Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/0d43eedbec53d09722b5dfe68135c12c5479ea3e.roa
File: 0d43eedbec53d09722b5dfe68135c12c5479ea3e.roa (raw, json)
Hash identifier: PxHmGmjPOXMoR9iaZ80riqnRo/lUqTfK+z6XJEJDKXM=
Subject key identifier: 60:B8:70:F6:93:F9:12:4F:F9:15:33:9C:02:B6:98:11:7E:19:9A:1B
Certificate issuer: /CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Certificate serial: 220A0E
Authority key identifier: 34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/0d43eedbec53d09722b5dfe68135c12c5479ea3e.roa
Signing time: Fri 05 Apr 2024 17:38:05 +0000
ROA not before: Fri 05 Apr 2024 17:38:05 +0000
ROA not after: Sun 05 Apr 2026 17:38:05 +0000
asID: 273172
IP address blocks: 2803:b0e0:7003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230798 (0x220a0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f595ed733bf54f430d174bb1f0bf895d6bc70b64
Validity
Not Before: Apr 5 17:38:05 2024 GMT
Not After : Apr 5 17:38:05 2026 GMT
Subject: CN=0d43eedbec53d09722b5dfe68135c12c5479ea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:5c:ee:3c:16:0a:21:a4:d4:27:a0:33:d9:
99:11:15:3c:8e:b0:96:f6:1c:aa:4e:56:9f:f5:6d:
08:03:7e:1d:6d:27:b7:9c:74:0c:a5:20:cb:87:1a:
1d:e7:b4:a0:f4:07:96:42:30:1e:39:c1:ad:60:ff:
59:1d:54:59:5b:c6:bc:99:63:f2:31:db:5c:b3:78:
0f:4f:62:88:db:f2:18:df:bc:39:c8:fd:00:48:cb:
e2:1e:61:70:9d:5a:80:06:31:db:be:23:77:0b:54:
40:39:cd:ba:54:b1:85:dc:28:76:5b:80:c6:b0:56:
c2:16:fd:0c:02:51:94:88:7b:a5:97:7e:00:9c:70:
dc:17:8a:91:8b:47:71:c8:c7:a8:1f:3f:84:08:83:
68:48:2a:99:d2:ee:da:0f:e3:2a:b4:e0:1d:0b:b0:
a8:a6:94:3b:d6:41:05:4b:5b:5c:fe:79:10:34:45:
38:ca:37:25:ac:dd:7f:21:ba:ab:68:32:c5:6f:5b:
d3:32:b3:df:ae:0d:a8:6b:9b:bb:ce:64:e2:27:d8:
d2:eb:15:81:43:5f:36:9b:a3:50:9e:c4:6c:43:43:
05:1b:04:04:36:2e:d7:4f:b2:63:93:39:2e:c6:6f:
5b:13:1a:b9:bf:56:28:62:35:69:85:84:f1:67:fc:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B8:70:F6:93:F9:12:4F:F9:15:33:9C:02:B6:98:11:7E:19:9A:1B
X509v3 Authority Key Identifier:
keyid:34:D1:75:0D:84:1E:60:5A:A0:B8:09:8B:97:F1:F6:1C:36:10:0E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f595ed733bf54f430d174bb1f0bf895d6bc70b64.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/0d43eedbec53d09722b5dfe68135c12c5479ea3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5b1e152f-fc50-435b-beeb-8b3866e1b0fe/f595ed733bf54f430d174bb1f0bf895d6bc70b64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:b0e0:7003::/48
Signature Algorithm: sha256WithRSAEncryption
69:f5:ba:53:59:b9:76:c3:fd:a0:ed:27:bb:91:a7:14:c1:95:
ea:db:17:47:96:bd:6d:1c:bf:9b:0c:03:b1:2d:f6:56:97:f6:
70:7f:20:e6:32:22:c1:96:16:09:cc:db:5e:4c:64:ea:d6:77:
dd:f5:a3:cd:03:53:0b:3a:66:7f:1f:66:5b:7e:6b:1e:8e:2e:
23:93:d0:bf:0a:8d:08:29:b0:85:ef:86:1e:c7:b0:75:72:16:
1b:d7:69:1f:64:c4:13:fa:78:7d:17:63:fa:a1:86:46:ff:6d:
5c:71:51:db:95:16:85:9c:75:69:76:07:0f:e4:c2:c2:09:f0:
70:33:4c:17:f4:d8:94:4d:89:c0:54:a9:6f:7f:6b:4b:ad:49:
e3:4e:e5:88:ae:7c:13:00:ab:ee:62:c1:54:b5:13:80:a0:1b:
46:4a:bb:05:78:1f:6b:28:a2:5e:fb:30:b2:83:6b:3e:e4:8c:
64:64:08:9e:40:0e:5a:87:89:2f:65:8b:01:3f:83:a6:41:0e:
40:46:fe:d9:b8:77:50:b0:21:a1:71:c6:65:1a:e9:2a:6d:4c:
e8:73:bb:d2:6d:d5:96:48:e6:b8:fb:39:60:c3:49:9f:6d:91:
f2:7c:35:88:7c:22:67:c1:32:1c:ff:69:08:d7:57:3a:8a:1a:
55:6f:a2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org