Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e143902f1bd6a52c190307bcea64ec31cc0e2d54.roa
File: e143902f1bd6a52c190307bcea64ec31cc0e2d54.roa (raw, json)
Hash identifier: iy6iZ3/H0LEs7oCFC5l75+jwj5dKKfBBTm9nZ8eCPJ4=
Subject key identifier: 6E:4F:C1:6B:A9:3C:57:3B:0A:6F:E3:61:8A:9C:05:C1:B8:3C:76:5D
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 123481
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e143902f1bd6a52c190307bcea64ec31cc0e2d54.roa
Signing time: Wed 29 Nov 2023 15:39:48 +0000
ROA not before: Wed 29 Nov 2023 15:39:48 +0000
ROA not after: Sat 29 Nov 2025 15:39:48 +0000
asID: 272113
IP address blocks: 201.251.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193089 (0x123481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Nov 29 15:39:48 2023 GMT
Not After : Nov 29 15:39:48 2025 GMT
Subject: CN=e143902f1bd6a52c190307bcea64ec31cc0e2d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5c:17:fd:35:db:5d:dd:4c:2e:95:57:44:75:
2f:ae:85:2c:1b:35:5d:e3:14:3d:f3:d0:73:73:b3:
14:05:a1:8f:d4:25:39:d9:9f:64:17:d4:33:7f:8e:
19:a4:e2:95:a3:3f:7e:6f:da:82:26:00:fd:04:37:
61:f7:c7:26:07:e5:9f:4b:f0:14:1f:7a:cf:13:8d:
6f:03:f3:1a:20:06:30:e6:ad:f8:87:03:aa:ed:a2:
43:66:e6:d4:6a:6c:82:11:3e:d2:d8:c7:bd:c2:0a:
93:84:f9:e0:01:72:9c:26:db:67:0f:b4:ab:07:3e:
31:43:d2:76:f6:90:d8:17:c7:28:60:33:e1:42:28:
f8:a9:ae:f2:40:13:98:f4:be:67:df:9d:9e:6a:f3:
6a:5a:7a:b6:24:a0:e5:e6:7e:d2:a1:32:48:3f:f1:
8c:d3:3e:99:e2:b6:0c:f1:8c:1b:04:fc:f6:f8:71:
2c:60:02:cb:81:e3:c4:28:c9:f1:28:66:6a:1c:8c:
ff:6d:0f:d4:e5:d2:b3:0e:f6:15:3b:28:24:35:cd:
cc:b9:18:cc:9f:f8:58:6b:a7:26:d6:d1:ad:a5:25:
a7:4e:3f:0f:7f:f5:6c:f3:c4:9a:a8:9b:63:39:aa:
c1:ca:a4:0a:98:ad:59:23:2d:00:01:e2:e0:74:da:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4F:C1:6B:A9:3C:57:3B:0A:6F:E3:61:8A:9C:05:C1:B8:3C:76:5D
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/e143902f1bd6a52c190307bcea64ec31cc0e2d54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.251.242.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:57:3e:a1:fc:46:e3:6b:c6:a8:ba:3b:0d:ae:db:04:50:e5:
5f:a7:92:61:96:d4:c8:ad:d0:2d:7b:c2:35:8b:45:ce:46:e3:
de:82:12:7b:60:49:5d:16:82:19:87:24:1c:fb:9f:17:50:60:
ed:c5:28:b7:1d:04:bd:fd:65:26:ee:86:eb:8b:a3:54:92:dc:
a1:2c:9b:8b:90:7c:56:b8:1c:de:b7:84:94:42:b4:7c:b8:69:
b6:7d:58:11:c6:a9:38:10:26:c7:ac:79:21:36:0b:6d:92:4f:
ce:ed:29:97:94:fc:85:b6:ca:4a:1e:49:0b:19:88:11:53:71:
04:5c:ae:24:9d:f1:89:7d:f4:3e:0c:e3:59:a7:3d:96:0b:3c:
f0:05:c6:40:d5:54:f0:7e:62:11:50:6a:49:ed:e2:9d:35:ad:
2c:1b:aa:2f:87:ff:2e:4c:45:88:eb:9a:74:b5:bf:f5:0d:ac:
89:66:bf:c7:7f:a7:54:5b:03:96:e4:ee:c8:b0:f2:a9:4f:5a:
f8:4c:c2:03:50:f5:36:67:00:cc:ac:0a:86:9c:76:31:80:18:
46:74:52:8b:37:8d:79:5e:4b:c8:3e:77:ce:de:53:b7:70:c9:
47:b8:37:21:e2:e6:7c:1a:cb:2e:86:b1:00:7a:80:17:4b:97:
f4:11:96:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org