Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/c57fdf7e2444db292cdc7727428f2960b10fb83b.roa
File: c57fdf7e2444db292cdc7727428f2960b10fb83b.roa (raw, json)
Hash identifier: Mc/lz0YcNyKu3pedrpCofrGmZ07GmF3UW46rO4bPaxo=
Subject key identifier: 8F:50:57:3C:C1:C0:66:FF:92:02:D4:FC:5E:E7:88:A0:E3:D7:0C:4D
Certificate issuer: /CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
Certificate serial: 02B6
Authority key identifier: 94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/c57fdf7e2444db292cdc7727428f2960b10fb83b.roa
Signing time: Thu 16 Mar 2023 22:33:17 +0000
ROA not before: Wed 15 Mar 2023 22:29:00 +0000
ROA not after: Sun 16 Mar 2025 22:29:00 +0000
asID: 3816
IP address blocks: 2801:1f9::/48 maxlen: 48
2801:1f9:3::/48 maxlen: 48
2801:1f9:5::/48 maxlen: 48
2801:1f9:7::/48 maxlen: 48
2801:1f9:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 694 (0x2b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
Validity
Not Before: Mar 15 22:29:00 2023 GMT
Not After : Mar 16 22:29:00 2025 GMT
Subject: CN=c57fdf7e2444db292cdc7727428f2960b10fb83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:27:bf:4f:27:d0:16:41:a1:0c:13:8a:b7:60:
10:eb:c7:a2:0b:e7:c1:a4:e4:b1:b2:29:f7:81:3e:
a7:cc:d3:9b:4e:08:55:f4:ce:7f:1d:ea:2e:8c:04:
2d:d0:f1:ac:94:36:59:dd:05:57:72:ec:0f:b8:e0:
21:83:6a:30:99:51:6b:9f:2d:eb:1a:80:37:90:96:
40:de:9f:b2:46:73:93:28:23:e2:51:44:86:b4:8e:
a8:57:b9:f2:18:93:78:dd:02:82:3e:1d:47:b1:3e:
67:66:11:6e:0a:d2:17:0c:e3:9f:2d:d1:99:83:41:
a4:ec:fc:26:31:58:8c:56:a1:c0:b3:3d:ed:8e:12:
10:19:05:d1:20:c8:98:2a:27:19:34:50:c5:1d:17:
62:95:47:3b:c3:dc:26:39:f6:0b:72:ad:c7:6c:a7:
45:c4:af:73:d8:48:eb:d9:0b:ad:82:f4:e7:b4:e3:
f7:c8:89:b5:dc:5b:ae:29:55:d7:f1:ef:32:d2:6f:
81:35:08:0f:d4:71:b6:2a:0b:ec:b7:64:96:03:d4:
b4:f0:1e:c5:fe:12:9b:71:98:60:8a:f4:cd:8a:cf:
92:e1:41:e7:25:a0:e1:6f:93:f8:26:66:c4:7b:b1:
47:32:0d:87:3c:29:78:4a:de:e0:fb:c2:df:a0:3d:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:50:57:3C:C1:C0:66:FF:92:02:D4:FC:5E:E7:88:A0:E3:D7:0C:4D
X509v3 Authority Key Identifier:
keyid:94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/c57fdf7e2444db292cdc7727428f2960b10fb83b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/ff21b6b8874efa4815d9d8305ad936329fe73ac8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:1f9::/48
2801:1f9:3::/48
2801:1f9:5::/48
2801:1f9:7::/48
2801:1f9:9::/48
Signature Algorithm: sha256WithRSAEncryption
41:9b:4f:56:77:e8:bf:47:72:6f:1b:a2:56:f6:9c:f2:a7:6c:
2f:77:83:4a:cf:43:10:d2:c3:05:f5:0a:b1:28:d6:b2:cb:31:
31:9d:7b:62:0e:06:6f:a8:91:51:86:d4:ca:e6:a0:bc:af:d8:
93:91:d8:f9:db:47:88:6d:17:74:75:4f:04:01:d4:de:01:e4:
bd:f8:29:f0:3d:55:a9:2c:0f:13:45:50:21:7e:c1:ee:d9:88:
5c:88:67:4c:7d:f9:05:cb:46:63:4f:aa:3f:1b:20:c9:78:f8:
ce:94:b2:3d:fd:48:78:3d:85:01:4f:4c:fb:ba:a0:7e:36:45:
4f:cc:e2:6a:1a:91:8d:2f:3e:25:25:92:49:d7:06:de:d8:ad:
60:8f:fa:25:42:ff:61:11:36:9e:ec:88:bc:3f:72:14:60:42:
73:6a:a6:01:86:7a:63:28:5a:de:37:de:09:da:52:98:aa:50:
27:27:43:a7:8b:bf:e4:b0:f4:68:c4:d0:cf:4b:a0:92:56:68:
23:0f:26:14:c5:d8:d4:3e:5d:aa:a4:cb:df:68:bf:1e:c8:f5:
93:7a:ba:f1:d7:e8:f7:bb:b1:f2:f4:e4:ca:01:23:b8:7c:32:
d6:70:69:55:e8:be:37:47:a6:a6:95:c7:a8:c2:34:89:db:67:
bb:3c:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org