Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/dab2357384ac2914ece3d01ea804523b951bd717.roa
File: dab2357384ac2914ece3d01ea804523b951bd717.roa (raw, json)
Hash identifier: PwZw3GyQOIbyLOVLt3YfhgGQi2uPzh4CdrKw0TKNvTA=
Subject key identifier: B7:6B:E8:09:91:54:26:08:D7:4A:71:A0:16:3E:6D:E0:DA:C2:7E:B1
Certificate issuer: /CN=fb50c890f528476e4fa2d2c2022430fcb59129e0
Certificate serial: 014652
Authority key identifier: 1E:4B:B1:5B:13:88:F3:E5:A5:43:14:10:40:C0:C2:63:00:DA:C8:5D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb50c890f528476e4fa2d2c2022430fcb59129e0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/dab2357384ac2914ece3d01ea804523b951bd717.roa
Signing time: Wed 28 Jun 2023 12:16:27 +0000
ROA not before: Tue 27 Jun 2023 12:16:26 +0000
ROA not after: Sat 28 Jun 2025 12:16:26 +0000
asID: 35415
IP address blocks: 143.255.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83538 (0x14652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb50c890f528476e4fa2d2c2022430fcb59129e0
Validity
Not Before: Jun 27 12:16:26 2023 GMT
Not After : Jun 28 12:16:26 2025 GMT
Subject: CN=dab2357384ac2914ece3d01ea804523b951bd717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b2:94:dd:e8:4f:e9:d4:5e:db:68:5e:3a:22:
4e:fc:90:c0:99:67:74:87:85:74:79:5d:e2:94:db:
7e:cd:db:f7:88:22:4b:8d:df:b6:64:a2:4b:e7:48:
04:41:90:5a:06:38:6c:a3:27:ab:ee:6c:0d:c4:2d:
53:6a:bd:91:86:15:4d:59:ad:48:d5:1b:25:e6:40:
3a:db:69:66:5c:de:af:5a:2a:2f:7b:7c:e8:bd:3c:
b8:db:14:61:fb:79:56:50:fb:32:32:f9:7c:aa:3b:
b1:d4:72:7a:ab:97:5f:ea:ab:a0:3b:85:4c:34:1b:
82:c9:4e:e8:8a:47:e2:2b:93:17:09:72:b0:39:67:
88:ab:c6:03:b4:9b:41:29:3b:ad:01:33:b9:16:5b:
02:f9:b4:7a:53:85:6f:bc:31:d0:f5:59:5d:f0:6d:
55:ed:d0:64:3d:98:9c:b2:30:c9:1a:74:ae:b4:fc:
d7:53:be:43:8d:6d:b2:d7:e3:03:a2:5d:a5:a7:16:
fe:02:0f:77:16:b6:57:94:a3:e7:3b:73:d1:98:56:
7c:58:70:f9:f2:e7:e2:33:e5:2d:92:d6:3c:34:95:
03:d8:12:47:0e:12:b1:6e:72:48:01:bf:17:f1:62:
42:85:0d:df:0f:f2:3d:92:f5:85:88:f2:bb:ad:4c:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6B:E8:09:91:54:26:08:D7:4A:71:A0:16:3E:6D:E0:DA:C2:7E:B1
X509v3 Authority Key Identifier:
keyid:1E:4B:B1:5B:13:88:F3:E5:A5:43:14:10:40:C0:C2:63:00:DA:C8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb50c890f528476e4fa2d2c2022430fcb59129e0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/dab2357384ac2914ece3d01ea804523b951bd717.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9cf1626f-cb6b-4e56-a9c5-98c772d39ea8/fb50c890f528476e4fa2d2c2022430fcb59129e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.156.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b7:d6:c0:65:16:3f:f4:f2:60:ab:0d:03:17:22:49:e8:7f:
63:55:ad:b7:01:a9:57:8f:e8:6c:ce:78:7f:65:a1:b8:94:a8:
0f:b6:80:7a:f5:06:c7:1e:61:c4:f1:36:b8:76:b6:1a:02:87:
14:6f:2c:37:56:7e:1d:5b:1a:01:c6:06:f3:d1:1b:03:91:dc:
46:ab:85:9e:f9:de:cc:3c:12:9e:8b:5d:3d:03:77:29:cd:0c:
1a:25:7c:68:f5:f7:64:df:54:3b:65:7b:5f:84:a2:e9:5b:e1:
0e:48:0d:91:bb:d5:3f:9d:3e:99:34:9b:01:97:51:b4:60:a3:
5a:3d:6d:81:51:68:a4:8d:8e:c3:11:05:81:eb:05:e5:f7:d9:
e3:59:98:5c:9a:40:41:20:87:5d:24:67:21:a8:69:32:bc:ce:
07:ad:75:33:fe:b4:ab:a2:f3:10:66:f1:8d:5d:a6:77:27:3c:
62:42:96:75:44:43:e4:65:7d:c0:7b:17:6d:7b:0d:5d:b7:99:
f5:f4:27:9f:79:2f:b0:bc:82:0e:3a:15:5d:57:e2:9d:bf:cf:
a0:db:e1:8c:ad:f9:5b:e1:e2:a2:57:64:6d:30:56:5c:f0:b6:
94:58:fc:df:ff:a9:23:54:d9:94:5f:4a:11:fb:33:df:a3:9a:
1d:7a:3e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org