Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/1a1091f1abe4bc1a775c0c8b74440a73d3e00a77.roa
File: 1a1091f1abe4bc1a775c0c8b74440a73d3e00a77.roa (raw, json)
Hash identifier: Mn2FRM/ICHNJMcZrMbLcTJXMWHkc8qjr7zuIugyuQKc=
Subject key identifier: 1E:CC:06:AF:1E:EF:6B:E3:CC:2D:90:D4:16:08:5C:72:E3:03:94:DA
Certificate issuer: /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial: 27A74B
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/1a1091f1abe4bc1a775c0c8b74440a73d3e00a77.roa
Signing time: Tue 02 Jan 2024 19:53:42 +0000
ROA not before: Tue 02 Jan 2024 19:53:41 +0000
ROA not after: Fri 02 Jan 2026 19:53:41 +0000
asID: 52343
IP address blocks: 2800:68:15::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2598731 (0x27a74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
Validity
Not Before: Jan 2 19:53:41 2024 GMT
Not After : Jan 2 19:53:41 2026 GMT
Subject: CN=1a1091f1abe4bc1a775c0c8b74440a73d3e00a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ac:96:4e:3f:52:e7:e5:6b:82:4c:ae:6f:2c:
fc:21:c2:29:5b:80:33:92:4d:ba:b3:ca:61:8e:c0:
e6:8a:46:32:88:3d:dc:a8:fb:68:9f:0f:6d:ef:67:
a8:ff:22:fc:37:fc:31:34:fb:fe:97:e8:0f:75:95:
77:f4:b4:98:12:94:7d:9e:bf:88:47:db:d9:22:5f:
25:45:f4:1e:69:1a:58:d2:72:fe:c1:fd:0e:a4:94:
b0:56:26:6b:9e:e6:71:bf:fe:fe:97:86:31:8d:cd:
df:3b:32:6e:41:c9:32:1c:9a:8e:9d:a4:3e:f3:9e:
d7:ee:22:31:85:6e:53:42:cb:86:35:ea:f8:8a:84:
54:5f:43:9b:73:a3:28:02:b7:a1:ef:7d:79:f6:7a:
f0:80:ce:3d:92:9c:e6:c7:aa:03:18:bf:66:4d:a5:
79:c1:7f:39:78:bf:85:d0:e3:00:d7:bb:83:53:6d:
1e:03:31:b6:74:42:c1:b4:ef:da:44:8a:e2:fa:9e:
47:1b:ed:00:4d:ec:a6:dd:19:69:23:6b:6c:eb:3a:
ce:00:25:f5:b9:a4:1b:89:24:72:3c:56:f3:be:49:
12:d4:bf:97:d5:bd:f7:c2:35:5e:21:5b:a7:07:7b:
94:dd:8f:8a:29:6d:b8:e7:ac:5e:be:9b:40:f3:ca:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CC:06:AF:1E:EF:6B:E3:CC:2D:90:D4:16:08:5C:72:E3:03:94:DA
X509v3 Authority Key Identifier:
keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/1a1091f1abe4bc1a775c0c8b74440a73d3e00a77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:68:15::/48
Signature Algorithm: sha256WithRSAEncryption
00:66:ce:b4:ba:d2:6c:7c:2f:1f:92:f9:df:a1:cf:e1:ad:7d:
09:da:e8:14:3c:e3:1b:c7:8c:2f:55:78:65:c6:b6:11:e9:3c:
dc:ab:b1:d1:05:29:2b:f0:d4:3a:cb:19:55:19:73:7f:88:6c:
2a:62:7a:fa:07:c9:76:85:65:ab:28:25:ba:28:32:ea:05:1d:
94:48:fd:e3:92:ad:da:d0:60:98:89:8e:69:3f:8d:6a:23:af:
a8:cc:a8:59:cc:41:7d:ce:f3:c8:ac:b1:a7:42:cb:f0:04:4f:
16:b4:cf:68:d1:29:0f:b7:38:b4:02:f8:80:fc:fd:d7:9e:84:
18:bb:ce:3e:9c:51:2c:6b:62:1c:90:d2:ca:3b:ea:67:66:94:
fd:2a:01:f0:88:9b:7e:cd:1c:ba:61:cf:c2:c4:9d:11:20:ec:
51:24:27:f6:f8:b1:d7:ad:1b:e8:99:0b:31:9b:34:45:7f:8a:
4e:45:91:ce:91:9a:55:d2:1a:12:14:36:94:a6:97:c9:e6:11:
e0:76:81:cd:2e:79:a6:01:6b:19:0f:f9:e5:69:50:11:a1:52:
13:a5:67:cb:cb:8b:fb:8a:e9:83:95:36:c2:eb:d6:d9:48:a3:
cc:f3:09:6f:ad:b1:b4:de:22:ea:74:5c:3e:d1:82:d6:c1:58:
fc:a8:bc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:56 2024 by rpki-client on console-fra.rpki-client.org