Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/a9904fc65eac2e4e943a7118dd990d0b6c55f283.roa
File: a9904fc65eac2e4e943a7118dd990d0b6c55f283.roa (raw, json)
Hash identifier: LrS2WmK2USNvRbFMw4lxyoL3ispvfjNBvQDAuTpw4nE=
Subject key identifier: 1A:B4:03:10:3F:B6:3F:84:F5:16:3F:A0:6A:09:EB:E5:4D:E7:1E:1C
Certificate issuer: /CN=82541385988cb3666d0f41117745c9d3b4df8827
Certificate serial: 05DA94
Authority key identifier: D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/a9904fc65eac2e4e943a7118dd990d0b6c55f283.roa
Signing time: Thu 30 Nov 2023 06:34:08 +0000
ROA not before: Thu 30 Nov 2023 06:34:08 +0000
ROA not after: Sun 30 Nov 2025 06:34:08 +0000
asID: 272928
IP address blocks: 201.158.96.0/23 maxlen: 23
201.158.96.0/24 maxlen: 24
201.158.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 383636 (0x5da94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82541385988cb3666d0f41117745c9d3b4df8827
Validity
Not Before: Nov 30 06:34:08 2023 GMT
Not After : Nov 30 06:34:08 2025 GMT
Subject: CN=a9904fc65eac2e4e943a7118dd990d0b6c55f283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:73:e7:71:44:fd:24:25:3e:e5:7e:19:e0:
97:39:28:b9:8a:a0:e8:08:37:20:2c:6f:d1:25:ce:
e9:89:eb:5a:46:34:94:03:21:67:93:f7:5f:4f:71:
c9:b9:c3:62:e6:1a:f6:6f:47:c1:e3:4c:e7:11:f0:
62:92:d8:7c:b2:93:b5:97:bb:a4:d1:68:94:77:e3:
59:cd:66:8e:5e:71:e6:1a:f2:d4:08:d2:ca:6d:c9:
a3:6c:e9:63:e3:6e:aa:b7:4b:98:3f:2a:e5:a0:b4:
a0:22:47:ab:50:c7:28:a6:6c:45:f5:8c:57:1c:24:
13:a7:6f:b1:fc:d8:41:cc:97:fa:0f:11:0a:d3:24:
0c:30:e7:7d:b2:1e:b4:f2:a3:67:18:79:a0:20:c9:
78:f4:bb:34:f6:a6:ea:91:7e:23:f0:b6:0e:e7:02:
ed:27:b9:5f:55:01:72:ce:50:9d:7b:26:66:ec:fb:
a6:74:3e:f6:54:ac:14:db:66:70:68:da:4a:9d:58:
d1:36:a2:4e:c5:c1:5d:bc:27:44:4f:b4:ab:09:92:
98:12:f5:bd:1f:b6:41:c7:eb:ec:77:d7:4a:b0:32:
d0:b4:6e:70:17:32:a1:0c:b3:78:d9:44:dc:3f:24:
26:a8:99:cc:39:ca:05:e3:9d:ed:2c:3c:6c:fa:52:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B4:03:10:3F:B6:3F:84:F5:16:3F:A0:6A:09:EB:E5:4D:E7:1E:1C
X509v3 Authority Key Identifier:
keyid:D1:1B:24:C2:FB:65:94:20:32:06:4E:02:E5:82:4A:95:71:BC:21:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82541385988cb3666d0f41117745c9d3b4df8827.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/a9904fc65eac2e4e943a7118dd990d0b6c55f283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/37d0f0d5-91df-4ba6-bceb-0a8b586750f1/82541385988cb3666d0f41117745c9d3b4df8827.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.96.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:bc:b4:99:7d:61:02:7e:67:ea:01:6f:f3:29:f2:52:b8:df:
19:ee:5d:d7:ec:31:e7:8c:13:e3:56:11:d0:4e:39:45:10:1b:
98:8f:97:35:8b:f2:0c:6f:a9:59:06:05:0f:4d:27:bb:bd:fd:
65:1d:71:c7:55:ad:c9:04:ad:23:6d:fe:da:79:d6:30:8b:12:
48:94:b8:3c:31:03:57:7b:2f:48:b5:ae:dc:ed:7d:7e:d9:28:
c2:cb:4b:88:6d:53:cf:93:a5:98:ed:ed:ae:ec:91:c8:d1:2b:
67:86:40:b9:ab:77:37:98:e8:9f:22:36:c2:97:3a:5c:b3:76:
74:d5:d8:b8:64:31:51:54:11:b0:dc:7e:2a:13:ae:b4:86:0c:
6c:5f:8e:39:a3:b4:08:bc:b3:92:3d:0c:75:58:37:1d:68:32:
b7:2f:95:fd:58:17:82:1c:5a:7b:5d:90:a7:e2:f3:19:9f:43:
af:4b:f8:fa:aa:40:73:26:26:48:db:76:18:6d:6b:01:6f:65:
79:e8:7d:ef:7b:f7:3f:72:5f:57:57:01:8f:7d:4f:09:8c:30:
54:98:cf:24:fc:f8:b2:17:71:f3:ef:bf:e1:c5:1a:07:e5:69:
1a:00:dd:5e:fa:ed:58:3d:9c:6a:fe:18:09:b9:e1:a9:19:04:
e5:c3:ba:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-ams.rpki-client.org