Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e76395a3e72260f2122314a187d5fd788d95cecd.roa
File: e76395a3e72260f2122314a187d5fd788d95cecd.roa (raw, json)
Hash identifier: KukiMdSRIgoLmr5LTETSo2TpOquiBnI134YMTGYTVxY=
Subject key identifier: 36:EE:19:21:2C:D2:54:03:FE:7F:B1:A8:BC:16:33:7B:CC:87:41:F9
Certificate issuer: /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial: 0E443F
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e76395a3e72260f2122314a187d5fd788d95cecd.roa
Signing time: Wed 19 Apr 2023 17:57:33 +0000
ROA not before: Tue 18 Apr 2023 17:57:33 +0000
ROA not after: Sat 19 Apr 2025 17:57:33 +0000
asID: 271891
IP address blocks: 2801:151:3c::/48 maxlen: 48
2801:151:52::/48 maxlen: 48
2801:151:a2::/48 maxlen: 48
2801:151:58::/48 maxlen: 48
2801:151:c4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934975 (0xe443f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Validity
Not Before: Apr 18 17:57:33 2023 GMT
Not After : Apr 19 17:57:33 2025 GMT
Subject: CN=e76395a3e72260f2122314a187d5fd788d95cecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:a8:df:2c:a8:c1:43:0c:1a:d8:e9:2a:aa:
40:b2:63:cf:e7:69:4f:69:d5:f1:38:ef:19:75:38:
6a:f2:0e:81:1b:de:95:04:d6:17:1c:63:cd:95:ea:
3b:57:ef:6c:ef:b4:fc:26:0e:31:27:ae:c2:19:3a:
09:4a:01:39:e2:99:d8:97:fb:58:54:a1:bc:f4:fc:
76:36:2d:10:20:c4:16:2a:2a:88:74:c2:11:e1:8e:
10:95:36:8b:e1:19:c1:f2:ab:83:69:ce:a8:4c:6b:
78:28:2f:b7:8c:33:ae:ae:2d:8c:7b:c3:1a:42:b3:
01:5f:09:37:99:97:b9:37:2c:a2:b1:4e:6e:31:3d:
c2:9e:a4:d8:83:95:71:d4:ad:8f:b7:dd:64:35:32:
13:ed:ab:76:16:e1:07:64:0a:dc:d7:35:58:e8:e9:
06:ad:53:fa:1e:07:2a:82:dd:a7:7e:0b:b0:ae:8a:
38:45:f9:a2:3a:c5:a8:f9:7a:50:dd:fd:aa:52:70:
33:10:7c:74:e4:de:d2:c0:a8:19:17:4c:e5:a4:20:
cd:58:31:3b:43:cf:b1:98:c9:b5:59:eb:6e:0c:75:
ca:f2:87:f5:6f:fd:b2:ef:5a:49:43:eb:f8:b3:02:
74:e0:d2:72:9d:a0:bc:87:a2:a6:4e:f4:8a:6d:6c:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EE:19:21:2C:D2:54:03:FE:7F:B1:A8:BC:16:33:7B:CC:87:41:F9
X509v3 Authority Key Identifier:
keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e76395a3e72260f2122314a187d5fd788d95cecd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:151:3c::/48
2801:151:52::/48
2801:151:58::/48
2801:151:a2::/48
2801:151:c4::/48
Signature Algorithm: sha256WithRSAEncryption
49:92:85:a8:08:0b:d1:27:94:19:f0:9e:e8:3e:bd:cb:c7:70:
5c:a7:05:22:1a:02:30:d7:38:92:eb:ad:49:53:f9:74:b6:75:
ae:23:e9:82:60:ca:67:53:a1:4a:15:22:1b:46:eb:5e:53:6a:
14:77:e9:20:65:38:6c:ca:9c:30:6d:17:c9:1b:26:12:47:29:
46:1a:d0:cd:6c:59:6e:00:56:bf:4c:2a:9f:2c:57:9c:5e:22:
ce:e5:97:b8:fe:f7:f6:f1:b1:e5:98:4a:a3:52:75:e9:69:73:
0b:5a:b6:01:7e:47:f1:b5:f2:02:99:6e:4d:78:d0:75:90:3c:
23:1f:f1:c9:44:8f:91:d4:42:8a:52:e3:08:7b:97:2f:80:55:
aa:76:75:95:f5:d7:63:2a:51:dd:6b:7c:8a:d0:66:33:99:c7:
eb:b9:71:c2:c8:c0:59:a0:8b:38:00:0c:b8:70:2a:ac:11:37:
a4:c2:02:33:e2:61:21:62:99:d8:c6:bd:ef:67:29:13:ed:7e:
51:b0:c0:65:b6:64:7e:71:b0:0f:82:f1:4c:d2:c9:57:6d:83:
f2:2c:1f:ed:44:b9:c6:7c:11:8a:c7:3c:1f:b1:c2:31:ad:a4:
13:86:d8:8d:6a:31:3c:a8:98:6e:86:5e:ec:93:f9:ea:f4:1e:
b1:63:b0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org