ef:70:70:f1:50:09:a7:bd:
b7:ce:85:76:d5:a3:07:34:0b:56:0d:fa:13:25:a7:
38:83:84:75:67:03:eb:9a:3c:2d:cd:81:b3:22:4a:
f7:2d:5d:3d:db:15:52:01:a3:c6:57:92:5e:f1:bc:
72:24:cf:54:8f:d9:d8:f1:3f:ae:a2:7f:f7:fb:d7:
5f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EA:AA:ED:2F:F3:B0:55:A4:7A:45:B9:58:D1:86:F9:20:E6:7A:F8
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2b38ede87011608090c644e6454b064067d0ff94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.108.0/23
Signature Algorithm: sha256WithRSAEncryption
87:97:bc:9e:44:91:bb:43:cd:23:c7:50:04:9f:ad:78:3d:1f:
12:02:dc:34:59:c7:53:e5:8b:3d:03:09:57:19:fe:c7:5e:f7:
f1:5c:bf:28:cf:77:12:66:fd:f5:0a:b0:38:e6:28:46:74:0e:
38:7c:fd:73:a4:11:88:28:1c:01:b3:c5:1c:1b:3a:83:9e:08:
19:69:5c:98:ae:8f:4e:c8:13:80:3c:60:ce:f7:84:78:03:e4:
8d:26:7e:ce:a6:37:c9:d2:d8:14:1d:bc:18:6e:21:b5:db:c1:
28:eb:d1:e8:e8:13:34:30:61:64:cf:aa:5e:8c:cd:78:a8:f6:
49:ba:69:a1:cb:ef:eb:6a:79:1e:b1:dc:a0:42:67:9c:15:74:
4d:ff:ac:0e:16:25:d8:f0:0e:8f:0a:e3:19:c7:3b:21:34:16:
94:f7:6f:c2:98:7e:d2:ea:ed:26:1e:6b:29:38:07:c5:d5:19:
f4:61:90:a1:db:0a:bc:eb:97:ee:5d:f1:00:74:d2:75:27:4a:
2a:18:f3:a1:5f:0b:93:5c:73:de:38:f0:17:d3:9a:d1:c1:88:
d5:be:93:06:6e:8e:8a:f4:ea:b2:3d:54:e0:23:3f:43:b0:88:
bd:61:64:8f:3f:38:0a:bf:7e:06:fc:8d:39:a8:b0:7f:e5:36:
93:29:da:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org