Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cef79ff4beb9fa8c83f5b6ac936784e9ca15d555.roa
File: cef79ff4beb9fa8c83f5b6ac936784e9ca15d555.roa (raw, json)
Hash identifier: tu7Ed3aHW24JiLPXPsX23LfesrDdkID59GPbUfVJbUc=
Subject key identifier: 63:00:A2:6C:D9:77:BA:6A:02:7D:23:AC:33:2B:C5:2D:88:1B:5A:39
Certificate issuer: /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial: 0853FB
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cef79ff4beb9fa8c83f5b6ac936784e9ca15d555.roa
Signing time: Wed 01 Jun 2022 01:06:02 +0000
ROA not before: Wed 01 Jun 2022 03:00:00 +0000
ROA not after: Thu 01 Jun 2023 03:00:00 +0000
asID: 3970
IP address blocks: 2801:1e:1801::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545787 (0x853fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Validity
Not Before: Jun 1 03:00:00 2022 GMT
Not After : Jun 1 03:00:00 2023 GMT
Subject: CN=cef79ff4beb9fa8c83f5b6ac936784e9ca15d555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:96:af:d6:b6:2d:31:45:e6:fa:a5:c4:e6:
e8:8d:f8:59:86:81:28:0f:2c:5a:c0:59:be:d2:18:
2b:ee:48:94:36:ef:6d:2b:f2:e3:7d:1d:b5:6e:a0:
16:0e:9d:49:53:e5:18:f2:4d:22:ba:7d:c8:e8:2b:
2f:99:20:92:cc:ed:ec:bc:96:f2:b9:36:61:b8:96:
44:dd:50:02:53:ed:7b:8b:29:87:2e:9b:14:4f:df:
59:06:97:89:b2:22:72:d4:08:73:c9:08:6e:9d:b5:
f3:cf:7e:a6:7b:31:06:ef:0e:58:18:c5:d0:fd:18:
6e:34:21:15:9a:6e:d1:43:9e:a8:8b:cb:4d:76:83:
bd:87:d9:a5:30:67:80:d1:f5:7e:6f:61:70:9a:d3:
9b:f4:93:97:e9:28:b6:a7:50:2a:7f:b1:7a:48:d8:
91:14:36:05:cb:bd:59:5e:a6:49:71:ff:7a:6b:81:
08:d7:25:4d:f7:4f:d2:ec:f8:ca:9a:e8:fa:69:6b:
0f:4f:bb:e0:9f:23:97:07:c3:4f:c7:e0:9a:08:4f:
1e:22:09:40:d7:dc:bc:11:aa:3c:e0:56:71:1a:10:
95:58:7a:24:7c:ee:86:76:94:32:3a:99:03:39:cc:
22:08:25:e2:9d:20:61:5e:9c:74:d6:eb:79:31:55:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:00:A2:6C:D9:77:BA:6A:02:7D:23:AC:33:2B:C5:2D:88:1B:5A:39
X509v3 Authority Key Identifier:
keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cef79ff4beb9fa8c83f5b6ac936784e9ca15d555.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1e:1801::/48
Signature Algorithm: sha256WithRSAEncryption
48:e4:ea:4e:dd:58:20:ed:ae:bd:52:a8:44:64:84:16:c7:ec:
41:b8:dd:dd:b9:46:f3:9c:35:be:b1:04:15:c6:81:f0:a9:0f:
77:c8:f2:c3:fa:c5:38:8b:7f:ea:b1:55:67:95:82:40:c7:07:
de:01:ba:ea:ee:ca:43:09:0a:82:8c:2e:18:54:be:08:9c:83:
69:b5:18:1f:12:a0:12:03:d6:7b:bb:ba:59:9d:4a:57:c6:2f:
eb:70:bf:5b:7c:cd:e7:f9:6e:64:d4:8f:d5:07:54:c2:45:eb:
45:63:12:fb:59:98:02:37:b3:23:2c:96:ca:21:16:68:6f:26:
c8:7f:05:ea:6f:1b:c8:4d:32:6c:68:27:ac:e1:cd:42:2a:7c:
b3:30:76:64:8d:46:bb:f6:6d:b8:f1:a9:5b:c0:03:21:de:fb:
95:8b:ba:56:b2:96:5c:f6:af:d0:1d:52:df:df:5f:be:96:9f:
8b:46:2e:db:98:ea:4f:2a:29:b4:f2:24:d8:98:ba:24:c2:1e:
9f:ac:c7:c7:31:5e:32:fa:85:08:11:7b:be:55:71:d2:c5:e8:
e6:33:3f:57:b9:98:93:a7:67:b3:05:a8:a6:31:1b:21:ad:85:
ab:3b:3d:09:a2:e4:ca:2c:3d:69:d7:64:6a:a0:6d:7e:72:5a:
36:50:8d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-fra.rpki-client.org