Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/2fd07742940b7cec8eea638d442bba3e96bc5f03.roa
File: 2fd07742940b7cec8eea638d442bba3e96bc5f03.roa (raw, json)
Hash identifier: RikwDd3DWdiAmM+LgMZyS7c44sAEVSwZkflJlSr/OYE=
Subject key identifier: 85:E0:B9:45:AD:42:24:32:1C:B8:DF:B7:67:BE:A1:5D:89:FD:F6:CA
Certificate issuer: /CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
Certificate serial: B639
Authority key identifier: 94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/2fd07742940b7cec8eea638d442bba3e96bc5f03.roa
Signing time: Wed 12 Apr 2023 22:22:27 +0000
ROA not before: Mon 10 Apr 2023 22:19:46 +0000
ROA not after: Sat 12 Apr 2025 22:19:46 +0000
asID: 14080
IP address blocks: 2801:1f9::/48 maxlen: 48
2801:1f9:3::/48 maxlen: 48
2801:1f9:5::/48 maxlen: 48
2801:1f9:7::/48 maxlen: 48
2801:1f9:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46649 (0xb639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
Validity
Not Before: Apr 10 22:19:46 2023 GMT
Not After : Apr 12 22:19:46 2025 GMT
Subject: CN=2fd07742940b7cec8eea638d442bba3e96bc5f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:25:78:fa:b0:6f:55:39:66:b5:99:ed:f0:
6b:36:d3:9e:a1:a2:d9:3b:28:88:ca:77:57:3c:9d:
0e:11:18:88:97:75:f1:e7:f3:83:5b:2c:5d:2b:92:
f7:af:e0:a2:4e:fb:1b:60:c1:a5:6c:85:1f:4c:8b:
88:1d:68:d5:4e:d1:b0:9a:d8:22:82:4e:b5:62:9b:
85:ff:35:8e:81:8e:9d:05:5e:3c:a7:4c:61:df:4d:
fd:29:97:9e:44:40:7f:67:a3:fb:d3:8a:16:38:c0:
a7:6d:84:49:7b:7e:38:af:e1:67:0b:3e:f7:bf:1d:
e1:a2:bb:5a:ca:f8:0e:19:ea:f0:da:e8:36:7c:56:
fc:37:96:af:bf:44:ee:db:bf:fb:e0:20:20:3d:a3:
ae:31:f6:72:26:77:5c:c6:bb:5f:1e:01:c5:b8:d9:
d5:81:1d:fd:8a:9b:cc:ad:02:b3:d2:eb:0f:06:92:
36:66:0e:10:2f:73:59:13:27:24:b5:1c:6f:f7:fd:
08:7b:1b:a9:a1:01:af:f6:ee:07:22:60:9b:34:14:
5c:d7:ef:d2:5d:67:3a:8b:d4:f9:a3:28:28:8e:57:
68:24:d0:b8:94:ca:54:6a:0f:fe:fd:01:8d:f6:0e:
6c:40:1f:d1:d5:7b:c5:c9:7e:e5:c2:dc:08:4e:9e:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E0:B9:45:AD:42:24:32:1C:B8:DF:B7:67:BE:A1:5D:89:FD:F6:CA
X509v3 Authority Key Identifier:
keyid:94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/2fd07742940b7cec8eea638d442bba3e96bc5f03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/ff21b6b8874efa4815d9d8305ad936329fe73ac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1f9::/48
2801:1f9:3::/48
2801:1f9:5::/48
2801:1f9:7::/48
2801:1f9:9::/48
Signature Algorithm: sha256WithRSAEncryption
61:40:0e:45:42:69:be:63:39:4c:90:55:c0:a8:24:ce:5f:66:
7d:cc:26:8c:95:c9:b4:ff:e8:be:fe:48:c7:b9:5e:22:82:4c:
7a:3b:6c:45:60:86:49:ee:7c:da:b3:6d:07:db:2d:42:f6:4c:
08:04:13:c5:ef:42:54:6e:4c:e3:90:70:89:e8:49:43:cc:d3:
f6:78:c5:6b:92:44:a8:fb:21:c9:b8:27:ef:92:5b:39:b5:44:
46:0a:ef:85:ec:22:42:51:47:61:f4:05:2a:05:36:8c:4a:fd:
41:8c:74:cf:2d:80:a5:97:0c:90:2e:73:64:01:39:bf:94:c6:
36:5a:29:bd:7a:73:0c:c9:00:cf:4d:9a:c5:ee:0d:79:09:d5:
72:12:b0:a4:e7:a9:10:a4:89:8e:37:05:8a:67:90:e0:7d:f5:
e1:2f:6a:d0:4c:c5:2e:44:55:ca:97:e5:e1:0f:53:56:4d:26:
fd:93:7d:0b:a2:f3:4b:e9:c6:a6:de:5c:80:e8:67:b6:21:16:
35:e3:25:77:24:7f:24:9f:39:48:6a:c1:58:10:52:24:ae:6e:
18:4a:4a:97:1f:d7:43:80:26:43:3b:c6:db:36:e5:f9:27:01:
35:87:35:df:47:e8:27:f3:19:b4:b7:3b:47:52:3d:8e:d6:22:
e4:e2:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org