Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f5f6a36-f2c7-44e3-8f34-c7756e6bccf3/cf08ca1846f15cbd6de124a1a6015a1811d11eb4.roa
File: cf08ca1846f15cbd6de124a1a6015a1811d11eb4.roa (raw, json)
Hash identifier: YtnOXlE2eNhaX15d7RodwJle4ruAl08UwCI6MSAdy+0=
Subject key identifier: BC:37:1A:DC:81:E1:3C:37:B1:6B:49:69:7E:F7:6E:56:24:1F:39:D3
Certificate issuer: /CN=5d6e30ee09a02818a4de760cee7553be86a880f3
Certificate serial: 0B2B0E
Authority key identifier: 59:F8:A3:E4:EE:D0:16:6B:AC:67:AE:7E:B0:85:18:FF:56:40:0C:0B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6e30ee09a02818a4de760cee7553be86a880f3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5f5f6a36-f2c7-44e3-8f34-c7756e6bccf3/cf08ca1846f15cbd6de124a1a6015a1811d11eb4.roa
Signing time: Wed 24 Mar 2021 14:36:12 +0000
ROA not before: Wed 24 Mar 2021 14:36:12 +0000
ROA not after: Tue 24 Mar 2026 14:36:12 +0000
asID: 19429
IP address blocks: 2801:1b:8800::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731918 (0xb2b0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6e30ee09a02818a4de760cee7553be86a880f3
Validity
Not Before: Mar 24 14:36:12 2021 GMT
Not After : Mar 24 14:36:12 2026 GMT
Subject: CN=cf08ca1846f15cbd6de124a1a6015a1811d11eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:52:9e:82:bb:ab:40:8a:d5:65:9a:50:20:9f:
fe:7b:f4:a0:de:9f:07:a2:02:d6:2f:f2:ca:77:9c:
90:d2:2d:c8:0d:af:f7:06:0c:31:a4:a4:cd:40:f6:
99:db:63:ca:0b:ad:e8:b7:49:3c:1b:d4:56:0f:54:
61:04:6a:be:88:a7:37:fb:f0:cc:ad:8b:e9:87:f9:
4a:92:9c:a2:4c:fe:7a:8d:91:06:ec:3d:7c:21:84:
cc:54:2f:b0:87:18:22:d1:59:24:51:7d:ef:a6:cb:
02:19:72:96:54:78:02:83:c5:96:ec:b9:13:0c:84:
c6:a4:bc:bc:7a:19:c8:47:76:11:2b:80:1d:65:ac:
2a:5e:5a:e0:6e:34:e9:bc:a0:89:bf:3a:d0:8a:b4:
cc:26:ec:2c:08:49:78:76:b9:cc:ef:76:fd:5e:27:
45:4a:c4:53:98:f3:e5:4f:91:df:aa:55:0e:37:82:
41:c5:07:bb:5f:b7:11:07:89:31:22:0a:df:78:5c:
c2:76:fe:67:1c:01:69:f0:fc:a0:2f:cd:29:a6:8e:
09:49:ce:27:72:e9:b3:56:ca:4e:23:70:23:cc:0e:
8a:d7:9f:6d:c4:43:6b:77:f6:0f:71:f5:90:ef:52:
d2:ce:63:e3:8f:e1:9b:b0:54:aa:ae:bb:55:a2:65:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:37:1A:DC:81:E1:3C:37:B1:6B:49:69:7E:F7:6E:56:24:1F:39:D3
X509v3 Authority Key Identifier:
keyid:59:F8:A3:E4:EE:D0:16:6B:AC:67:AE:7E:B0:85:18:FF:56:40:0C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6e30ee09a02818a4de760cee7553be86a880f3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f5f6a36-f2c7-44e3-8f34-c7756e6bccf3/cf08ca1846f15cbd6de124a1a6015a1811d11eb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5f5f6a36-f2c7-44e3-8f34-c7756e6bccf3/5d6e30ee09a02818a4de760cee7553be86a880f3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1b:8800::/48
Signature Algorithm: sha256WithRSAEncryption
55:45:dc:75:e7:4e:15:17:7f:3d:db:c5:11:39:bb:79:ca:37:
a4:cb:62:b6:d4:a0:8d:c0:ea:dd:82:f0:14:ed:ce:8d:9c:63:
7b:83:92:0e:5a:9f:84:d2:4b:be:cc:aa:c2:d7:ac:c2:6d:1f:
3c:84:3d:80:0a:01:20:9e:09:af:6c:ed:2e:df:4f:54:a1:3b:
95:c3:2c:17:b7:5d:a8:f5:4f:53:0f:04:ec:07:0f:85:65:cc:
da:ac:9b:92:f2:49:e9:5e:c2:27:3d:f8:dc:33:f3:01:df:81:
81:cd:b1:7f:09:25:65:37:e1:0e:ec:44:4d:4c:62:83:50:7a:
14:10:23:a8:ef:fb:2f:51:f7:46:15:be:a9:07:61:38:d0:79:
bc:b1:86:63:57:3c:fb:0a:d4:e4:f6:98:f9:8b:fd:a0:ec:85:
f2:e1:41:ed:24:8a:94:00:21:55:76:e5:4b:85:f2:ae:b0:b1:
c1:e6:10:63:e9:b2:6b:e3:62:4c:b0:67:f9:36:46:5b:66:ac:
a0:79:ec:2e:79:06:9a:e3:83:46:0a:cf:af:6f:f5:90:a6:f5:
23:9b:3c:2d:4e:0b:8e:5c:74:65:6b:2c:26:a6:d7:79:c2:45:
78:0a:70:0f:66:7e:c5:8c:53:7f:bb:a7:92:d6:b0:bb:3f:90:
8c:98:a2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-ams.rpki-client.org