Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/59867b9b9045fb9665db34d6fcc171201577de2c.roa
File: 59867b9b9045fb9665db34d6fcc171201577de2c.roa (raw, json)
Hash identifier: GTFOSFNWagB4QXJDTaMGHLtOsmWtsUyi4FEXc7hDec0=
Subject key identifier: C4:D7:2A:B0:9B:9D:79:93:97:90:29:2C:4D:98:77:41:04:02:85:E3
Certificate issuer: /CN=82541385988cb3666d0f41117745c9d3b4df8827
Certificate serial: 04F5D8
Authority key identifier: D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/59867b9b9045fb9665db34d6fcc171201577de2c.roa
Signing time: Fri 27 Oct 2023 00:53:08 +0000
ROA not before: Fri 27 Oct 2023 00:53:08 +0000
ROA not after: Mon 27 Oct 2025 00:53:08 +0000
asID: 272970
IP address blocks: 201.158.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 325080 (0x4f5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82541385988cb3666d0f41117745c9d3b4df8827
Validity
Not Before: Oct 27 00:53:08 2023 GMT
Not After : Oct 27 00:53:08 2025 GMT
Subject: CN=59867b9b9045fb9665db34d6fcc171201577de2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:43:be:76:a0:58:ad:00:60:49:7c:5e:67:74:
95:ed:b2:ca:0e:8f:77:e5:be:00:75:5e:67:37:0a:
cd:98:f6:77:db:91:4e:f5:f2:a2:54:69:c8:05:9c:
24:ae:48:40:9f:d4:c8:21:de:0c:21:93:1f:78:c4:
a8:03:0d:0a:99:9e:4c:1a:f6:b3:66:c0:b7:5c:54:
d6:7f:37:ae:44:a1:54:f8:d8:2d:8f:0f:3a:58:2a:
80:37:91:0f:0b:db:eb:a0:eb:0f:15:e8:2d:76:40:
fe:8c:6f:07:10:52:cf:be:fc:80:3f:6c:1e:11:0a:
73:1f:83:da:84:6b:66:80:2f:da:a5:59:2d:16:46:
21:3d:14:3a:e6:c5:74:0d:05:da:09:d9:49:0f:56:
3e:9a:13:5c:41:6a:30:d2:8e:5b:20:2a:39:ea:0d:
09:f2:ab:0a:96:67:b8:27:b8:6e:90:25:ca:79:07:
11:80:a7:a2:18:10:6d:82:35:cc:08:44:2a:f7:63:
8e:a0:fd:f7:f6:48:a0:1c:be:1a:e4:71:e0:da:56:
1e:bf:be:c9:a7:5d:8b:bb:ac:a7:f8:9a:2e:86:5f:
99:f4:52:16:ba:07:dd:cf:15:1c:a6:c7:bd:2f:cd:
db:05:7f:85:f7:39:47:46:73:48:8b:67:18:61:2d:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D7:2A:B0:9B:9D:79:93:97:90:29:2C:4D:98:77:41:04:02:85:E3
X509v3 Authority Key Identifier:
keyid:D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/59867b9b9045fb9665db34d6fcc171201577de2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/82541385988cb3666d0f41117745c9d3b4df8827.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.99.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:b9:22:08:5d:11:1a:3f:7a:ea:88:2f:ab:a2:e5:5a:c3:a2:
2b:12:7c:67:7b:5d:dd:d0:ae:7b:d1:01:19:a4:2c:10:49:57:
dd:8c:73:6d:a8:50:82:ef:2f:f0:e2:b4:4f:14:6b:0d:06:6c:
65:7d:99:82:19:12:b1:08:cb:8c:e3:66:de:6f:b3:e3:71:7d:
7f:32:fd:d4:00:b9:84:e9:a6:bf:2b:c7:65:06:ef:f8:98:14:
f4:f0:41:d1:af:24:b7:6e:8e:f4:3c:f7:1e:27:7d:9d:e6:78:
af:7d:d4:67:24:2a:33:7f:13:55:7e:e5:80:9a:14:8b:57:6d:
dc:56:fa:04:35:a5:cd:63:cf:38:00:19:94:9c:ee:41:93:8e:
9f:18:fb:54:8a:c8:51:2a:ca:df:ed:06:27:87:89:60:3c:b5:
73:27:fa:4e:ea:39:a5:24:ae:2c:8e:a8:e0:bd:4e:6a:11:98:
b7:aa:0d:b6:ee:c3:6e:31:db:02:ad:71:04:10:99:b7:d2:76:
19:f6:05:3d:fd:be:dc:0b:3e:0b:14:31:02:1d:83:34:f9:66:
af:59:25:36:38:1d:42:b5:4a:0b:0d:2e:25:dd:34:75:da:59:
87:9b:44:54:94:51:9d:09:69:f9:6e:51:9f:49:90:f1:02:11:
56:f3:10:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org