Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/c2afc8106243aca26beda358d9c3d79de4f52a27.roa
File: c2afc8106243aca26beda358d9c3d79de4f52a27.roa (raw, json)
Hash identifier: rGIM/tel0NIjj3iYPVC8Ts3VDVjhd5O1AW0A4cKyqRM=
Subject key identifier: C0:C6:19:19:F0:0F:BC:C7:3F:14:9C:14:3A:8A:F9:30:B8:40:5B:2E
Certificate issuer: /CN=f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb
Certificate serial: 07C5AB
Authority key identifier: 56:61:2E:13:6C:AF:57:C0:54:E7:1B:C5:5A:79:B9:9D:78:9E:1A:8B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/c2afc8106243aca26beda358d9c3d79de4f52a27.roa
Signing time: Fri 01 Mar 2024 14:00:54 +0000
ROA not before: Fri 01 Mar 2024 14:00:53 +0000
ROA not after: Sun 01 Mar 2026 14:00:53 +0000
asID: 27951
IP address blocks: 2803:7c60::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509355 (0x7c5ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb
Validity
Not Before: Mar 1 14:00:53 2024 GMT
Not After : Mar 1 14:00:53 2026 GMT
Subject: CN=c2afc8106243aca26beda358d9c3d79de4f52a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:20:52:d5:75:34:ae:e2:79:4c:fb:1c:e1:
52:50:d6:45:70:9b:cf:b8:21:96:d2:c8:c4:73:ed:
3b:9c:6a:16:b3:78:47:d9:38:83:01:94:8c:0f:99:
10:dd:1c:a8:2f:68:79:07:7d:f4:ca:80:0d:a9:32:
b1:d1:bf:3a:2c:9b:9b:3e:58:6b:2f:e9:dc:84:29:
ef:90:95:50:0b:4e:8e:7e:f7:c7:cb:21:8c:f1:d7:
ef:e9:32:0e:b4:f3:3a:f8:82:a3:2d:ae:c0:1e:ec:
de:60:21:ea:fc:49:ec:b1:ec:fc:bf:c7:fb:93:71:
e7:8c:cb:7d:a2:39:80:54:8d:2c:bb:5e:5a:ea:27:
14:5c:5a:98:74:c1:14:af:6b:80:0e:51:7b:8c:79:
62:38:6a:4a:8e:45:bd:c3:58:80:a8:db:fa:ac:c2:
27:44:6d:ac:24:51:69:7b:9d:66:aa:e1:c2:43:6b:
22:de:03:22:af:3f:85:2c:03:e9:90:c0:9c:32:a3:
94:44:8b:0e:e7:da:2c:80:1e:93:23:86:8c:83:c0:
08:c5:97:e6:29:e9:e7:c3:2e:f9:b7:c1:3f:e0:34:
ef:90:9a:5e:55:12:d2:b7:24:30:21:fe:7b:4d:3f:
3a:e2:ac:f8:3c:e6:fb:56:74:fa:8a:90:34:a7:a7:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C6:19:19:F0:0F:BC:C7:3F:14:9C:14:3A:8A:F9:30:B8:40:5B:2E
X509v3 Authority Key Identifier:
keyid:56:61:2E:13:6C:AF:57:C0:54:E7:1B:C5:5A:79:B9:9D:78:9E:1A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/c2afc8106243aca26beda358d9c3d79de4f52a27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/84c08841-437f-4c6a-91e6-183763f57c51/f4cc2529c25b6ff72b64f9e86fd3c50d5a4a3ccb.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:7c60::/32
Signature Algorithm: sha256WithRSAEncryption
68:e2:9b:62:1f:b9:55:ed:17:b5:8e:d0:77:9d:36:06:7f:a6:
dc:35:b0:18:8a:07:5b:d3:b2:75:fd:11:d1:b4:43:57:84:10:
3e:f4:4d:d6:f8:9a:bd:a7:1a:68:cd:be:a3:3f:5b:96:54:68:
de:a1:1a:e4:f8:bf:b9:2b:73:91:c6:82:0c:0f:f7:0b:f8:48:
f2:71:34:51:38:e3:f4:cf:fa:1d:f1:ea:80:83:54:d4:a4:84:
7e:47:f5:54:ea:29:fd:e9:8b:b9:c9:cc:f7:a6:0c:6e:7e:80:
b7:70:e0:24:c9:bf:bc:0f:7f:45:d4:1d:16:43:31:5a:c5:95:
ec:a5:4b:02:0b:e5:a5:42:30:be:5a:d0:76:2a:1e:ab:03:47:
06:66:cc:ac:f4:54:d5:df:19:ad:0d:cb:9f:0d:0c:59:95:35:
ca:3f:6f:46:14:f0:7f:88:e9:c6:35:4f:e6:bc:8f:16:04:e0:
3c:ff:62:0c:50:43:25:70:16:57:c8:64:bb:bb:10:40:ba:d0:
14:a3:ca:cf:c3:e4:cb:51:78:23:de:7c:d9:1c:cf:02:e0:1c:
33:2f:7c:87:12:a0:33:93:33:4a:6f:33:7a:1a:57:8c:68:6e:
75:71:cc:20:5d:36:b1:aa:ba:0e:1e:55:56:c3:0c:2f:22:aa:
3e:16:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org