Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/fa836da152ee6a8616f7660a0cc76a6a3366ab36.roa
File: fa836da152ee6a8616f7660a0cc76a6a3366ab36.roa (raw, json)
Hash identifier: feVhZfEyEXpMY/hbLgCJjLPBXviZPhomZbxYnAvz9Fo=
Subject key identifier: BE:59:38:69:B2:01:72:BE:49:72:22:CE:09:24:42:30:81:08:87:BF
Certificate issuer: /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial: 102FA9
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/fa836da152ee6a8616f7660a0cc76a6a3366ab36.roa
Signing time: Wed 21 Jun 2023 18:58:37 +0000
ROA not before: Tue 20 Jun 2023 18:58:37 +0000
ROA not after: Sat 21 Jun 2025 18:58:37 +0000
asID: 3790
IP address blocks: 2801:151::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1060777 (0x102fa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Validity
Not Before: Jun 20 18:58:37 2023 GMT
Not After : Jun 21 18:58:37 2025 GMT
Subject: CN=fa836da152ee6a8616f7660a0cc76a6a3366ab36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:43:cb:4c:1f:14:3b:d4:6b:fb:57:38:ed:
9f:d0:99:28:43:50:19:e3:f5:ce:bb:43:4b:55:11:
04:ed:a3:6f:23:af:58:03:5f:f8:80:7e:10:01:e3:
aa:9a:a4:83:b7:a1:d3:6e:03:6d:20:fd:91:e5:64:
1d:2e:1e:0b:27:9b:dd:40:31:13:72:d2:98:f8:bd:
1e:a3:97:ce:f7:0c:25:72:70:3d:88:15:b2:5e:8d:
71:6a:c5:a9:78:56:a9:d2:86:bb:91:0c:3f:5b:78:
75:a8:44:c9:23:d5:ed:a6:20:86:dd:e0:5b:05:44:
6b:f4:42:5e:73:06:3b:ed:15:5f:7b:a5:44:31:09:
9a:f9:4f:c4:dc:a2:96:02:c6:a6:d2:4a:de:ec:d4:
7b:a5:62:4a:f4:e5:d3:dc:be:d9:4f:88:a1:29:fa:
5b:96:d6:a5:26:d5:83:cd:ea:08:ac:7f:1d:6a:82:
4d:a5:f8:a9:92:36:7e:9f:e1:5b:26:30:aa:cd:22:
60:71:5c:ee:cd:ab:af:2d:0c:86:82:7b:c9:ab:53:
49:54:ea:bd:b4:79:29:e6:4d:aa:82:02:db:61:7d:
97:be:bd:09:20:b6:d7:e5:70:4c:7e:d1:21:c9:20:
db:94:a9:42:71:65:ad:c4:7f:fa:0b:ad:de:50:2b:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:59:38:69:B2:01:72:BE:49:72:22:CE:09:24:42:30:81:08:87:BF
X509v3 Authority Key Identifier:
keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/fa836da152ee6a8616f7660a0cc76a6a3366ab36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:151::/48
Signature Algorithm: sha256WithRSAEncryption
25:ec:6a:6e:e7:b2:75:c4:bd:77:24:e0:a6:3d:21:41:e2:63:
c2:4f:77:d5:c5:06:09:a9:85:04:ae:29:fa:1e:3e:16:35:6c:
88:8c:39:b6:12:ca:9b:08:4d:83:a7:e5:cf:ac:93:7f:22:3b:
a2:4d:2e:46:d4:08:cb:45:dc:0a:cf:51:94:08:4d:5a:32:9d:
f4:be:6a:e9:1b:c4:8e:ef:8d:6f:12:50:25:fe:df:92:e4:a5:
a4:29:5a:a8:81:75:89:28:e3:29:1b:10:4c:35:b3:0d:13:43:
7d:71:8f:c5:bf:90:ec:ce:70:6d:9a:47:90:d8:e7:23:b4:b9:
81:6e:a4:3f:99:8d:33:65:ad:eb:d4:d5:4f:a2:d5:77:e2:a9:
32:95:02:5c:d7:0e:52:05:f3:02:b1:31:66:a9:02:b6:06:8e:
a2:93:f5:11:d3:60:00:3c:78:75:f2:c5:23:4a:9f:c2:81:3d:
6f:01:88:3f:cb:19:6f:f2:bc:16:64:a9:5c:71:8d:24:fc:e5:
3c:b6:62:e7:d4:17:ba:25:3e:55:0d:af:eb:b0:b1:cc:06:7b:
8d:8a:9e:be:eb:ff:0d:e2:11:5b:9c:d1:4c:64:b9:00:e9:77:
f3:18:fc:39:e6:74:28:83:18:7a:43:a6:c6:33:35:8b:b3:e9:
50:31:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org