Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3a668e1fa08f24dec25a7264292d48e3999ed403.roa
File: 3a668e1fa08f24dec25a7264292d48e3999ed403.roa (raw, json)
Hash identifier: ObTx9p+Oo65lPE5Re3bXWBSa6621m6Otx4Z7F4IJoeU=
Subject key identifier: BD:2E:AC:BA:ED:E7:76:26:98:6C:62:35:22:E2:FC:AD:DA:73:71:6B
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 11B29E
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3a668e1fa08f24dec25a7264292d48e3999ed403.roa
Signing time: Fri 26 Nov 2021 13:45:17 +0000
ROA not before: Fri 26 Nov 2021 03:00:00 +0000
ROA not after: Sun 26 Nov 2023 03:00:00 +0000
asID: 210636
IP address blocks: 191.96.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1159838 (0x11b29e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Nov 26 03:00:00 2021 GMT
Not After : Nov 26 03:00:00 2023 GMT
Subject: CN=3a668e1fa08f24dec25a7264292d48e3999ed403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:cc:80:5e:2b:6e:bd:42:49:4f:ce:83:d4:
08:57:80:ab:2e:26:7c:31:51:7b:f1:c8:1b:8a:cc:
db:e7:cd:c9:f9:5e:09:80:e9:38:91:7d:23:14:26:
85:21:25:a3:07:7a:5a:3d:60:b7:96:d5:4d:aa:8a:
56:da:35:21:d9:59:62:8d:b8:6f:eb:3e:08:63:a3:
28:30:96:78:3e:45:b0:05:a0:17:09:dd:7c:de:71:
da:a3:cf:00:4b:51:be:8f:52:20:78:82:b2:fb:9e:
fa:08:75:6c:0a:0f:29:97:1a:3b:2d:54:ee:69:3d:
d1:ce:ac:fe:ec:81:34:b7:ee:a6:0d:99:e4:33:b4:
a0:a9:0b:ef:10:9a:32:b3:84:bf:ed:96:91:19:c7:
85:6e:1d:67:aa:84:27:2e:8e:b6:23:8b:7d:c3:6c:
9c:3e:64:9c:d7:18:0c:9d:ab:95:9e:ac:55:12:97:
a4:cc:e8:3d:52:50:24:a5:c6:81:2f:d2:1d:36:66:
a1:6d:4f:12:e7:e7:16:03:79:ee:4f:9a:e2:b0:97:
fa:b9:37:13:c5:0d:8e:ca:e4:b2:42:dd:ca:d0:59:
87:a0:fc:5b:d4:fb:0c:db:15:88:e0:99:09:06:92:
c8:b7:ec:dc:89:9d:53:cc:cb:67:db:45:a9:07:d5:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2E:AC:BA:ED:E7:76:26:98:6C:62:35:22:E2:FC:AD:DA:73:71:6B
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/3a668e1fa08f24dec25a7264292d48e3999ed403.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.234.0/24
Signature Algorithm: sha256WithRSAEncryption
12:33:03:8e:d5:16:7f:f8:a6:9a:28:8b:24:bc:a5:45:13:14:
8f:7a:92:a9:fb:02:95:59:ca:b1:bd:f3:dc:5d:c0:85:25:61:
90:28:23:f7:4c:51:a7:27:fd:01:08:e3:a8:c5:ba:61:30:4f:
ca:4c:2a:93:8d:95:ff:6b:56:83:6c:76:7f:6c:d1:70:b6:8b:
e3:67:cd:58:9c:6d:7e:72:21:7c:1d:f1:2e:b5:15:86:c9:78:
7e:a6:0e:77:b8:f0:00:dc:cf:33:8f:12:85:e5:4c:05:42:96:
35:3e:10:c1:c6:1c:3b:77:1d:c9:d8:91:30:b6:e5:dd:9f:59:
d2:d7:b3:79:56:98:50:38:f8:76:15:25:93:f0:5a:f5:74:bd:
5d:c9:fd:3d:67:5b:01:24:17:e1:63:7d:b8:0e:11:7b:74:a8:
4f:6f:27:c3:ee:37:94:90:08:bb:13:57:62:a9:d9:3a:ab:3d:
bf:a3:e0:4a:ef:64:46:31:84:30:03:d9:eb:3a:a7:d6:8b:0c:
b0:d4:e2:a6:d8:d6:89:36:e5:c2:d8:53:a2:4d:e9:e8:14:95:
f2:ce:18:db:7c:70:52:bf:71:1d:c0:12:7c:91:b6:61:bc:90:
c1:38:f1:1f:9b:79:5f:c0:41:8f:d2:c8:be:02:d7:b8:e1:3d:
e4:3a:30:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org