Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5435c7eaf79be9d182b11b524df912b5a0338b9e.roa
File: 5435c7eaf79be9d182b11b524df912b5a0338b9e.roa (raw, json)
Hash identifier: Qx/MMvCkloypfFXS8eFUXAkjeJccXxNSvRfLlirWUoM=
Subject key identifier: 69:A9:E7:74:DD:D3:DA:BF:8B:3A:CE:50:53:21:59:51:C4:8D:63:7E
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 043E2B
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5435c7eaf79be9d182b11b524df912b5a0338b9e.roa
Signing time: Wed 12 Jul 2023 15:12:03 +0000
ROA not before: Tue 11 Jul 2023 15:12:03 +0000
ROA not after: Sat 12 Jul 2025 15:12:03 +0000
asID: 7418
IP address blocks: 201.246.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 278059 (0x43e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 11 15:12:03 2023 GMT
Not After : Jul 12 15:12:03 2025 GMT
Subject: CN=5435c7eaf79be9d182b11b524df912b5a0338b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:1f:cd:77:72:6c:23:ae:28:b8:e8:2d:a7:
9a:12:fb:ba:e8:ba:70:60:c1:5f:c5:b7:b5:94:e7:
a5:7e:88:30:79:ae:ea:b4:9a:ca:d9:e6:ae:84:aa:
cb:30:56:45:8b:a1:89:b4:ef:74:e2:4b:61:b8:79:
48:5b:a3:5d:bb:8a:62:d9:06:85:87:18:c0:60:b8:
9e:69:28:13:ad:6e:b4:f0:f0:cf:6d:bd:41:2b:3e:
ce:42:a7:ca:fa:6a:f0:6d:d9:2d:14:ec:5d:9a:8c:
8d:02:c9:2c:54:1e:41:d6:10:a2:ef:e7:d3:34:21:
7e:5b:83:93:cb:79:50:b1:e7:e9:91:94:aa:74:d7:
78:4b:23:ee:05:25:d3:d6:dd:83:d8:a1:8e:dd:94:
4c:8e:57:ee:5b:11:68:eb:26:83:9d:0d:5a:38:99:
af:cb:3c:cf:b3:44:fb:e5:f3:5d:03:e3:7e:69:25:
4a:6b:7e:c7:f0:bf:d4:25:c3:f3:37:fe:23:a1:5b:
b6:59:9a:61:e5:0e:bf:ed:4d:d4:3c:cb:5e:41:47:
09:8f:df:cc:12:5a:34:67:e5:c1:f7:59:10:7a:94:
15:c4:2e:c9:63:f2:5d:53:40:d7:d4:f1:e6:f0:2f:
69:e4:e0:3e:82:94:ff:c4:76:15:7e:b8:65:e2:93:
2a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A9:E7:74:DD:D3:DA:BF:8B:3A:CE:50:53:21:59:51:C4:8D:63:7E
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/5435c7eaf79be9d182b11b524df912b5a0338b9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.246.128.0/18
Signature Algorithm: sha256WithRSAEncryption
8c:53:33:d1:af:aa:af:67:53:74:06:5c:e6:b0:1b:5e:38:4a:
d2:49:b2:34:ac:31:3e:75:d0:50:16:f4:63:c3:1b:54:d2:91:
3c:73:8e:bc:d4:a7:fe:10:f2:d3:f2:84:9a:d1:10:67:54:70:
9b:b5:d0:64:85:e3:d3:ff:e7:ec:56:d5:5e:9b:e2:1b:df:89:
63:ca:d5:02:50:69:8f:75:00:d5:be:72:fa:29:c6:08:25:1c:
fc:23:22:a8:76:88:27:dd:a5:f5:ba:77:9f:7f:9e:62:69:fb:
0c:ee:35:2a:43:13:de:59:3d:ba:a0:e4:b2:06:3f:57:06:59:
11:73:31:94:b7:b6:9c:ed:22:a6:ab:df:51:9c:b0:6c:76:59:
02:e5:2a:57:4b:df:0b:0d:a8:8a:47:ee:1c:cc:4b:a0:76:a9:
5d:21:a4:62:0e:8c:cd:18:b0:0d:a2:d8:8f:ac:00:6d:7d:96:
8d:1c:e4:23:ff:6b:94:67:60:be:5b:d9:c7:cb:75:f7:38:7c:
60:78:ca:2b:51:1a:b1:0b:bb:53:4a:36:f2:7b:b1:c8:a7:7c:
84:53:91:b5:d0:b4:8d:1a:e6:4a:3d:de:13:b4:56:47:c5:bf:
4d:99:45:69:4c:35:67:7f:ea:f8:d6:35:10:91:c1:00:2d:c7:
4f:30:23:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org