Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/918a39e7856d0d179a516f3eb887c7000da6b609.roa
File: 918a39e7856d0d179a516f3eb887c7000da6b609.roa (raw, json)
Hash identifier: WOygdoCqEBsVw40owp04wn6R+jPHxhXr+kM4ODXdInI=
Subject key identifier: 7E:B0:36:7A:A5:F9:79:C0:A9:2C:DE:DD:30:C7:57:D1:91:F7:C2:AF
Certificate issuer: /CN=a3e78c1484e71c4beb14c4af115739b15109a6f9
Certificate serial: 1C1B95
Authority key identifier: ED:CB:4F:3B:87:0F:78:FA:D5:A9:7B:9E:12:F4:06:91:B9:5C:CE:04
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e78c1484e71c4beb14c4af115739b15109a6f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/918a39e7856d0d179a516f3eb887c7000da6b609.roa
Signing time: Tue 05 Dec 2023 19:49:45 +0000
ROA not before: Tue 05 Dec 2023 19:49:45 +0000
ROA not after: Fri 05 Dec 2025 19:49:45 +0000
asID: 262589
IP address blocks: 201.222.40.0/24 maxlen: 24
2803:1010::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1842069 (0x1c1b95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e78c1484e71c4beb14c4af115739b15109a6f9
Validity
Not Before: Dec 5 19:49:45 2023 GMT
Not After : Dec 5 19:49:45 2025 GMT
Subject: CN=918a39e7856d0d179a516f3eb887c7000da6b609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:c5:84:d3:cc:a9:23:d6:3a:2a:e3:67:9b:
c0:ef:de:25:0d:e6:e7:c1:61:65:62:42:aa:de:2e:
c5:92:97:e3:fc:a8:b5:4c:9a:bb:d4:63:1b:01:f7:
2b:7b:a2:6c:87:14:90:59:17:a1:83:e3:64:e6:35:
1f:9d:f2:ee:d2:50:ed:7f:44:a5:92:b1:5e:31:ce:
99:99:f1:9c:73:70:00:70:98:0a:4a:80:8f:d2:71:
47:f9:17:82:c6:f3:ba:24:0d:51:f1:92:a4:af:9a:
bc:8a:d2:b1:df:c0:8f:83:9d:6e:d4:0b:f0:81:5d:
86:08:25:6d:d0:04:09:29:7a:95:e7:d8:16:a2:19:
df:cb:8b:5b:db:3f:ee:53:f5:89:24:de:36:f9:e0:
db:ba:42:9c:17:27:37:2c:51:a0:d7:a3:0a:30:ca:
6d:ff:9a:5e:8a:9e:38:3e:52:03:1c:0f:e7:41:92:
1a:08:d1:4c:7d:a8:5d:15:1c:1b:fd:43:ff:1c:d9:
e8:34:71:e7:b4:4c:19:79:cb:f0:15:ee:56:ea:44:
9e:eb:36:21:bb:b8:38:f5:37:c4:d5:31:56:44:20:
5b:74:1a:92:b6:1c:5e:2d:f3:73:9e:ed:59:71:84:
da:84:40:a7:ee:18:af:4d:8a:55:88:a4:4d:e9:e0:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B0:36:7A:A5:F9:79:C0:A9:2C:DE:DD:30:C7:57:D1:91:F7:C2:AF
X509v3 Authority Key Identifier:
keyid:ED:CB:4F:3B:87:0F:78:FA:D5:A9:7B:9E:12:F4:06:91:B9:5C:CE:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e78c1484e71c4beb14c4af115739b15109a6f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/918a39e7856d0d179a516f3eb887c7000da6b609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/a3e78c1484e71c4beb14c4af115739b15109a6f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.222.40.0/24
IPv6:
2803:1010::/32
Signature Algorithm: sha256WithRSAEncryption
3c:1b:8d:21:04:4a:16:73:1b:be:b7:8c:ee:2f:33:97:64:33:
d3:d0:ad:be:90:e4:b1:a7:b6:db:cc:d2:91:3a:6a:af:62:b6:
79:7e:77:4c:21:96:7a:4f:a7:fb:61:bb:c6:f6:28:fd:e2:8a:
58:64:0f:a7:d7:83:c5:dc:47:cb:b9:44:f5:e6:b9:71:30:b7:
87:7b:54:58:e0:d3:67:31:3e:89:49:6a:a7:c4:6e:ad:a4:ee:
7b:78:7a:e2:5b:15:6e:7e:90:2a:10:21:f5:10:27:60:b5:c6:
f3:94:f9:fd:ef:4a:2d:42:b3:10:56:5f:71:c1:97:0a:71:b5:
20:35:74:b9:c4:3b:7f:3c:ae:90:8d:06:86:28:ba:c4:42:68:
59:9b:9c:ad:e0:9b:79:3e:ab:21:9b:e5:24:94:a4:6b:1a:6f:
48:81:99:d0:08:fe:cd:f5:ab:1f:5a:db:73:81:29:21:88:86:
7b:83:de:e2:f8:ca:b8:e1:52:57:17:71:cf:0d:e5:03:1b:d7:
49:bd:d3:d5:42:6a:66:94:8d:8f:08:f2:d2:76:3f:87:b4:4d:
18:21:be:60:78:6e:6d:c4:96:e7:f5:e9:16:e0:ba:c1:be:7e:
0f:17:93:40:50:a5:11:d5:89:43:40:2f:00:e0:cd:86:50:60:
c1:60:d4:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org