Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/2a16041cc35796563a7e54aedb740147bba37e96.roa
File: 2a16041cc35796563a7e54aedb740147bba37e96.roa (raw, json)
Hash identifier: 5CA389QBxeuGcz4EkVM6eTHrSYVjW2Hpu2wEaJJNdMs=
Subject key identifier: 98:34:90:44:A2:4B:E8:BC:85:73:4C:5E:F5:77:8F:B6:4F:1F:C3:D1
Certificate issuer: /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial: 27A9B9
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/2a16041cc35796563a7e54aedb740147bba37e96.roa
Signing time: Tue 02 Jan 2024 19:56:05 +0000
ROA not before: Tue 02 Jan 2024 19:56:05 +0000
ROA not after: Fri 02 Jan 2026 19:56:05 +0000
asID: 262212
IP address blocks: 2800:68:11::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2599353 (0x27a9b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
Validity
Not Before: Jan 2 19:56:05 2024 GMT
Not After : Jan 2 19:56:05 2026 GMT
Subject: CN=2a16041cc35796563a7e54aedb740147bba37e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3d:31:42:3f:a9:84:e7:47:61:cb:80:e9:2a:
f4:b5:f3:9d:f5:ea:97:6f:d5:68:1c:fd:98:20:f8:
7e:3b:c3:30:34:58:b2:75:01:80:90:01:82:82:2b:
27:40:96:25:18:51:82:f1:9e:f4:e9:8a:3f:f1:f5:
62:76:6c:09:25:31:dd:6f:60:23:0b:8f:11:3a:3e:
ce:93:fc:c4:5b:c7:42:04:77:b6:2f:35:41:6c:86:
5f:2c:9e:8c:f9:58:ed:47:3e:65:b2:fe:5e:54:43:
a6:af:e3:f6:7f:8c:3e:98:3c:75:19:c3:0f:8b:eb:
41:29:2e:23:b8:1a:c5:05:bb:e5:0b:67:1f:18:96:
cb:c4:50:b9:e6:66:5c:4a:8d:01:24:13:db:f5:2e:
e7:7e:df:e6:55:b0:88:dc:46:3f:77:dc:6b:f2:62:
d3:ca:61:36:42:27:5c:40:5c:8a:0d:e5:04:53:cb:
c1:0d:ba:61:e1:42:46:e6:ce:e8:bc:02:92:bb:13:
ea:a8:f7:f1:b3:90:62:f0:1a:97:3d:0f:01:f7:7d:
4d:f5:17:62:cc:74:58:16:39:d7:94:7b:bc:59:82:
8c:3a:79:7c:c7:64:c5:86:3f:00:b8:2e:49:e4:93:
cf:9c:3e:21:5a:7a:dc:d6:76:1d:14:2b:f2:9b:34:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:34:90:44:A2:4B:E8:BC:85:73:4C:5E:F5:77:8F:B6:4F:1F:C3:D1
X509v3 Authority Key Identifier:
keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/2a16041cc35796563a7e54aedb740147bba37e96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2800:68:11::/48
Signature Algorithm: sha256WithRSAEncryption
6d:e8:fb:de:ea:84:79:9f:14:3b:0b:de:e7:fa:a3:84:36:7b:
50:64:b3:74:be:46:de:17:5a:90:93:ad:b3:11:6b:ae:89:04:
9b:5c:a2:54:b5:92:3c:64:66:2e:e8:1f:8b:bf:cd:27:6a:72:
e0:11:60:55:61:61:5a:f7:5f:80:1c:cd:f7:ae:43:91:16:65:
be:71:59:1e:c5:8f:95:21:1e:5c:16:af:b3:09:5f:18:c3:c7:
1f:aa:7f:c6:31:c5:56:63:21:db:09:33:18:44:3e:8e:7a:e9:
eb:2e:da:38:92:1d:af:ba:bb:1c:3f:39:56:b7:62:a4:26:86:
69:ce:50:a0:e6:eb:61:01:b5:8d:42:ce:65:53:36:8f:93:94:
33:11:ea:fe:e5:e2:ec:03:92:0d:19:15:ce:cd:e4:c5:6b:fa:
dc:26:a1:8f:46:c2:07:ca:9e:b3:c2:1b:63:92:57:3e:f2:93:
75:ad:a1:ba:d0:26:6c:1e:6f:11:9c:b2:31:99:f4:1b:3d:e5:
8c:d5:e4:0a:94:a0:5e:6d:b0:3e:70:2a:85:b8:00:c2:45:98:
38:7a:51:37:1c:0d:ab:14:90:f6:af:4d:1c:a8:89:81:44:b8:
ff:69:ee:a6:30:55:51:0a:40:67:29:0f:35:cb:df:73:35:89:
f3:81:fe:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 03:00:56 2024 by rpki-client on console-fra.rpki-client.org