Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/da9192fa44e0973bb796aa0b7fc1a871af507e29.roa
File: da9192fa44e0973bb796aa0b7fc1a871af507e29.roa (raw, json)
Hash identifier: jzFdqP2kD6PFQn8QeG05Om/GUxuu/fkf7eDSUFAKe0A=
Subject key identifier: 3F:41:4D:01:61:32:61:5F:DC:99:B0:0B:7C:AC:02:EC:E9:CD:17:D7
Certificate issuer: /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial: 27939C
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/da9192fa44e0973bb796aa0b7fc1a871af507e29.roa
Signing time: Sat 27 Jan 2024 16:25:22 +0000
ROA not before: Sat 27 Jan 2024 16:25:22 +0000
ROA not after: Tue 27 Jan 2026 16:25:22 +0000
asID: 52228
IP address blocks: 152.231.128.0/17 maxlen: 24
152.231.128.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2593692 (0x27939c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Validity
Not Before: Jan 27 16:25:22 2024 GMT
Not After : Jan 27 16:25:22 2026 GMT
Subject: CN=da9192fa44e0973bb796aa0b7fc1a871af507e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:0a:f9:ad:52:55:e4:59:be:9a:d3:4c:85:
b3:cc:59:6d:ae:1a:a3:2e:c1:aa:26:67:75:71:26:
fc:ad:ba:d7:75:fa:70:5b:b0:6f:e4:4e:be:d0:2c:
13:a6:f4:ec:0e:57:cd:9a:76:a5:8b:ed:9e:e6:24:
e5:67:61:df:6d:00:42:a3:46:d0:b2:a6:80:56:e7:
37:40:b7:b8:86:7b:6f:15:34:bd:e9:46:17:8e:3b:
26:74:19:d1:0e:30:e6:53:52:2c:e8:af:14:1b:a8:
41:ec:19:7e:ff:be:1b:4b:56:6e:60:2e:eb:a6:76:
8a:ed:e1:8e:18:cd:77:3f:84:6c:10:6d:6b:42:16:
d1:1e:72:ae:4e:b1:c7:e3:91:23:33:fc:00:4d:ff:
bf:d9:87:a0:3a:ab:fc:8d:43:f0:12:ab:c3:1f:c4:
35:00:60:65:ce:3d:15:7b:98:25:81:62:e4:31:df:
e0:b5:c0:e8:88:16:d7:b8:38:ef:1c:f1:e3:b4:47:
91:24:b4:c9:25:85:ba:9a:f5:af:ae:ae:f3:6e:9d:
bb:59:b6:ea:c8:05:d5:6d:51:1b:9d:9a:4e:e5:0a:
7d:75:8a:e5:14:bb:3a:09:bd:8e:3a:5f:4a:0c:4e:
70:36:c6:9d:ce:05:46:e3:77:73:65:ae:22:38:21:
58:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:41:4D:01:61:32:61:5F:DC:99:B0:0B:7C:AC:02:EC:E9:CD:17:D7
X509v3 Authority Key Identifier:
keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/da9192fa44e0973bb796aa0b7fc1a871af507e29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8a:f6:21:f7:b2:10:cf:1d:15:26:58:b8:11:46:b9:47:b7:82:
e7:8b:b0:44:5b:ef:7b:6c:a5:6c:3e:b1:fb:f2:0e:68:20:44:
12:8c:43:ae:52:46:45:a2:13:98:52:d5:a0:75:f0:6f:27:24:
63:8e:35:b2:32:56:fb:d6:21:fa:b0:6e:dd:e0:e8:4e:ef:64:
f5:eb:4d:00:dc:4f:54:b6:39:07:70:cf:38:e0:51:23:2c:3d:
8b:54:44:d6:9e:c6:12:45:05:bd:63:76:a9:4d:36:57:d8:1b:
93:29:2c:0a:6d:67:15:1e:13:06:6c:cc:49:76:9a:cd:b6:cf:
ef:ec:63:91:b5:b8:5c:ae:d4:34:47:10:6f:fd:df:e6:9e:c5:
a7:46:c9:28:d5:d6:20:95:75:15:02:91:22:4f:7c:f1:43:f8:
7f:50:28:29:c7:6e:92:6a:f3:ac:30:2e:3f:d0:40:a0:af:e2:
c5:f2:13:99:bd:d3:18:fc:e0:95:ed:8c:30:2b:71:bd:c5:ab:
04:12:b6:8c:89:8e:79:b4:32:03:eb:d0:75:a6:dd:03:f5:f6:
1f:04:16:af:cc:e5:11:ce:16:3f:66:43:da:8f:3d:83:63:27:
d0:0e:73:9d:37:10:48:49:d0:3f:a3:d4:08:13:62:b0:ff:da:
9a:80:15:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org