Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/683d913fff41a111bb7bc3baabb2672342adbed7.roa
File: 683d913fff41a111bb7bc3baabb2672342adbed7.roa (raw, json)
Hash identifier: 9+NLre2tQny6Zx50FSbyoC5L25pNEiBlAZ/su65A5lY=
Subject key identifier: EB:74:7F:F2:EA:3C:61:F4:28:C3:0F:9A:6E:AC:4C:C4:DE:18:AB:D1
Certificate issuer: /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial: 1004A6
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/683d913fff41a111bb7bc3baabb2672342adbed7.roa
Signing time: Thu 15 Jun 2023 17:03:37 +0000
ROA not before: Wed 14 Jun 2023 17:03:37 +0000
ROA not after: Sun 15 Jun 2025 17:03:37 +0000
asID: 271891
IP address blocks: 2801:151:fa::/48 maxlen: 48
2801:151:3f::/48 maxlen: 48
2801:151:48::/48 maxlen: 48
2801:151:4e::/48 maxlen: 48
2801:151:54::/48 maxlen: 48
2801:151:5d::/48 maxlen: 48
2801:151:63::/48 maxlen: 48
2801:151:69::/48 maxlen: 48
2801:151:6c::/48 maxlen: 48
2801:151:35::/48 maxlen: 48
2801:151:101::/48 maxlen: 48
2801:151:104::/48 maxlen: 48
2801:151:106::/48 maxlen: 48
2801:151:108::/48 maxlen: 48
2801:151:36::/48 maxlen: 48
2801:151:38::/48 maxlen: 48
2801:151:f7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1049766 (0x1004a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Validity
Not Before: Jun 14 17:03:37 2023 GMT
Not After : Jun 15 17:03:37 2025 GMT
Subject: CN=683d913fff41a111bb7bc3baabb2672342adbed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cd:f9:5b:95:1b:10:ea:a3:a3:35:83:38:70:
97:af:4f:8b:f9:7b:44:e3:c9:82:dc:92:d9:0e:09:
92:13:03:e9:16:94:58:7c:e6:75:99:df:b9:60:6c:
13:31:01:5c:e6:35:8a:46:ee:c7:1b:a7:5a:74:da:
96:89:36:8d:3e:61:e4:0e:38:2f:51:dc:1d:14:b0:
aa:5f:87:47:93:ed:25:c7:f5:72:da:9c:8a:e4:bc:
1d:bb:e1:d3:f3:fa:dc:98:1e:02:c2:7b:dc:a4:63:
20:0b:36:bd:7f:bd:6b:9d:38:93:92:ed:90:e3:16:
3e:c3:31:d9:45:7f:cc:4d:0d:99:e0:96:7d:06:6d:
76:d9:5a:5d:92:9d:85:55:01:5d:7b:84:0c:e1:ce:
59:d9:57:43:18:4a:dd:38:3d:fa:76:5c:46:aa:8f:
80:8e:36:ac:24:6b:da:df:bd:ff:08:b3:27:84:03:
c3:3e:61:02:17:2e:18:2f:4e:b1:e4:2a:5a:dc:8c:
55:25:a3:d3:ac:9d:8b:91:31:07:ed:73:4f:90:35:
e1:86:d2:53:c6:28:cf:ca:be:72:2d:c3:30:3e:2a:
a5:e8:d5:5a:c5:ba:c0:8e:42:a5:4d:b9:ae:f0:09:
22:d9:9c:be:6a:20:8d:30:05:3b:88:b6:f7:71:bf:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:74:7F:F2:EA:3C:61:F4:28:C3:0F:9A:6E:AC:4C:C4:DE:18:AB:D1
X509v3 Authority Key Identifier:
keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/683d913fff41a111bb7bc3baabb2672342adbed7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:151:35::-2801:151:36:ffff:ffff:ffff:ffff:ffff
2801:151:38::/48
2801:151:3f::/48
2801:151:48::/48
2801:151:4e::/48
2801:151:54::/48
2801:151:5d::/48
2801:151:63::/48
2801:151:69::/48
2801:151:6c::/48
2801:151:f7::/48
2801:151:fa::/48
2801:151:101::/48
2801:151:104::/48
2801:151:106::/48
2801:151:108::/48
Signature Algorithm: sha256WithRSAEncryption
07:ec:19:dd:8a:d4:66:da:04:6a:23:7e:d7:76:56:67:07:28:
ad:df:7f:23:23:39:8c:b7:a1:0f:21:c7:81:5a:f3:2a:14:6f:
9b:88:2b:45:90:79:f7:20:c8:7c:25:df:97:3f:49:ec:04:a4:
fa:60:d7:2c:de:c8:aa:32:99:a2:d2:c4:0d:74:f7:f1:98:96:
34:bc:86:ac:af:ec:04:e0:42:f4:53:82:25:92:56:27:82:9c:
1b:89:5b:af:6f:76:35:ef:5d:66:06:aa:9d:ec:cd:0a:e8:bb:
cb:82:d2:1e:53:b1:59:59:31:6b:40:71:4c:20:ea:27:e7:8f:
a2:8f:0b:5e:9d:f7:16:97:87:63:bd:c8:f3:8e:a7:d9:ea:6b:
ea:33:03:8d:0d:ad:79:a6:af:15:40:a7:6c:33:10:34:44:de:
7e:a8:c8:c7:de:85:2f:da:90:1d:e0:fd:f1:49:79:0b:49:83:
bf:35:20:d3:32:00:f8:88:a9:f6:c9:a4:09:b4:c1:2c:45:12:
83:50:bc:ff:b6:35:0a:28:14:4f:84:1d:37:f0:81:39:97:b6:
c1:80:cd:e5:1d:1e:ee:31:1b:0a:09:60:91:ac:30:4e:12:84:
f9:bb:9c:fd:aa:c8:6a:85:28:e6:dc:0b:4e:92:28:fa:df:aa:
83:fb:b3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org