Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/868e503e-03de-4b68-84ed-607aca8dce64/3b7d8384c25216e1755f177c6bddc73176bcd629.roa
File: 3b7d8384c25216e1755f177c6bddc73176bcd629.roa (raw, json)
Hash identifier: wpmJUFjEj3xWZVUjP29ABFpuc4nRgINV2VDs1fGYIbU=
Subject key identifier: 0F:B3:1C:D9:40:9D:59:4F:7B:61:8C:0F:F9:00:7A:B2:41:14:A7:45
Certificate issuer: /CN=ca317a9159c9c766333ea54fd7eb64edf60ce61d
Certificate serial: 0134
Authority key identifier: 85:35:EC:7F:E7:39:FB:7C:C8:3F:7E:87:7B:F3:19:84:B2:03:F5:1D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca317a9159c9c766333ea54fd7eb64edf60ce61d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/868e503e-03de-4b68-84ed-607aca8dce64/3b7d8384c25216e1755f177c6bddc73176bcd629.roa
Signing time: Tue 21 Nov 2023 17:29:16 +0000
ROA not before: Tue 21 Nov 2023 17:29:16 +0000
ROA not after: Fri 21 Nov 2025 17:29:16 +0000
asID: 18734
IP address blocks: 2801:c4:38::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 308 (0x134)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca317a9159c9c766333ea54fd7eb64edf60ce61d
Validity
Not Before: Nov 21 17:29:16 2023 GMT
Not After : Nov 21 17:29:16 2025 GMT
Subject: CN=3b7d8384c25216e1755f177c6bddc73176bcd629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:be:4f:3b:7b:c4:01:37:8a:28:89:c2:b6:
26:d9:78:ac:b9:b4:74:7a:05:2c:fe:eb:81:99:f8:
1e:cc:df:dc:c3:d6:3c:d1:45:5f:d5:e8:b0:31:66:
3b:cb:d2:98:98:c3:bb:f1:e2:12:fd:4d:0d:b9:64:
39:c4:5f:d0:5f:2f:c7:38:67:3d:73:8f:f4:90:b5:
89:e4:04:df:ba:7e:e6:85:e1:79:9d:62:7e:34:22:
32:cd:30:88:64:c2:4a:72:49:b4:f2:8d:e5:40:dd:
b1:2f:a3:ac:73:17:13:87:06:5c:6e:49:d8:7e:ef:
5b:85:ac:05:ad:2c:ba:ee:29:92:db:e0:ce:28:a3:
f7:fb:a4:3d:7a:b5:74:1f:33:f1:25:2a:ff:16:0d:
63:1a:cf:d9:55:5b:5f:4c:e4:51:89:e1:5f:07:47:
92:db:93:74:24:b5:02:8d:a2:7c:f4:ac:ea:8b:f3:
0b:f1:82:da:40:3c:fe:d6:38:e1:6b:da:0d:a3:98:
0a:4f:c3:05:61:b1:2c:83:7d:3f:33:33:97:42:f0:
61:db:31:c7:30:62:aa:7f:73:1e:7d:60:78:f0:66:
7d:9e:14:c3:4e:3d:73:ac:84:ec:d8:7e:97:30:6a:
cd:df:f4:48:c5:6a:93:bc:0b:44:d5:6a:1c:df:f3:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B3:1C:D9:40:9D:59:4F:7B:61:8C:0F:F9:00:7A:B2:41:14:A7:45
X509v3 Authority Key Identifier:
keyid:85:35:EC:7F:E7:39:FB:7C:C8:3F:7E:87:7B:F3:19:84:B2:03:F5:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca317a9159c9c766333ea54fd7eb64edf60ce61d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/868e503e-03de-4b68-84ed-607aca8dce64/3b7d8384c25216e1755f177c6bddc73176bcd629.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/868e503e-03de-4b68-84ed-607aca8dce64/ca317a9159c9c766333ea54fd7eb64edf60ce61d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:c4:38::/48
Signature Algorithm: sha256WithRSAEncryption
41:1a:90:40:bb:f7:9f:ed:ba:30:c2:9a:e8:a1:8f:63:43:42:
b5:e4:7f:05:29:f8:6c:36:1e:59:1e:87:d3:54:1b:c3:79:d1:
25:a8:2c:92:2e:c9:3d:3d:65:a4:7b:62:ac:19:2b:cf:7d:b9:
f6:fb:c7:75:24:3d:fe:52:a0:04:66:aa:40:a7:a7:44:b2:ee:
5b:b2:b7:f8:d2:c5:97:0f:85:d0:83:76:68:5e:79:0d:67:2e:
b4:23:46:5c:a2:11:ac:03:de:61:3e:bf:4c:0a:37:a7:d3:6d:
a8:99:b4:66:9b:1e:40:99:3c:6c:61:6b:e8:5b:4a:81:a1:49:
b3:61:0b:e6:05:57:f1:85:a2:84:d6:31:10:ba:2b:a1:28:7c:
28:5a:52:0a:7f:70:d3:cb:0c:71:f5:37:8a:fa:f7:c3:ae:31:
00:c2:0c:cf:5e:2d:c7:91:2b:c2:b8:ae:fe:9a:74:d9:5f:25:
6b:4b:06:5e:9c:ba:c8:87:0e:69:94:03:ca:87:c0:ff:ee:f2:
64:25:df:09:a4:6c:47:96:80:69:97:4d:66:a4:85:cc:b4:9c:
cf:6d:ff:bf:0f:ae:1e:6b:12:ed:10:f4:f3:01:ea:16:06:c6:
55:f6:00:e4:11:65:b8:00:f4:de:33:fe:03:8a:b4:20:95:e4:
a4:5b:d5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org