Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/419dee66ed8d98c8b27ffabc4844d45e0dda184d.roa
File: 419dee66ed8d98c8b27ffabc4844d45e0dda184d.roa (raw, json)
Hash identifier: 0QpZrVKYq7XIz0DyTh0N8DXTDZFqbZgHl58lfp2DMfY=
Subject key identifier: 5B:6C:DC:66:DE:52:8D:11:8D:73:A3:AA:25:13:94:A5:87:0C:26:1B
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 123BB2
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/419dee66ed8d98c8b27ffabc4844d45e0dda184d.roa
Signing time: Wed 29 Nov 2023 15:40:44 +0000
ROA not before: Wed 29 Nov 2023 15:40:44 +0000
ROA not after: Sat 29 Nov 2025 15:40:44 +0000
asID: 263786
IP address blocks: 201.251.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1194930 (0x123bb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 29 15:40:44 2023 GMT
Not After : Nov 29 15:40:44 2025 GMT
Subject: CN=419dee66ed8d98c8b27ffabc4844d45e0dda184d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a2:53:8d:cb:1b:3a:d4:9f:a9:05:61:5d:ad:
f3:bf:be:81:76:d9:3e:9c:f2:94:9e:3d:a4:79:b0:
6f:36:18:06:c3:12:c0:3d:36:83:f0:98:e6:fc:7b:
1c:d1:d4:f6:53:6f:d9:ac:7a:07:02:0d:66:8f:38:
e0:a6:7b:00:74:c5:cd:f3:50:3b:78:0f:53:ad:fb:
ec:18:ca:f2:73:a4:54:04:2d:3e:b6:02:f6:8c:73:
47:36:a4:87:c9:48:7f:17:12:9d:6c:ac:15:34:dd:
d1:5a:de:b4:6f:3e:3d:91:06:ec:cf:1d:3d:bd:4d:
bf:b0:1b:17:a3:ca:b6:d8:91:b2:f9:14:fe:50:95:
e4:5f:9a:50:c2:f8:ab:c9:ee:83:14:99:cc:8b:62:
54:cf:ed:cf:6d:8b:e1:16:64:a9:93:29:e0:99:d5:
a9:69:20:75:9d:81:aa:a8:62:e2:18:16:6a:4c:7e:
63:15:a9:07:46:85:28:1f:5b:61:7f:0d:c3:66:06:
90:39:7a:84:62:54:dc:3e:32:fc:2a:98:9b:4a:e7:
e9:16:96:ef:72:66:c6:5f:28:be:00:4d:cf:88:73:
24:cd:28:4a:02:aa:dc:39:6d:5e:20:dc:60:ff:f9:
b5:5e:5a:bf:3d:33:a9:8a:e2:de:c3:4e:86:bb:fa:
61:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6C:DC:66:DE:52:8D:11:8D:73:A3:AA:25:13:94:A5:87:0C:26:1B
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/419dee66ed8d98c8b27ffabc4844d45e0dda184d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.251.248.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d1:d9:57:84:9b:8d:a4:2e:49:cb:19:93:5f:52:a2:33:80:
87:97:24:a1:bd:8e:e0:74:88:11:f3:d5:d2:da:df:e9:f2:2f:
18:63:2a:a6:ef:3e:6b:90:94:c6:8d:4c:ba:b7:31:4e:8a:91:
e8:f7:38:13:3f:22:8a:85:ee:61:a0:d5:0a:6e:d4:f4:94:23:
c5:cf:cf:da:82:57:a8:41:11:e4:70:87:ea:9a:11:0e:e7:52:
95:91:7a:a8:3f:dc:7b:e7:b4:5e:42:51:63:6e:85:03:1f:15:
69:4c:44:38:67:a0:3e:2a:c1:52:0d:a6:5a:23:fd:0c:e8:be:
75:b2:0b:94:ad:15:f2:2a:b9:19:14:25:ff:6b:0b:8d:d4:af:
98:da:24:93:e8:66:cd:33:eb:8f:13:63:09:07:60:d1:7a:b3:
c6:c3:58:eb:3b:70:61:75:4a:ce:49:49:13:08:53:2b:d5:f6:
b6:df:1b:ca:d1:a9:ce:df:2d:3f:38:6e:03:e6:d8:7b:f5:f1:
64:c3:69:d4:3d:6e:44:ac:8a:47:46:75:7d:3f:25:b0:14:59:
d6:43:e9:3d:e6:d8:94:e3:11:a8:fd:98:30:0b:4d:ea:2b:c8:
95:db:eb:39:a8:d5:98:74:a9:47:84:19:63:c0:9c:e9:b0:ef:
2e:5e:af:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org