Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/68ad56acbeec3935f7df196b9b8c4760e2095dcc.roa
File: 68ad56acbeec3935f7df196b9b8c4760e2095dcc.roa (raw, json)
Hash identifier: 2axjh/rpVCRFWNQm54sWs+ednCpVEgbBmBUepC3AQpk=
Subject key identifier: 75:C9:49:C1:22:75:A6:6F:15:86:D6:DF:C8:36:FF:67:F3:F6:79:33
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 05BEC9
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/68ad56acbeec3935f7df196b9b8c4760e2095dcc.roa
Signing time: Mon 04 Apr 2022 05:15:07 +0000
ROA not before: Mon 04 Apr 2022 03:00:00 +0000
ROA not after: Tue 04 Apr 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376521 (0x5bec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Apr 4 03:00:00 2022 GMT
Not After : Apr 4 03:00:00 2023 GMT
Subject: CN=68ad56acbeec3935f7df196b9b8c4760e2095dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:42:56:16:1f:35:e4:01:99:85:e1:4d:b9:
f4:b0:f7:f8:21:81:7c:c7:f3:e5:c3:70:b1:1b:81:
13:6b:e8:f4:5a:80:f7:c8:a7:11:e8:6f:c4:69:d0:
21:bc:06:5f:30:c3:af:00:23:e7:6a:fb:c9:e1:94:
93:bf:5b:f6:dd:ab:58:05:1a:9f:8e:2d:78:fe:d9:
e3:f1:3c:17:69:08:83:28:e2:d4:57:17:27:46:28:
bb:d1:19:4e:a7:73:f9:9b:3f:eb:bc:95:f4:c0:21:
70:a3:41:7e:29:01:bd:72:c4:ce:4d:5c:53:ad:83:
b5:5e:fb:c5:d5:8f:f4:5e:f7:07:06:ba:cd:a2:71:
a7:57:3a:75:a3:dc:35:2c:fa:ef:16:6d:9d:d0:ce:
41:93:aa:9b:f0:5b:4b:32:51:3a:fb:fc:03:62:73:
20:e3:24:ce:45:88:f4:78:3b:a4:51:13:36:e3:c7:
76:f5:0c:2b:89:a1:20:14:33:4a:ad:ed:9d:ee:cb:
73:45:ee:58:f2:41:61:58:41:f3:1a:31:24:62:03:
fa:25:4b:d0:e0:b5:ac:d2:bb:01:a0:7a:f9:d1:94:
23:e6:f3:13:47:ee:51:24:b6:c8:1e:63:8a:9b:40:
b7:62:bf:be:b8:87:55:7b:f7:7b:b3:18:97:03:a6:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C9:49:C1:22:75:A6:6F:15:86:D6:DF:C8:36:FF:67:F3:F6:79:33
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/68ad56acbeec3935f7df196b9b8c4760e2095dcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
8e:24:c0:e3:a1:21:4c:09:9a:73:44:ef:df:7e:98:52:b4:d8:
df:06:00:6d:9b:4b:c7:f1:2d:1d:a9:a8:af:fc:12:f3:d2:87:
60:93:7e:35:89:24:d5:c9:bd:43:ba:22:84:28:b7:27:36:07:
e1:c3:aa:ae:69:01:13:10:8a:76:e5:f1:71:9c:7d:32:9c:41:
72:f7:81:f8:aa:d6:29:b2:11:1a:e1:0b:eb:22:9c:c3:a0:ea:
59:f1:a3:cb:c8:52:65:84:a1:0b:13:eb:58:aa:65:b4:b5:9a:
70:c8:f4:a9:e6:22:ab:14:ae:16:bf:f2:34:4b:94:0e:c7:08:
f4:29:26:3b:a1:ae:c2:f7:76:f8:e7:fb:0c:ad:e3:74:a2:f3:
f2:40:d4:4e:4a:75:5f:cc:24:d9:be:b4:ea:0f:c2:f7:d4:0f:
df:c0:3d:14:a9:c3:ba:53:a8:ce:71:37:c2:87:a5:fb:61:0c:
74:64:eb:dc:02:23:95:cc:58:3d:9e:ef:c1:27:59:9e:a6:7d:
e8:29:57:ee:61:ac:0d:77:3c:05:25:c5:89:37:5f:49:75:30:
ac:a4:78:9a:f8:fe:f7:b7:04:34:c9:50:e6:ad:f0:c7:f5:02:
03:fa:42:02:cd:a5:07:7d:48:ff:cb:d8:b5:77:00:ba:59:36:
5b:e5:95:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:45 2024 by rpki-client on console-fra.rpki-client.org