Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d97863403f962ec32289b2810c69998aaafa332a.roa
File: d97863403f962ec32289b2810c69998aaafa332a.roa (raw, json)
Hash identifier: bUf8bO3Z7YqeUiQdX0q/c+HXrbnllso9uJSAfk21NkQ=
Subject key identifier: CB:75:9A:66:9D:85:6A:74:7F:3B:F2:80:F4:73:14:5D:FF:14:4C:9A
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 15B29B
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d97863403f962ec32289b2810c69998aaafa332a.roa
Signing time: Thu 03 Feb 2022 15:14:22 +0000
ROA not before: Thu 03 Feb 2022 03:00:00 +0000
ROA not after: Sat 03 Feb 2024 03:00:00 +0000
asID: 33696
IP address blocks: 191.96.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1421979 (0x15b29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Feb 3 03:00:00 2022 GMT
Not After : Feb 3 03:00:00 2024 GMT
Subject: CN=d97863403f962ec32289b2810c69998aaafa332a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:10:52:0e:f2:03:10:e4:54:45:1d:79:bb:
6a:52:65:5f:0c:29:c1:16:58:97:34:22:d0:44:98:
f0:79:cb:c8:6e:cf:dd:26:fb:72:93:b9:af:3f:07:
40:c1:2b:2f:cf:45:fe:72:05:c4:e7:22:30:9a:9e:
23:f9:27:fc:f8:68:49:d3:bf:8d:ee:6d:b0:b9:70:
17:a0:39:04:97:93:b7:26:f0:c4:25:3d:a2:af:88:
d7:57:bc:21:24:e8:bc:40:d0:58:e2:90:03:0e:fd:
c4:55:65:ff:c6:d2:27:31:7e:9d:b8:92:eb:d5:d4:
0e:26:25:10:53:ca:c4:89:24:e4:bf:62:a6:ce:53:
8e:07:c4:e5:ac:e4:1b:36:52:e7:8a:cd:61:e1:e6:
bb:82:93:59:22:ea:14:bf:4a:4f:f5:de:06:50:e5:
9d:8c:63:4b:c1:71:eb:5e:2b:67:41:9c:15:21:7c:
4e:85:4b:7a:57:e8:a9:f0:b9:14:11:dc:45:b5:08:
51:b1:61:a5:c4:e3:8e:d3:d7:23:94:98:5d:68:00:
34:c2:57:46:c1:0b:84:fc:07:71:17:e0:13:a1:c6:
51:70:a1:f2:3d:b3:77:0d:14:62:dd:6f:5b:92:ab:
2b:a1:c6:29:22:4c:c6:d1:f0:41:3b:af:24:e9:8f:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:75:9A:66:9D:85:6A:74:7F:3B:F2:80:F4:73:14:5D:FF:14:4C:9A
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d97863403f962ec32289b2810c69998aaafa332a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.204.0/24
Signature Algorithm: sha256WithRSAEncryption
15:7e:81:40:4b:f1:f0:5f:1d:00:90:3f:4d:ac:f0:5a:ad:ec:
32:9f:75:b0:d3:60:4d:b6:53:9d:d5:d5:e8:97:c5:bf:62:67:
ab:2c:5d:dd:30:79:b3:ea:2b:e1:07:4e:54:64:b8:0a:d5:5a:
f6:58:97:ab:74:ba:c7:23:11:ae:91:c3:23:31:ee:9c:b7:19:
76:5a:ae:5d:55:4d:25:7f:9e:fe:2e:3d:bb:5a:c6:da:1c:6f:
97:9e:10:3c:52:7a:37:77:f9:ec:bd:fc:e8:b7:aa:24:e6:21:
d5:33:d0:66:2c:8f:79:9f:96:b3:de:e4:f3:15:18:e8:4d:c7:
70:98:8e:2e:7b:25:b8:dc:f4:69:f6:48:d1:55:d0:e0:a6:6b:
ce:47:6d:46:c1:80:9f:76:8e:a4:ec:4d:e2:e4:3e:f7:f6:45:
36:09:58:e3:83:11:dc:c6:a8:7a:8f:2f:6c:d3:72:12:4b:cc:
c1:1b:d6:f5:13:77:eb:0e:26:ae:9c:ca:f8:4a:94:30:b1:4e:
d4:40:0b:85:19:98:8b:8f:cc:d9:b9:f7:c0:cd:5b:c8:d7:fb:
3f:2a:b5:7f:13:16:5b:94:af:46:64:06:f9:9a:e0:7c:4a:da:
a0:73:6a:71:43:e3:28:17:92:4d:d0:59:2a:ad:43:f7:3b:0f:
71:a6:16:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org