Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/17ada2a1a9be6f0c85aa93cc6ff007d1cda9dbd0.roa
File: 17ada2a1a9be6f0c85aa93cc6ff007d1cda9dbd0.roa (raw, json)
Hash identifier: 6fHs3lbLNSiC8E9jeDD3VM5jq6Ho3fOG2QOreUB78aM=
Subject key identifier: 4F:79:E7:74:EF:55:F7:B3:B0:6D:C7:BF:E1:37:EA:BF:DA:16:D8:EC
Certificate issuer: /CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
Certificate serial: 31FB
Authority key identifier: F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/17ada2a1a9be6f0c85aa93cc6ff007d1cda9dbd0.roa
Signing time: Wed 09 Aug 2023 15:27:47 +0000
ROA not before: Tue 08 Aug 2023 15:27:47 +0000
ROA not after: Sat 09 Aug 2025 15:27:47 +0000
asID: 52412
IP address blocks: 181.224.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12795 (0x31fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
Validity
Not Before: Aug 8 15:27:47 2023 GMT
Not After : Aug 9 15:27:47 2025 GMT
Subject: CN=17ada2a1a9be6f0c85aa93cc6ff007d1cda9dbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7a:9e:2d:5a:8f:e0:3e:b9:52:09:8c:3c:5f:
46:79:08:c0:d7:26:26:fa:d6:dc:84:32:67:34:03:
0b:73:c3:db:ff:9d:09:92:8a:e3:18:be:6e:b0:7c:
2a:6a:f0:64:2d:bc:09:9a:91:2a:f6:5d:3d:b3:15:
64:a6:c7:03:81:0c:a8:2a:af:9f:f3:e4:4a:4f:8b:
24:97:57:b7:37:6d:df:77:3c:b1:63:6c:a6:17:6a:
8f:60:d6:46:6a:a0:e3:e2:91:16:41:bd:97:7c:42:
e9:8f:f3:20:df:46:7a:14:c9:b5:bf:b4:9d:cd:9c:
f9:3d:79:0c:0f:0b:19:60:4e:f5:ce:15:ef:ef:b3:
2a:1f:2d:e9:7f:11:bf:1b:c6:47:4a:ee:d4:56:a0:
fc:91:b9:fd:14:34:ba:9a:76:bd:e9:df:06:1d:42:
4d:f4:33:c5:ff:6a:a9:71:f2:b1:dd:47:c3:8e:1f:
32:dd:9b:e1:f0:59:5d:dc:54:7a:cd:68:af:5c:87:
16:44:0f:93:e9:8f:43:2d:cb:8f:86:5f:97:42:9b:
cd:85:f8:c0:fe:d9:c6:de:b9:01:dd:2e:0a:b1:d6:
8e:5b:00:6d:23:b2:e2:87:40:52:1c:0c:2c:48:40:
3d:ae:cb:41:8c:95:79:92:ed:e9:35:7f:d8:24:01:
df:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:79:E7:74:EF:55:F7:B3:B0:6D:C7:BF:E1:37:EA:BF:DA:16:D8:EC
X509v3 Authority Key Identifier:
keyid:F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/17ada2a1a9be6f0c85aa93cc6ff007d1cda9dbd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.204.0/22
Signature Algorithm: sha256WithRSAEncryption
01:e5:94:94:2b:cb:0e:71:91:4b:39:74:63:ea:98:60:33:52:
6a:b2:d8:7f:91:5d:2d:3a:ec:65:fc:6d:fc:68:3f:43:c2:76:
e5:20:77:79:c5:4c:c4:fe:72:5c:7e:ec:99:c3:3e:f1:3c:67:
89:70:e6:59:57:2f:39:bf:d9:e1:c2:7a:f4:0e:12:6c:84:89:
30:6d:09:4a:c8:65:52:c3:a6:30:8b:43:39:5d:66:26:13:3f:
4d:32:80:bf:e2:f0:09:23:aa:a3:d9:39:9f:d6:4a:aa:53:c7:
c4:3c:0c:03:03:dc:08:42:ad:3b:e6:6f:a0:ce:38:a8:86:e0:
86:86:bf:57:72:d5:bd:85:0c:ea:9e:b8:99:5e:9f:05:44:e9:
22:86:92:3b:29:77:82:48:38:b9:8a:4b:24:4a:66:64:89:6f:
7b:df:79:bf:9a:f7:b7:90:c9:9b:8a:43:06:6a:3f:66:c3:ec:
4c:31:13:0a:b0:e5:15:25:f9:7a:cb:44:da:53:b2:f4:0e:60:
0a:07:83:6d:fb:9b:83:8b:b4:c1:cb:6c:73:9e:bf:ec:8c:03:
9d:0e:c7:df:43:32:1c:cf:56:5b:bb:76:ff:4b:b6:d0:98:29:
fe:d0:9a:f8:44:95:3f:52:40:28:24:66:71:d7:03:fb:c4:53:
dd:a5:5b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:42 2024 by rpki-client on console-fra.rpki-client.org