Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/58c9a17bc6640a77a662dbca4ca3717dc78db80c.roa
File: 58c9a17bc6640a77a662dbca4ca3717dc78db80c.roa (raw, json)
Hash identifier: GUO7t4crlDyAWEQ5walZDtOLHTks4y1bnDy6vjN10Kc=
Subject key identifier: C2:B1:C1:EF:C5:E2:F6:39:78:D8:A9:09:A3:BC:86:20:3A:FE:FF:47
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 047F95
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/58c9a17bc6640a77a662dbca4ca3717dc78db80c.roa
Signing time: Tue 08 Mar 2022 03:20:45 +0000
ROA not before: Tue 08 Mar 2022 03:00:00 +0000
ROA not after: Wed 08 Mar 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 294805 (0x47f95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Mar 8 03:00:00 2022 GMT
Not After : Mar 8 03:00:00 2023 GMT
Subject: CN=58c9a17bc6640a77a662dbca4ca3717dc78db80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0e:72:c6:35:1e:21:50:db:e0:2d:a0:f2:d1:
e3:a6:ed:f3:6a:bd:d2:91:55:1d:da:dc:1d:59:64:
76:fa:1d:06:08:2d:d3:c1:4c:93:c7:93:d0:f0:54:
f6:b5:2e:fa:26:20:0a:79:9a:51:14:c4:07:04:6a:
ea:03:52:d7:b1:a4:9b:d9:2a:b9:61:e1:2f:37:d3:
7b:ed:a5:b0:16:41:1c:da:2a:58:3b:05:d7:fd:60:
51:99:50:c5:ab:1a:23:1f:4c:69:19:7e:ea:3d:80:
ee:9b:8d:ce:53:b9:9d:51:57:dd:c1:d9:3b:7e:fb:
31:a5:77:2b:ac:10:d4:04:67:14:10:b3:86:06:5a:
39:40:ee:8e:dd:e3:05:c6:74:40:45:f6:7a:7b:1c:
8e:91:8d:16:5d:09:15:7c:33:de:b5:f3:f5:49:ba:
22:86:08:e3:a1:06:5b:f3:06:95:3e:65:af:f5:31:
72:be:04:e9:76:2b:b2:03:02:a2:ec:d2:52:c0:b2:
06:05:07:ef:71:fb:c3:e9:7a:33:81:3f:e8:1c:e5:
72:cf:7d:40:f3:40:dd:6c:e6:24:a7:f8:ec:30:45:
01:49:4c:98:54:f6:18:74:3b:47:69:6b:98:26:3d:
73:96:eb:50:d0:a7:6a:47:ce:32:ca:6e:65:f1:37:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:C1:EF:C5:E2:F6:39:78:D8:A9:09:A3:BC:86:20:3A:FE:FF:47
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/58c9a17bc6640a77a662dbca4ca3717dc78db80c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
78:61:c6:e4:8c:a6:8f:76:24:45:1f:31:13:f6:f6:4d:e1:36:
df:8a:4c:89:2d:12:fa:f8:19:84:ce:2e:1f:47:b3:e6:2e:d4:
e3:de:05:f2:ef:c9:9d:05:02:72:97:4c:4b:64:47:66:61:19:
01:aa:35:6b:37:f1:ec:d7:60:ec:3b:1b:d6:ec:45:58:e0:1d:
f4:20:bb:20:dc:ce:16:43:ba:6c:1c:ad:57:4c:bc:79:3c:a7:
1f:46:de:1c:80:31:61:be:ba:c2:2d:62:4f:2f:10:84:14:e0:
45:ae:d4:53:ce:c6:a7:b8:ba:81:ce:d1:a6:33:c9:f7:23:88:
21:47:65:48:72:6f:e7:43:22:07:bf:b0:bb:bd:51:b6:b2:f0:
ee:6f:43:45:f6:14:54:95:75:4b:df:d9:94:15:b3:89:49:3c:
7a:45:9d:fb:e6:0b:d0:79:13:a7:e8:fc:b3:98:0f:36:1e:f1:
c1:55:a1:4d:05:ab:d1:3a:ef:20:ad:4b:f2:66:40:69:4c:e3:
1c:47:d3:29:0e:38:7b:6a:48:24:c0:19:03:d0:8b:91:e3:c3:
46:d3:ad:d9:11:04:d4:3b:fa:07:f0:8d:18:12:24:cc:50:55:
33:b4:81:b2:80:30:a7:96:07:27:fd:37:82:2d:68:b6:51:60:
f5:fa:30:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org