Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/a4fa07490d1ab70c32e4c8c24d1bfaf7888aa282.roa
File: a4fa07490d1ab70c32e4c8c24d1bfaf7888aa282.roa (raw, json)
Hash identifier: WFytG3IRGirk9ElP02NptkrGTcWqGEfYj3l9jqYdtkc=
Subject key identifier: 58:7F:42:25:C0:41:62:AE:76:60:66:F8:93:91:23:4B:92:90:50:59
Certificate issuer: /CN=fb50c890f528476e4fa2d2c2022430fcb59129e0
Certificate serial: 015291
Authority key identifier: 1E:4B:B1:5B:13:88:F3:E5:A5:43:14:10:40:C0:C2:63:00:DA:C8:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb50c890f528476e4fa2d2c2022430fcb59129e0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/a4fa07490d1ab70c32e4c8c24d1bfaf7888aa282.roa
Signing time: Wed 28 Jun 2023 12:18:06 +0000
ROA not before: Tue 27 Jun 2023 12:18:06 +0000
ROA not after: Sat 28 Jun 2025 12:18:06 +0000
asID: 60922
IP address blocks: 143.255.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86673 (0x15291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb50c890f528476e4fa2d2c2022430fcb59129e0
Validity
Not Before: Jun 27 12:18:06 2023 GMT
Not After : Jun 28 12:18:06 2025 GMT
Subject: CN=a4fa07490d1ab70c32e4c8c24d1bfaf7888aa282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:96:18:3a:96:3a:b4:bf:77:1e:f4:7e:51:
ae:84:f2:74:5a:14:56:5c:b9:b4:52:0b:20:99:0c:
9f:0f:8b:62:ca:92:20:2c:fd:6c:49:87:06:fc:3f:
a6:f5:b0:65:fd:69:89:ae:eb:5f:3f:13:40:a8:67:
f5:4e:7e:ac:c6:15:11:1c:f9:59:27:15:d9:c9:9c:
8b:0d:cb:d6:6c:2b:f2:d2:85:c9:46:df:bd:83:90:
54:4d:12:1c:a0:20:2d:7f:31:df:20:61:a3:6d:51:
5c:46:f5:19:3e:07:2c:dc:3d:63:2e:98:c5:7a:a3:
34:90:0d:9a:a2:ca:81:0e:4b:ba:ff:d1:a5:fe:e8:
5f:23:63:83:ec:67:b7:42:4b:cc:4f:23:d5:1a:d2:
72:d9:14:f8:9f:da:c0:20:37:bc:57:6d:76:f0:f2:
a0:0c:5d:fd:72:0a:05:3a:59:6a:81:55:e9:c1:7f:
f7:50:e6:27:ef:87:47:a0:ca:96:62:10:9c:59:82:
3c:0a:bd:a8:ba:73:45:6a:86:f3:48:99:82:57:d5:
b2:4a:5e:01:c8:16:75:89:fa:3a:6d:3e:23:c7:de:
fc:03:f8:74:ba:08:32:4c:eb:b2:96:1c:29:97:6f:
0b:2e:9f:b8:74:4f:46:b6:e2:61:f9:a5:0a:79:17:
a6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7F:42:25:C0:41:62:AE:76:60:66:F8:93:91:23:4B:92:90:50:59
X509v3 Authority Key Identifier:
keyid:1E:4B:B1:5B:13:88:F3:E5:A5:43:14:10:40:C0:C2:63:00:DA:C8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb50c890f528476e4fa2d2c2022430fcb59129e0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/a4fa07490d1ab70c32e4c8c24d1bfaf7888aa282.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/fb50c890f528476e4fa2d2c2022430fcb59129e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b4:77:c9:9c:ba:2c:dc:af:db:8c:6c:da:ff:83:89:ea:3f:
21:53:3b:65:e0:17:e3:46:0c:50:fd:a3:3a:69:64:2b:0b:c5:
a9:dd:53:29:88:c6:35:7f:ec:99:13:fd:2d:df:2f:b3:66:ff:
e2:20:26:70:92:79:70:7f:35:a6:61:de:a8:2e:50:a0:30:5d:
7f:fe:a4:9c:6a:c9:6d:09:ee:7d:8b:ee:85:41:21:25:a3:24:
09:c4:8f:7d:a0:45:58:e5:50:f4:50:5f:f0:7d:f9:0a:a4:6d:
78:4d:91:bf:e6:90:32:f4:7f:28:20:80:50:29:85:cc:c9:53:
34:8e:49:f9:59:ab:a2:68:2c:1e:cd:e2:d0:9b:81:3c:19:e9:
b1:2d:ee:62:36:6d:02:06:33:a4:a1:52:85:29:ca:b2:ff:9f:
89:8b:6e:77:a7:01:0b:aa:21:5d:81:b1:e6:1d:82:4b:24:65:
14:49:a7:00:74:81:41:84:2f:4e:84:e5:a1:a2:80:1e:27:4d:
4d:9f:e3:8a:60:98:3f:be:0c:c9:2d:de:1d:fb:89:94:39:4c:
9b:32:f1:7e:a2:60:39:a3:82:0d:c0:3a:61:ee:36:5b:2b:70:
16:1f:7b:6b:cb:62:cd:38:df:86:26:1e:7a:cc:9c:2a:d9:2b:
f7:50:c4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org