Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/aaa481cd699d29ddc85aa9edf4a1abac59716032.roa
File: aaa481cd699d29ddc85aa9edf4a1abac59716032.roa (raw, json)
Hash identifier: KDwpaKRMMJfa21j5GCpDp66IBtQ3qUCxkOIccIN8c+s=
Subject key identifier: CF:49:34:D3:15:E0:F6:A6:D8:52:5E:62:2E:58:BF:E4:47:16:73:5C
Certificate issuer: /CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Certificate serial: 12D431
Authority key identifier: 9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/aaa481cd699d29ddc85aa9edf4a1abac59716032.roa
Signing time: Fri 12 Nov 2021 14:16:17 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 262589
IP address blocks: 191.97.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1233969 (0x12d431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=aaa481cd699d29ddc85aa9edf4a1abac59716032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:7f:e0:e3:3b:ad:e5:60:49:22:d3:60:3f:
be:6a:ed:19:ea:f2:a9:5e:21:82:6c:fe:c4:c8:c5:
bb:b0:3c:b0:d1:3d:1d:2b:80:cb:47:92:9a:b6:32:
e7:1f:77:d4:d7:7a:f5:a9:4d:0d:c9:2d:c3:81:a9:
d9:f9:6c:81:0c:19:5a:d4:94:e9:93:6f:6e:1d:04:
1a:ee:7b:32:1f:30:bb:f9:20:a7:49:e4:65:59:2e:
50:a7:35:f7:5e:d3:cc:5b:ec:d1:62:01:d7:7a:e1:
e5:2f:69:23:cf:7a:50:90:29:71:35:5e:ad:27:b7:
cb:22:30:bb:1f:eb:28:8e:c3:f3:37:fe:38:47:e9:
36:b8:34:d4:a6:7e:6c:d4:bd:6b:f4:95:49:d4:10:
3d:60:85:74:71:17:01:96:1e:49:b3:d5:c0:db:29:
9c:5f:4e:8f:7d:ec:cd:79:4c:2c:2a:e4:68:99:bc:
45:05:f4:46:e8:03:4b:67:87:fc:ca:d9:31:40:0d:
f4:e1:4e:97:80:f9:e6:96:e2:51:44:a0:d6:a5:c0:
93:d0:b3:86:5d:55:06:a7:84:f1:82:83:6c:1d:a9:
a4:50:b7:00:da:db:f1:af:68:a9:00:15:c3:4d:92:
cd:70:22:b8:15:79:7b:4f:61:c8:86:55:0e:13:7a:
94:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:49:34:D3:15:E0:F6:A6:D8:52:5E:62:2E:58:BF:E4:47:16:73:5C
X509v3 Authority Key Identifier:
keyid:9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/aaa481cd699d29ddc85aa9edf4a1abac59716032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a9b9d9319d2010f9907e00e3e1940885c59db093.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.97.55.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1e:d9:2f:3c:f0:38:50:4f:42:23:15:89:5b:ec:0a:32:68:
1d:e5:71:0a:f6:b9:f4:1c:f8:75:63:fd:14:04:0f:9f:94:01:
00:6e:3b:14:51:a8:75:84:14:8a:76:38:2f:89:c9:8b:e7:4a:
a1:67:d1:e3:12:18:dc:f1:8d:76:5e:94:3a:54:e6:ef:a1:38:
d6:b9:d9:5c:2c:59:ed:5f:a7:f1:89:a0:e0:37:e3:3a:0b:5f:
2c:9f:f6:91:8c:68:88:88:00:f1:ad:19:44:6f:b9:b9:ee:5e:
7a:a2:bc:8c:b4:7c:d4:a0:ea:b9:3c:a5:83:67:96:0f:e4:ca:
2a:72:04:3f:3f:45:a7:25:24:cf:d5:c5:13:f5:6e:ab:6d:16:
b7:c2:c0:4c:d0:8b:6d:5a:02:7d:6b:f6:03:31:8c:b2:60:a3:
61:dc:f6:8a:ac:6a:f2:78:08:2d:83:66:46:61:9c:9a:cc:9f:
38:38:7c:a1:07:c8:42:80:a7:17:df:d7:16:97:61:f5:a9:f3:
6d:ae:bf:9f:77:75:4e:c0:51:9d:0a:3c:28:e0:f4:fd:3e:05:
ea:ea:63:1c:70:48:e5:67:f6:12:69:4b:21:39:40:d3:9d:29:
23:73:86:e6:7b:0b:7a:9d:33:2c:17:88:d7:80:ff:da:9f:d2:
57:da:52:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org