Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/cf9aadc41e036aa8c2576a62a74b6be59c0048eb.roa
File: cf9aadc41e036aa8c2576a62a74b6be59c0048eb.roa (raw, json)
Hash identifier: G4F3Z+F8m7exnBHIiyTt4QCnngBT+AOgmgyJjzlXQZE=
Subject key identifier: 9A:A8:81:EF:21:20:69:85:C9:7F:88:3C:07:36:9B:AD:E3:59:59:89
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 0FA4F0
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/cf9aadc41e036aa8c2576a62a74b6be59c0048eb.roa
Signing time: Thu 14 Oct 2021 10:35:36 +0000
ROA not before: Thu 14 Oct 2021 03:00:00 +0000
ROA not after: Sat 14 Oct 2023 03:00:00 +0000
asID: 211019
IP address blocks: 191.101.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025264 (0xfa4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Oct 14 03:00:00 2021 GMT
Not After : Oct 14 03:00:00 2023 GMT
Subject: CN=cf9aadc41e036aa8c2576a62a74b6be59c0048eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:02:9f:7a:9a:66:31:91:db:f6:bd:f4:2f:c5:
70:1b:41:c0:f6:09:5a:12:3a:10:c8:03:51:67:fb:
40:2d:09:e1:9d:55:7c:e0:67:53:32:21:48:b6:1b:
20:13:2e:bd:e7:98:4a:b3:05:9a:cc:5e:44:b0:db:
d9:48:4b:81:a4:a8:f2:95:42:df:7a:e0:e7:a8:29:
c7:70:c8:db:35:ce:e0:39:b4:e3:a0:c0:65:8f:67:
fd:01:e6:d0:ca:0b:03:c2:2a:ea:c1:ad:cf:01:d8:
11:59:a2:86:da:f7:14:4c:de:e8:47:fc:e8:85:db:
eb:aa:f1:25:23:11:61:cb:24:a6:45:1b:8a:a2:59:
b2:9b:65:b2:02:9e:74:08:e5:4a:03:e8:3c:59:50:
da:e6:d7:1f:65:22:0b:48:a2:e0:58:bd:79:12:a1:
45:84:47:5f:3b:10:c0:a9:45:7e:65:cf:27:6a:01:
c5:a2:3b:b0:29:9a:f5:2b:97:37:ec:bb:45:ee:cb:
e2:9f:81:68:b8:e4:08:db:7c:44:18:ad:a8:11:6c:
20:f2:a8:55:e7:f5:63:ff:9f:4d:78:65:32:69:63:
48:2d:2c:d6:25:bd:56:20:bc:42:e3:4d:73:89:af:
1e:32:54:d7:b1:c0:3e:30:44:bd:eb:b7:91:cd:53:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A8:81:EF:21:20:69:85:C9:7F:88:3C:07:36:9B:AD:E3:59:59:89
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/cf9aadc41e036aa8c2576a62a74b6be59c0048eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.17.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:32:0e:ff:49:5f:b1:fd:01:46:ae:45:00:e3:f7:89:12:ca:
0b:54:13:fc:d7:13:a3:c6:04:b0:08:57:0e:46:f9:e4:81:26:
33:83:7e:78:bc:b9:71:8c:2b:87:6a:26:0f:32:87:6c:66:a8:
96:f7:07:db:ce:51:22:30:d8:f1:cc:d9:a1:6f:99:06:13:86:
0f:1c:8e:0a:5e:45:ec:ad:da:e2:a5:09:b5:4f:f2:ff:24:e6:
2d:16:93:5b:0a:ce:a1:b9:13:bb:5c:65:6f:ec:11:e0:74:95:
43:3c:9f:4e:88:19:3d:e1:b6:d7:07:d8:71:83:1e:61:9a:05:
fb:b0:36:43:41:6a:27:46:07:21:35:02:85:1f:3b:36:6f:1f:
e4:06:e2:d0:54:aa:e4:43:83:e0:de:85:b0:51:0c:80:ad:2a:
a6:5a:df:b5:97:88:5b:3f:b1:74:f9:fd:d2:31:d4:fe:56:c6:
ce:c5:63:74:79:0b:22:2f:e8:c5:38:ac:31:dc:e1:82:9a:ed:
70:5b:ad:37:06:1e:32:62:3f:d7:2f:35:50:69:e1:02:d5:6f:
89:8d:f1:d1:85:b1:f0:1e:c1:30:5c:dd:ca:a3:f5:e8:65:de:
a3:e4:4f:73:e8:cb:dd:6f:56:6d:f1:cb:06:02:a9:32:ed:9c:
d9:98:1d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org