Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4eb475c8d063524bc235643d7e07efef5abac140.roa
File: 4eb475c8d063524bc235643d7e07efef5abac140.roa (raw, json)
Hash identifier: mPM4J6Tm3btfwZ8HiEU1CigCjs9u0F85lGR26pqVDco=
Subject key identifier: 8F:19:A0:DB:CA:9E:98:12:BE:5E:E9:1E:96:FF:43:B8:DA:63:AA:3B
Certificate issuer: /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial: 0F6A9B
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4eb475c8d063524bc235643d7e07efef5abac140.roa
Signing time: Wed 24 Mar 2021 14:43:52 +0000
ROA not before: Wed 24 Mar 2021 14:43:44 +0000
ROA not after: Tue 24 Mar 2026 14:43:44 +0000
asID: 278
IP address blocks: 2001:1218:6009::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1010331 (0xf6a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Validity
Not Before: Mar 24 14:43:44 2021 GMT
Not After : Mar 24 14:43:44 2026 GMT
Subject: CN=4eb475c8d063524bc235643d7e07efef5abac140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:06:5a:eb:cf:ca:7a:91:cc:90:78:72:5f:
c9:86:36:d0:9a:19:d0:f1:68:b6:05:dc:80:3d:68:
a8:48:01:b5:39:dd:b2:e0:d6:d7:bf:51:f9:55:01:
01:02:90:6f:d6:79:da:92:1c:1e:da:31:1c:50:43:
ae:45:b5:37:b3:54:86:ff:e9:74:b2:ac:b1:9a:ca:
93:4e:a5:85:ad:a0:d9:87:11:db:ee:47:02:eb:00:
73:00:90:2c:59:16:45:6f:71:f0:63:df:9b:da:3f:
a0:1a:c0:69:23:08:67:d3:8e:63:24:2c:33:9c:94:
8b:d5:b8:97:66:8a:b0:3d:ba:61:6c:fc:c3:e0:69:
9a:2d:e0:71:23:41:c9:be:ad:cd:4f:c4:fb:70:bc:
d7:a1:e9:c2:e6:61:8e:59:05:59:ee:5b:3e:4d:d3:
3b:be:f4:be:01:99:f7:02:5f:d3:16:61:bb:a7:3d:
6c:70:2e:ec:07:a4:c3:f7:25:5d:40:41:68:8c:19:
f0:56:4c:88:99:e9:78:99:d3:5e:49:3d:5c:7d:f3:
d8:8e:fd:35:70:56:81:65:20:fa:1b:fb:34:27:b6:
51:58:28:67:b6:45:08:25:04:bf:17:0e:77:26:a0:
3f:46:e4:b8:b5:da:a6:a3:44:34:79:e6:5b:5a:e7:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:19:A0:DB:CA:9E:98:12:BE:5E:E9:1E:96:FF:43:B8:DA:63:AA:3B
X509v3 Authority Key Identifier:
keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/4eb475c8d063524bc235643d7e07efef5abac140.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1218:6009::/48
Signature Algorithm: sha256WithRSAEncryption
bf:98:64:22:b1:95:09:af:97:01:c2:d0:c0:64:ee:7e:ba:24:
4c:6f:51:c5:27:d9:33:c0:4f:43:52:0f:d1:d9:0a:c3:72:0f:
a8:f5:79:71:a7:21:f4:ad:ab:3d:31:38:45:f6:83:2b:79:b4:
ec:e2:08:da:22:ec:f7:5d:20:d7:f6:00:fc:df:1c:50:fa:98:
74:80:0a:33:27:e0:33:99:06:9a:74:4a:3b:20:97:87:f0:0b:
e0:5d:66:aa:1d:38:17:c9:1a:8e:7f:8d:a3:3c:23:a4:03:99:
c5:ea:af:66:57:01:31:b4:83:1a:db:1f:32:2e:19:c6:a0:cd:
cd:5a:be:82:0b:4f:cc:02:41:e8:d6:84:ed:10:ba:88:44:66:
bf:4e:6e:94:ae:9c:83:e4:d9:5a:b3:f0:c9:69:b7:5b:a3:eb:
c5:1f:1e:a4:e2:38:bd:ad:88:88:03:2a:8f:45:09:d7:17:91:
ef:e6:8f:53:ec:f7:b0:79:8f:37:d5:5c:a0:99:10:5b:0d:66:
0f:71:6c:94:7f:bc:20:e1:0d:82:bd:8b:11:64:67:2c:b1:a4:
e1:66:01:b3:12:3d:82:78:a3:2b:be:8d:f1:60:63:27:75:57:
32:19:c4:7f:61:66:34:7d:0d:06:54:0f:07:a0:40:c4:cb:3e:
e4:57:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org