Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/01de77fdae304c1e3232dccd0635ca2cc22d219d.roa
File: 01de77fdae304c1e3232dccd0635ca2cc22d219d.roa (raw, json)
Hash identifier: HhOmRmwxuBalqJdkmZ5rnkQnah/UnKVHeiDr33XgIEY=
Subject key identifier: 13:B5:2A:8D:87:00:00:3E:F8:AD:16:63:9E:1A:64:33:6F:AC:C1:AE
Certificate issuer: /CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
Certificate serial: 0724
Authority key identifier: 1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/01de77fdae304c1e3232dccd0635ca2cc22d219d.roa
Signing time: Tue 05 Dec 2023 15:25:27 +0000
ROA not before: Tue 05 Dec 2023 15:25:27 +0000
ROA not after: Fri 05 Dec 2025 15:25:27 +0000
asID: 8075
IP address blocks: 161.131.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1828 (0x724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a52488a17bd4e27c842765d04aa1a4a5371aba0
Validity
Not Before: Dec 5 15:25:27 2023 GMT
Not After : Dec 5 15:25:27 2025 GMT
Subject: CN=01de77fdae304c1e3232dccd0635ca2cc22d219d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:8f:0d:99:e7:b6:7a:be:ce:9e:c1:ee:f9:
58:8a:24:85:66:52:f1:b6:6d:7c:d0:61:d0:c4:19:
61:e4:0b:10:6a:db:13:6a:fc:66:cc:6f:f0:c1:47:
90:cf:73:98:03:c1:d3:e7:68:01:ac:3d:5a:e3:a0:
ee:d7:03:79:c4:92:78:ea:66:b0:5b:ba:9a:ad:57:
bb:68:7b:2e:d3:bb:04:2b:df:14:76:02:63:3e:17:
54:c0:f1:27:fd:45:4b:be:1e:13:58:a5:00:9d:7f:
b6:f7:60:c5:92:5d:0a:5d:9f:ec:d4:8d:30:40:c3:
60:3d:46:fc:c9:c2:ad:45:69:a2:09:43:30:60:4a:
37:e3:e4:8d:88:5d:72:4e:b4:c9:d4:db:8a:14:49:
38:c1:91:57:01:e2:6a:10:8e:05:ce:03:53:ed:74:
74:34:6a:94:e3:53:cb:66:f9:64:20:60:b4:69:35:
71:c3:e3:b9:73:c7:49:02:b5:9d:91:34:24:86:47:
2e:e8:19:6c:f1:c2:d0:df:5f:b8:60:a3:0f:8f:41:
cf:a6:be:b7:7f:03:72:a4:93:b4:df:f3:2e:27:df:
6e:ae:e4:b5:f9:c4:21:db:b3:8c:12:d6:c1:a4:54:
18:e5:88:c8:48:60:94:19:31:0c:ca:66:c4:39:66:
7b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B5:2A:8D:87:00:00:3E:F8:AD:16:63:9E:1A:64:33:6F:AC:C1:AE
X509v3 Authority Key Identifier:
keyid:1A:6F:34:C9:A7:15:D7:E6:59:83:E5:DB:20:B5:78:B2:9F:FC:79:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a52488a17bd4e27c842765d04aa1a4a5371aba0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/01de77fdae304c1e3232dccd0635ca2cc22d219d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/40e530bf-ebf7-45e2-be0f-52081f5f168c/8a52488a17bd4e27c842765d04aa1a4a5371aba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.131.217.0/24
Signature Algorithm: sha256WithRSAEncryption
67:bd:bc:3d:78:c8:a4:ae:0b:8d:a4:0d:9d:d8:5c:9e:18:e3:
69:80:4e:ac:ad:da:af:16:88:2d:3f:a7:5f:a8:b9:e6:33:d5:
4d:77:5d:a4:5f:96:62:ef:73:fc:13:5a:e5:8e:7b:7b:f4:20:
b8:66:e8:90:53:d8:93:e5:54:8e:27:a5:e0:bc:0a:cc:72:76:
8a:79:8f:67:85:ba:38:26:64:f6:3b:6e:50:6c:e4:d1:5e:28:
51:b1:3e:d0:ea:7d:2d:f7:ec:fe:b2:bf:69:25:54:8b:41:e8:
0b:a2:dc:ce:53:9f:f7:e9:46:37:eb:03:a3:dc:3c:46:b8:ec:
8b:2f:22:bd:72:49:e3:ae:33:ad:07:22:fa:40:33:3a:d6:1d:
cd:84:c7:f7:99:84:0f:7b:ac:c9:86:fe:0c:c0:ce:8a:21:5b:
7c:85:61:a8:95:67:c2:9a:15:d5:4d:80:77:c0:f9:19:76:e5:
aa:f3:92:f1:3f:14:b4:dc:07:fa:fc:20:db:ab:70:91:85:36:
a8:d5:35:a2:3a:ad:e2:0a:bf:cd:1b:46:2b:db:61:7f:19:7e:
6f:fa:51:0b:ef:35:9c:c7:33:44:42:28:72:7a:3b:ee:c4:c9:
85:c8:0f:79:e7:68:94:37:24:7d:f2:8e:3b:66:ba:5b:43:77:
89:87:b7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org