Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5875300d-c2a8-4382-b684-5d06f8a677c8/5021a1e3b6c811d315dfa6beef40f91e1ed2bd8a.roa
File: 5021a1e3b6c811d315dfa6beef40f91e1ed2bd8a.roa (raw, json)
Hash identifier: xXkpjiZvibbAJ44C4flKUfFm3j1WfoBhaEvpkf2DLf8=
Subject key identifier: 45:A1:D8:A1:6C:41:DF:52:64:A9:01:B2:F7:58:58:13:FD:49:BF:22
Certificate issuer: /CN=c3105d52616b3e232ee7ab1c79aa784d2ac3b323
Certificate serial: 0D91FE
Authority key identifier: F3:99:B0:94:43:B0:80:09:0A:F0:21:39:81:1C:38:E2:31:77:59:90
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3105d52616b3e232ee7ab1c79aa784d2ac3b323.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5875300d-c2a8-4382-b684-5d06f8a677c8/5021a1e3b6c811d315dfa6beef40f91e1ed2bd8a.roa
Signing time: Wed 24 Mar 2021 14:41:18 +0000
ROA not before: Wed 24 Mar 2021 14:41:18 +0000
ROA not after: Tue 24 Mar 2026 14:41:18 +0000
asID: 61468
IP address blocks: 192.188.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889342 (0xd91fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3105d52616b3e232ee7ab1c79aa784d2ac3b323
Validity
Not Before: Mar 24 14:41:18 2021 GMT
Not After : Mar 24 14:41:18 2026 GMT
Subject: CN=5021a1e3b6c811d315dfa6beef40f91e1ed2bd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:c6:51:71:19:6b:af:21:ca:24:89:4d:b7:
4b:11:a8:a8:42:79:c7:51:72:76:31:ca:ce:32:4e:
fd:75:c2:a2:0c:c1:95:bf:c8:1d:0a:ab:d3:b1:7f:
94:5c:99:1c:3f:3c:21:c1:22:ff:4e:49:6e:05:cf:
6c:5c:15:5a:ff:c6:7d:e6:72:27:8f:54:bc:f0:bd:
8d:78:07:18:73:50:05:90:63:0b:47:a4:4f:0d:97:
19:da:d2:e0:6f:b7:16:ec:ee:28:29:a4:5a:7c:6e:
94:79:b7:1a:fa:6b:85:4a:9f:66:4e:30:43:55:c3:
b0:24:e1:82:a2:5d:a3:85:b2:16:d5:f1:f2:15:06:
73:e5:df:65:40:78:62:07:8c:74:15:9e:36:a0:0f:
6b:22:1b:c5:c7:1d:e6:23:fa:d4:8e:8d:0c:5e:49:
69:ac:88:a9:67:2c:77:f7:89:f7:e2:db:45:e8:6e:
1b:c0:7e:2a:20:da:47:05:39:3b:fe:c5:b1:63:36:
9a:f0:18:a1:75:12:5d:3f:f3:4a:96:29:00:eb:30:
93:10:17:f4:a8:a3:43:36:29:8a:b8:bd:17:cf:fd:
59:5a:b6:a2:35:8b:de:27:b8:29:59:72:65:3c:b5:
23:3a:d6:22:1e:ec:67:9b:50:6c:9e:3f:54:5f:3e:
38:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A1:D8:A1:6C:41:DF:52:64:A9:01:B2:F7:58:58:13:FD:49:BF:22
X509v3 Authority Key Identifier:
keyid:F3:99:B0:94:43:B0:80:09:0A:F0:21:39:81:1C:38:E2:31:77:59:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3105d52616b3e232ee7ab1c79aa784d2ac3b323.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5875300d-c2a8-4382-b684-5d06f8a677c8/5021a1e3b6c811d315dfa6beef40f91e1ed2bd8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5875300d-c2a8-4382-b684-5d06f8a677c8/c3105d52616b3e232ee7ab1c79aa784d2ac3b323.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.47.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f0:7c:66:71:c2:bb:93:0d:da:37:8c:a4:c1:5c:5e:11:55:
be:ee:ec:2d:c9:2c:7a:3d:5e:6e:c6:f8:ff:a0:39:4f:d2:60:
7e:66:1a:b7:17:73:e2:18:6a:95:89:6f:87:9a:78:ea:60:d0:
61:4e:6c:32:b4:5e:d0:9c:72:79:a3:e6:9f:ab:93:a8:07:9f:
81:6c:89:7d:aa:5d:bd:80:c7:c3:1a:7c:fa:fd:7f:a5:71:eb:
24:60:71:5b:f3:12:95:95:e0:e5:0d:91:41:75:dc:4d:3f:02:
b0:70:19:71:b6:23:32:20:6f:44:35:f9:44:e6:34:e3:3c:94:
01:21:a8:e3:eb:b7:11:85:de:6b:10:da:c8:a1:a3:29:32:ce:
98:66:b6:1e:94:78:3c:ab:a9:e1:39:8e:74:42:c7:39:5a:68:
39:2e:ed:d7:c7:fe:2a:50:37:06:a8:5d:4a:34:64:f4:f2:78:
d8:31:99:41:a5:ef:81:6b:f6:bc:26:78:49:d8:27:20:e2:8b:
e4:71:00:50:a9:51:1e:d4:d8:64:51:b4:2d:3b:4a:ea:ea:92:
f8:2f:e1:1b:d3:87:e2:51:4b:2a:11:25:6b:07:44:e7:bf:68:
a4:93:eb:f4:fb:19:7c:21:97:9c:1b:f4:fe:17:36:46:ce:01:
b3:30:99:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org