Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d4f2025-f34c-4483-b679-09844f122a54/e53f0a5dc152ddfc62b3eefdb2f45cb37dd4381d.roa
File: e53f0a5dc152ddfc62b3eefdb2f45cb37dd4381d.roa (raw, json)
Hash identifier: Mz0UALANCwQOsTx1MKPb3PTm48KFpzSfHYsUMhW+wY0=
Subject key identifier: C3:48:05:54:AC:17:97:76:EC:51:2D:9A:97:99:15:EF:CF:4E:CA:E9
Certificate issuer: /CN=b16d3c6d8a5f9edb19cd942123042b1c20ae53f5
Certificate serial: 0D97EF
Authority key identifier: 17:36:A6:7B:E0:AC:16:FA:79:A3:49:C6:56:7B:DE:60:D6:40:2F:F5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b16d3c6d8a5f9edb19cd942123042b1c20ae53f5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2d4f2025-f34c-4483-b679-09844f122a54/e53f0a5dc152ddfc62b3eefdb2f45cb37dd4381d.roa
Signing time: Wed 24 Mar 2021 14:38:25 +0000
ROA not before: Wed 24 Mar 2021 14:38:25 +0000
ROA not after: Tue 24 Mar 2026 14:38:25 +0000
asID: 263216
IP address blocks: 191.98.208.0/21 maxlen: 22
2803:f280::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890863 (0xd97ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16d3c6d8a5f9edb19cd942123042b1c20ae53f5
Validity
Not Before: Mar 24 14:38:25 2021 GMT
Not After : Mar 24 14:38:25 2026 GMT
Subject: CN=e53f0a5dc152ddfc62b3eefdb2f45cb37dd4381d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fb:b9:cf:42:bb:a1:2f:a3:f9:f0:80:11:db:
c5:65:4e:4c:f9:25:ba:2c:2a:f1:31:33:e4:e9:6b:
14:6a:0e:2c:71:85:63:63:85:3f:94:79:a1:b9:ae:
43:b2:7c:d3:b3:1e:55:7a:b2:6d:15:97:ab:e6:8b:
01:86:58:a3:9c:47:8b:e0:5f:62:8f:0a:4c:d0:87:
92:7f:34:57:1b:73:c6:62:26:4c:c4:2a:b3:d4:1d:
a8:0d:bc:d9:68:f7:da:db:ef:71:e3:0b:4a:8c:69:
f4:b4:f2:83:2a:b0:21:91:42:76:60:c0:60:7b:4b:
94:7e:e7:6d:cb:b4:18:ca:b7:21:e2:8f:27:f8:79:
92:e8:95:6a:4b:67:c3:a7:92:63:4c:ee:92:f6:cc:
35:01:94:84:88:75:99:65:7d:ca:d5:b6:c4:13:a8:
b7:93:3e:b1:45:5c:0b:22:80:69:5b:a0:62:20:dc:
d8:79:17:aa:74:db:11:18:ec:06:ff:f1:50:0e:6f:
ae:45:c8:01:27:dc:a7:1e:03:23:1c:63:c1:95:72:
ea:80:8f:50:06:43:21:74:b4:3d:f3:89:a8:1d:7c:
ef:a9:cc:88:f2:93:7f:b0:68:a2:e3:79:04:19:f1:
1f:61:74:cb:4c:30:62:d4:ed:db:eb:4a:75:1a:81:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:48:05:54:AC:17:97:76:EC:51:2D:9A:97:99:15:EF:CF:4E:CA:E9
X509v3 Authority Key Identifier:
keyid:17:36:A6:7B:E0:AC:16:FA:79:A3:49:C6:56:7B:DE:60:D6:40:2F:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b16d3c6d8a5f9edb19cd942123042b1c20ae53f5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d4f2025-f34c-4483-b679-09844f122a54/e53f0a5dc152ddfc62b3eefdb2f45cb37dd4381d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2d4f2025-f34c-4483-b679-09844f122a54/b16d3c6d8a5f9edb19cd942123042b1c20ae53f5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.98.208.0/21
IPv6:
2803:f280::/32
Signature Algorithm: sha256WithRSAEncryption
72:b4:0f:b0:e3:dd:48:9a:49:e1:7f:01:93:3f:84:2f:5f:03:
ba:3d:01:c9:7a:f6:85:66:bd:51:21:62:b8:e4:a6:cc:9b:62:
41:e0:c1:d2:a1:df:d9:f1:85:5d:b2:bd:70:6c:33:92:9c:03:
0f:ed:ff:4f:71:ac:a8:b3:de:05:59:83:63:9a:b7:a1:5a:12:
7c:ec:82:37:42:46:da:fc:61:08:76:51:6e:8b:4a:3e:1d:e8:
3e:ff:d3:e5:71:19:60:da:5f:de:7e:10:e7:12:12:b1:e4:04:
e4:83:3f:a9:6c:af:05:be:0e:22:18:08:96:fd:00:24:78:02:
58:0c:87:29:bf:72:1d:ab:7a:24:02:93:f1:c1:96:1e:ae:af:
51:b3:0e:11:f0:05:7a:3c:d0:24:e6:73:9b:10:cb:72:e0:3d:
bc:b3:2d:fd:b5:1e:d2:07:3b:f2:e6:a3:b6:02:6d:29:26:66:
da:31:7a:2b:bc:5c:33:80:ab:cd:8f:55:da:db:c6:dc:8a:ae:
58:6a:f4:45:91:31:f0:9a:8f:7f:57:87:1c:a2:50:2e:44:b6:
8d:b0:22:b3:b9:4b:40:80:fe:69:02:19:1b:ba:32:c5:7d:3a:
ba:b4:bf:f1:41:2a:ab:10:af:be:05:9e:ea:25:cb:cc:11:99:
3b:cd:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org