Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/ca602101a800bc7b68608de44ce4a391b58d24f2.roa
File: ca602101a800bc7b68608de44ce4a391b58d24f2.roa (raw, json)
Hash identifier: F9PTK7R7uaE6ncQAuLvZvIGuv3rjewWpmbXvZYxLhC4=
Subject key identifier: 13:82:A9:5B:30:E2:CB:53:58:61:BE:4C:ED:DC:70:3C:CB:16:3D:5D
Certificate issuer: /CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Certificate serial: 1687E8
Authority key identifier: F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/ca602101a800bc7b68608de44ce4a391b58d24f2.roa
Signing time: Wed 08 Nov 2023 03:00:28 +0000
ROA not before: Wed 08 Nov 2023 03:00:28 +0000
ROA not after: Sat 08 Nov 2025 03:00:28 +0000
asID: 271773
IP address blocks: 179.18.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1476584 (0x1687e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Validity
Not Before: Nov 8 03:00:28 2023 GMT
Not After : Nov 8 03:00:28 2025 GMT
Subject: CN=ca602101a800bc7b68608de44ce4a391b58d24f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:1e:74:10:83:0f:52:9a:88:ef:90:e5:a4:
3f:36:17:c8:7e:e6:f7:a2:a2:40:2d:5a:b4:45:fc:
42:e8:46:dc:54:3b:23:b6:5d:0b:62:9b:63:e7:74:
fb:75:44:3b:7f:90:ea:c3:2c:82:26:ce:fe:58:eb:
62:6c:c9:86:53:82:07:02:72:78:76:5f:74:71:ac:
62:a9:a5:b1:fa:2d:e2:8f:3b:c4:c7:08:48:a0:fc:
30:eb:b9:0b:41:2c:d8:49:bc:3a:4c:1e:13:3a:19:
ea:e4:e8:99:16:8b:e1:ce:82:c3:36:f9:64:74:d4:
9d:ad:05:78:5d:03:44:b6:43:2f:d0:2e:30:ae:3b:
6e:7e:47:ab:6e:32:2b:a6:5b:e6:5e:99:16:27:a0:
a4:97:09:74:a3:13:04:1f:fa:31:3a:f9:a9:4a:7e:
70:9c:e7:d5:c5:b0:79:30:1c:85:08:93:5d:10:70:
26:66:8c:9c:fa:47:d6:e4:b4:15:f1:ea:a2:68:2a:
cd:35:14:f9:37:7d:04:e4:16:bd:6e:fa:f5:f2:de:
f7:f4:8d:07:ed:38:f0:6d:e9:c5:b0:91:54:68:b5:
26:fc:7a:b1:9d:5c:ad:e0:85:f1:37:0b:e4:6b:8d:
65:88:68:33:93:38:b9:c0:e2:2b:20:fd:a0:fb:3f:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:82:A9:5B:30:E2:CB:53:58:61:BE:4C:ED:DC:70:3C:CB:16:3D:5D
X509v3 Authority Key Identifier:
keyid:F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/ca602101a800bc7b68608de44ce4a391b58d24f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.18.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c6:cc:d4:53:b5:98:a7:01:03:96:45:22:09:2d:f0:64:34:c0:
94:65:94:ab:d1:67:36:13:3f:fd:f1:ae:72:6e:14:60:08:34:
bf:c6:da:04:38:c1:bc:5b:43:14:ea:92:a9:32:63:3f:bc:d3:
35:e1:d3:11:c7:6a:bc:69:3a:33:90:2b:cc:5a:c0:da:cb:26:
42:04:60:82:1d:f5:36:b3:ba:e5:22:fa:34:fc:98:df:88:dc:
62:a3:30:78:06:d6:af:d9:66:41:ba:be:3e:05:45:9e:27:84:
22:7d:eb:8b:b2:ce:49:ca:0a:56:a4:1e:2a:43:46:31:52:6d:
46:40:3e:32:1c:56:f9:76:3f:98:d1:95:07:d2:07:9b:b9:42:
74:c0:76:2e:d2:fe:61:99:08:b2:71:9b:94:2a:5a:62:e4:e4:
89:c0:a8:ab:a6:a5:71:a8:c5:e8:9f:eb:f9:f2:c5:30:72:4c:
19:7f:21:d6:df:a4:4a:61:10:bc:17:5f:76:00:b6:2f:c2:35:
a7:09:32:0e:c1:80:cd:c9:87:6f:30:ff:55:6b:74:53:15:ba:
70:b6:1e:c3:9b:9e:5f:5d:bc:29:ac:d1:dc:94:ce:50:76:32:
6e:a0:65:90:7d:cb:62:b8:0f:57:27:45:e4:c8:85:be:33:b5:
d2:36:04:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org