Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/868b0564777129f1f50ea8c615785d16d30e9a87.roa
File: 868b0564777129f1f50ea8c615785d16d30e9a87.roa (raw, json)
Hash identifier: 7bJz6K+5n/jEkOUWtg6+n8LMNLmLu6oBIMPzs60cOdg=
Subject key identifier: 54:D9:D5:28:E2:01:5E:37:66:E9:5D:1C:5C:8D:58:D6:86:FD:9E:44
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 0419E8
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/868b0564777129f1f50ea8c615785d16d30e9a87.roa
Signing time: Wed 12 Jul 2023 15:05:34 +0000
ROA not before: Tue 11 Jul 2023 15:05:33 +0000
ROA not after: Sat 12 Jul 2025 15:05:33 +0000
asID: 7418
IP address blocks: 201.223.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268776 (0x419e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 11 15:05:33 2023 GMT
Not After : Jul 12 15:05:33 2025 GMT
Subject: CN=868b0564777129f1f50ea8c615785d16d30e9a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:b3:94:61:06:7d:d0:23:16:4a:73:81:7a:
78:88:f6:e8:06:7b:c2:ff:29:27:ab:11:38:7d:85:
eb:40:ea:69:86:f9:f7:64:9e:a7:a1:e8:5c:3e:96:
e2:53:e0:18:34:3f:fe:d1:5b:ac:f4:7a:aa:0d:a1:
e9:73:e9:09:b0:5c:1a:df:ae:4b:3a:6a:a8:b1:90:
45:e1:bc:0a:c9:e6:67:fa:fd:87:ff:68:39:dc:9f:
2a:26:bf:21:8b:43:1e:6b:ee:bb:2b:94:7c:20:ab:
82:3d:66:8f:a9:c9:67:6a:45:09:74:55:77:7b:04:
bf:98:db:d9:ba:c4:8d:a7:27:b6:ec:c4:a2:ed:69:
32:e5:92:1a:ad:d7:26:4e:cb:dc:bb:ea:7b:73:54:
66:96:a5:dd:b2:68:75:bb:4b:1a:13:1d:ad:5d:dc:
8e:85:30:73:a9:1e:34:38:f9:88:3d:73:53:15:08:
88:c8:88:fa:a4:01:77:57:02:8a:82:25:73:18:c7:
05:01:80:78:48:c5:cb:a2:a5:b8:50:d8:43:c3:84:
e3:e7:be:15:d3:97:19:d7:8e:b1:f8:66:60:f0:bc:
fc:92:04:ca:e4:7a:ab:ca:7c:61:b2:b5:c6:27:5c:
48:9a:a6:0a:ed:37:62:db:a7:41:d6:a8:e2:16:e5:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D9:D5:28:E2:01:5E:37:66:E9:5D:1C:5C:8D:58:D6:86:FD:9E:44
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/868b0564777129f1f50ea8c615785d16d30e9a87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.223.0.0/17
Signature Algorithm: sha256WithRSAEncryption
61:01:4f:a4:f1:e7:a4:3a:b0:57:2b:45:df:c9:2b:bf:62:57:
51:2a:61:a4:41:ec:45:84:a9:c5:07:af:d7:86:4c:db:7a:60:
72:d4:cf:e4:52:58:d6:56:a3:3d:0a:37:9d:31:94:6c:1c:10:
3c:f8:36:5e:70:e2:37:ea:3b:e1:6a:62:fc:a1:d0:5b:09:1b:
98:3a:fc:73:d7:27:ce:ed:c3:4f:23:70:4c:ff:25:1d:43:32:
82:f8:20:14:05:23:1f:e0:e8:bf:32:a6:54:d6:21:65:52:e9:
42:07:5b:21:f9:d7:47:2a:97:06:1a:cd:cc:62:43:e4:78:24:
c4:b6:3c:2c:39:76:d9:30:a5:87:dc:af:ab:17:ce:c4:58:c9:
a5:7f:11:04:43:ce:fe:e3:e0:cd:37:cb:49:e8:c7:8c:0d:eb:
3b:8e:59:30:3d:6d:3c:8e:5a:b0:8f:8a:ab:4a:1c:d0:d7:85:
af:8e:65:22:96:ab:e8:cf:3c:04:22:03:cb:32:f7:ea:64:c3:
06:72:c6:a0:40:7f:d9:cb:84:8f:e1:72:0f:f3:82:44:3e:49:
fb:ea:43:12:ed:11:20:1d:bf:6b:8f:21:d3:8d:b3:35:93:46:
1e:a5:53:f1:a0:7a:66:a3:fb:c6:95:b2:89:0d:c0:38:64:1d:
a1:48:69:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org