Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4c7f4497b468ddb49077ca2c9cccce5200eae524.roa
File: 4c7f4497b468ddb49077ca2c9cccce5200eae524.roa (raw, json)
Hash identifier: irzLoL0KcvAOs1ZNFJHudG7URV6s0RKZo4JVlYjNJVs=
Subject key identifier: 6E:0E:AA:11:28:02:35:A6:F5:95:25:3C:D3:5A:26:C5:9F:9E:81:93
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 106763
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4c7f4497b468ddb49077ca2c9cccce5200eae524.roa
Signing time: Wed 24 Mar 2021 14:44:17 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 132.247.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1075043 (0x106763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=4c7f4497b468ddb49077ca2c9cccce5200eae524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:0e:d3:3a:f2:2b:70:07:29:cb:eb:cc:8d:
01:92:40:65:fd:09:37:8d:6f:3e:45:4f:bf:51:4c:
24:f6:3b:eb:ca:33:ca:98:91:ac:0d:da:da:f6:74:
86:71:b1:19:4b:6a:c6:ec:cc:99:82:a4:8d:14:ed:
07:ba:f3:8f:55:0b:4d:45:6a:cc:b9:16:05:86:7d:
18:58:ec:bb:e5:2a:60:3d:1f:6d:2a:c2:22:84:ec:
1e:cf:78:93:b6:08:ae:77:1b:ca:1c:5a:11:d1:cc:
4a:cf:a0:7a:72:6a:1e:cb:52:aa:dd:0e:ad:d2:6e:
85:ab:c6:5f:32:91:03:f8:28:fc:ac:6b:c0:cc:4d:
95:04:9b:44:69:ef:25:df:9c:ab:f8:14:e8:97:06:
9c:d6:ab:d6:ba:51:87:de:6a:0b:49:d5:c0:e0:56:
d3:5b:36:31:22:82:df:08:e0:f1:5a:1d:5d:d5:85:
bf:bf:c7:fb:37:f7:9e:ee:97:12:36:3a:05:9a:ce:
ab:d3:35:24:0a:0e:58:70:b0:85:3f:16:18:be:fb:
af:b8:3e:30:fd:74:56:65:30:4f:f1:d1:be:47:d3:
7a:c0:36:a0:a4:4b:72:4c:bb:99:92:69:c9:c9:de:
eb:9e:9b:41:bc:93:62:e4:45:b7:f1:8b:d1:1d:46:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0E:AA:11:28:02:35:A6:F5:95:25:3C:D3:5A:26:C5:9F:9E:81:93
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4c7f4497b468ddb49077ca2c9cccce5200eae524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.247.78.0/24
Signature Algorithm: sha256WithRSAEncryption
84:3b:68:fd:3c:79:7a:0b:28:c2:3d:01:49:b7:aa:8b:38:51:
eb:74:ba:1c:92:09:bf:55:6d:9e:24:45:b7:f5:13:a8:ac:79:
98:e0:00:fc:fc:de:4e:4f:60:19:c8:ee:c8:d6:8d:1d:34:e8:
16:9e:a6:84:a9:3a:d6:53:15:d2:17:3a:a5:a7:48:13:67:18:
84:64:d6:b5:18:a5:b9:23:ec:eb:61:95:7e:e1:99:f6:dd:90:
e0:c5:29:3b:0b:4c:88:6d:78:db:1f:ff:f1:c5:69:67:1e:00:
74:d7:d9:63:a7:8a:85:cd:72:fb:19:4a:28:2a:aa:e2:55:b4:
d9:2a:b8:27:f5:6b:68:7a:2d:3e:ce:e9:d8:50:0a:54:ff:d5:
b7:87:3c:03:33:d8:61:10:04:05:6f:aa:91:78:b3:0c:c7:44:
b0:3b:28:ae:a8:d8:8a:8b:07:2c:d3:88:0b:8f:aa:6e:63:ad:
a9:27:a3:17:f5:21:7c:1c:59:b3:c5:ab:c3:d6:c5:17:c7:81:
e7:9e:8b:61:cb:8c:bf:ba:2d:91:4a:05:34:09:a4:19:aa:d9:
ae:6f:f9:bc:83:e3:f9:a5:fb:9e:a4:ba:1b:67:57:d0:e4:1b:
fa:6f:ee:1a:f8:fb:d8:93:d6:e3:91:08:01:62:4f:dc:f0:08:
f1:76:e8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:04 2024 by rpki-client on console-ams.rpki-client.org