Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2c7836d067dbf7f48d2ef69794183848ac166316.roa
File: 2c7836d067dbf7f48d2ef69794183848ac166316.roa (raw, json)
Hash identifier: gQyj8PK+Mo9BF1gUeJ+x4OV9FWnMylqcHeADyAsFcW0=
Subject key identifier: A7:CA:20:93:D1:95:AF:0F:E7:65:7F:CB:D6:67:0D:BC:FC:6C:FF:C1
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 067160
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2c7836d067dbf7f48d2ef69794183848ac166316.roa
Signing time: Wed 24 Mar 2021 14:33:36 +0000
ROA not before: Wed 24 Mar 2021 14:33:29 +0000
ROA not after: Tue 24 Mar 2026 14:33:29 +0000
asID: 17216
IP address blocks: 191.101.16.0/24 maxlen: 24
191.96.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422240 (0x67160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 14:33:29 2021 GMT
Not After : Mar 24 14:33:29 2026 GMT
Subject: CN=2c7836d067dbf7f48d2ef69794183848ac166316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a7:66:41:db:e5:07:f8:ef:9d:17:a7:cc:85:
58:f5:1e:0c:2b:d3:11:5d:0f:f9:53:25:40:65:3c:
9c:14:b1:dd:c8:19:05:36:81:f9:17:48:25:84:22:
e9:96:fe:91:e7:15:4a:6a:2f:30:1f:9b:a1:ab:5c:
ba:20:74:f9:0e:dd:67:62:1f:f1:a6:63:8f:c6:57:
bb:24:5d:1b:4e:04:f3:ad:56:17:72:91:39:06:15:
f9:91:bd:80:99:60:4c:69:7b:cd:ca:b1:34:b0:a7:
53:00:ec:88:e7:aa:a8:2e:0a:5c:05:22:1a:7e:02:
88:cb:10:7a:03:0e:39:7a:81:ec:b9:7e:c1:14:76:
e1:59:a2:b2:75:5a:80:a9:94:ef:79:67:78:03:53:
3e:38:ca:c9:ad:30:38:85:2c:3e:8b:ba:66:bf:16:
e3:bb:c6:ad:65:ce:69:5a:22:b5:90:88:43:be:2e:
a4:74:62:a9:c7:fe:1b:34:69:6e:35:23:26:7d:94:
8a:4b:7d:b8:64:20:5f:ee:a8:35:8f:57:4d:da:79:
c9:1e:f4:02:0e:7d:6a:d3:30:79:0f:6f:12:b8:e2:
5d:dd:28:f2:f7:66:c7:ed:8e:f7:4b:6b:0d:15:62:
ee:2a:ef:4e:69:60:f4:b4:64:61:79:22:36:e5:fb:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CA:20:93:D1:95:AF:0F:E7:65:7F:CB:D6:67:0D:BC:FC:6C:FF:C1
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/2c7836d067dbf7f48d2ef69794183848ac166316.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.101.0/24
191.101.16.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0e:f1:fe:e1:14:b5:21:58:27:dd:0f:08:5a:7c:c8:0f:9d:
cf:3e:74:c2:fd:bc:b1:3e:1b:5f:d4:5f:9d:3e:db:85:d7:dd:
4b:df:a3:6e:98:d4:31:c2:de:ad:fd:66:a1:39:f3:0f:26:98:
25:84:98:4c:53:df:f9:65:2d:7c:ca:98:21:27:43:c5:d6:f7:
b8:61:4b:5f:85:6f:e8:0d:86:5d:cd:cd:f0:bf:c3:73:b1:1f:
6b:30:8c:74:77:cf:57:54:19:3a:61:a5:a8:2d:16:f6:9b:a2:
ee:ca:8f:6f:5a:80:97:ee:c9:6a:d1:2c:f2:98:09:e8:f9:97:
1b:9a:71:1f:a3:dc:8f:a2:47:63:11:67:a7:07:6b:33:7e:1b:
d0:36:5b:11:95:f7:f8:fc:de:45:39:69:9b:47:39:01:5d:4e:
24:ca:96:0b:7b:02:f9:9c:ae:27:7a:97:48:22:d8:2f:b8:98:
59:c4:40:38:ea:d6:46:ea:1b:4c:27:14:61:00:ba:43:40:fc:
a8:45:01:c0:f2:de:2e:d1:5c:36:16:59:c9:7f:a3:f7:82:36:
b3:5f:3b:75:4b:6a:0d:08:2c:2f:a5:b8:56:72:51:4e:84:67:
ed:3e:94:c7:33:6a:24:e3:73:13:2e:c9:a3:4a:d6:72:36:9d:
b2:e1:5c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org