Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/d0f800225e714e4c4b872caf643675d4ca4793e7.roa
File: d0f800225e714e4c4b872caf643675d4ca4793e7.roa (raw, json)
Hash identifier: D+GCy9DxHT0eyounlfUiyibMk1zami+2ctL5jSikOKU=
Subject key identifier: DF:EC:01:0F:3B:E4:26:1F:B4:62:E7:47:A4:5F:68:EA:27:3C:04:2B
Certificate issuer: /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial: 05FCD6
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/d0f800225e714e4c4b872caf643675d4ca4793e7.roa
Signing time: Tue 11 Jul 2023 17:15:38 +0000
ROA not before: Mon 10 Jul 2023 17:15:38 +0000
ROA not after: Fri 11 Jul 2025 17:15:38 +0000
asID: 16629
IP address blocks: 181.203.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392406 (0x5fcd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Validity
Not Before: Jul 10 17:15:38 2023 GMT
Not After : Jul 11 17:15:38 2025 GMT
Subject: CN=d0f800225e714e4c4b872caf643675d4ca4793e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:a8:62:71:df:6c:77:d6:52:7d:a1:72:0d:
92:fc:f0:57:17:75:ae:38:ef:11:47:3f:97:16:fd:
19:6b:16:9f:46:12:77:7d:e4:40:ff:95:6d:96:90:
68:80:53:df:65:2b:55:32:a4:ba:7c:b6:0c:01:0f:
39:0f:98:8d:f7:00:e2:90:a8:5f:28:b7:13:9a:fa:
77:7a:a5:1b:0c:3e:6f:6b:b8:71:35:50:c3:40:ec:
90:b2:05:71:86:d8:6c:c9:28:8e:5a:3f:4d:4a:7a:
21:36:69:e0:5f:17:f0:53:ed:6c:e1:75:7d:80:5e:
8b:3b:28:7b:72:2c:86:34:14:e0:fb:b5:15:74:f0:
a4:26:1c:4c:31:13:ba:6f:4d:6d:01:c6:27:52:1a:
2e:fb:8f:cb:ab:89:b8:c8:d4:df:35:76:43:41:15:
e4:e4:09:96:77:c4:77:5e:11:9f:ce:b4:d6:9d:c1:
d1:1e:22:57:d2:7e:e0:6d:e9:e7:47:b8:79:e4:69:
5f:ee:17:db:f9:e3:f2:23:de:4f:b7:e3:5f:7b:6b:
48:89:dc:be:00:29:6b:80:1e:5c:99:42:cb:99:49:
5e:67:86:e4:af:c1:3d:a6:a9:8b:3c:dc:ba:a8:0e:
ff:c9:8b:32:ff:c1:a6:e9:3d:b8:42:5d:64:ac:7d:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EC:01:0F:3B:E4:26:1F:B4:62:E7:47:A4:5F:68:EA:27:3C:04:2B
X509v3 Authority Key Identifier:
keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/d0f800225e714e4c4b872caf643675d4ca4793e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.203.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:1c:05:c0:14:98:1e:6d:7d:18:2d:5b:b3:20:62:f5:89:ab:
b6:f2:63:75:7b:31:de:46:5f:75:86:e8:f3:76:5e:94:22:d5:
8e:2a:6b:37:b9:71:ee:98:c5:fc:d4:ef:cf:61:cd:eb:e5:74:
35:69:a5:84:a6:ac:c4:2a:b4:7c:30:5c:91:53:1e:ad:0f:5a:
06:e1:b7:0b:05:13:a8:e7:38:31:b7:d5:e9:5d:2f:d4:92:bd:
8c:40:ec:85:88:aa:47:bc:72:31:8d:5f:eb:6b:2c:69:1e:25:
84:06:07:d8:a2:c7:e0:d7:f8:0b:a5:4f:eb:c2:26:3a:a4:bd:
7f:bb:60:fa:79:96:03:ab:3b:02:07:08:5e:fa:be:b0:63:1b:
1a:47:88:8f:90:24:4a:98:d5:af:94:f6:1f:4a:c0:7a:ca:61:
80:52:a4:ff:65:67:6f:ea:13:a2:e0:7e:30:96:a0:74:32:f8:
40:5a:cd:c7:7b:a6:fb:98:13:d7:5f:9f:3f:b7:b0:e0:a9:70:
75:4f:0f:67:e0:db:4d:67:b6:a4:20:31:58:9b:37:b7:00:56:
9d:e6:41:7a:79:8a:f0:3b:80:10:fb:eb:29:5a:2e:08:bf:76:
b3:38:f4:52:fc:e8:a7:27:7c:2a:74:35:b8:af:51:fc:08:4d:
d7:fa:6a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org