Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/0600214a1d9144acb4424be92ea87b3e717e1c1b.roa
File: 0600214a1d9144acb4424be92ea87b3e717e1c1b.roa (raw, json)
Hash identifier: H3YTySldlASTmsjS1YrC8En8SvkuwwWGzJDoYI9XOoE=
Subject key identifier: E7:D4:D9:80:75:36:0A:36:D2:9F:53:26:64:AF:52:02:C4:91:D3:8B
Certificate issuer: /CN=adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8
Certificate serial: 0DC3C5
Authority key identifier: 5A:89:C0:83:EE:24:78:13:17:0C:71:9F:E7:2F:9B:FF:29:BA:1B:18
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/0600214a1d9144acb4424be92ea87b3e717e1c1b.roa
Signing time: Wed 24 Mar 2021 14:41:23 +0000
ROA not before: Wed 24 Mar 2021 14:41:23 +0000
ROA not after: Tue 24 Mar 2026 14:41:23 +0000
asID: 23487
IP address blocks: 192.188.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 902085 (0xdc3c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8
Validity
Not Before: Mar 24 14:41:23 2021 GMT
Not After : Mar 24 14:41:23 2026 GMT
Subject: CN=0600214a1d9144acb4424be92ea87b3e717e1c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ea:3a:9e:64:7a:f1:07:a4:56:8f:c5:c2:db:
3e:37:5a:ba:79:87:ca:d4:3a:a0:ed:ed:82:59:b4:
7b:17:52:40:78:67:c7:6d:0e:64:69:2e:b8:ec:7d:
2c:40:0e:7e:96:eb:5e:ea:42:61:49:e5:95:85:09:
9e:44:f0:5e:c5:92:e3:1d:15:f5:3b:61:d1:af:e6:
e8:fd:46:d4:12:3c:e8:01:b9:2d:a2:88:aa:fd:13:
30:94:e9:55:1d:7a:0e:0b:7f:89:24:78:87:70:24:
0b:c6:6c:18:e4:6d:10:5d:78:05:63:a5:30:07:c1:
9f:01:5a:b6:eb:3a:1a:0f:a0:e1:29:92:4c:46:fd:
ea:41:5d:d4:9c:8a:bc:55:78:ea:b9:26:8c:ec:f7:
0d:e8:3b:09:50:b9:1f:6f:38:8f:11:91:a3:08:c9:
36:ae:14:f9:0d:c9:9b:73:9c:c6:ae:8b:7a:a6:2b:
a5:b1:b7:68:e9:03:9a:39:3c:ea:b9:05:fa:e0:59:
0f:c9:38:6b:89:ab:33:7b:e4:9a:b3:89:37:8e:3d:
65:3a:d9:f4:52:c9:14:ba:a8:28:40:05:b4:84:6e:
bd:1d:71:aa:2a:7e:4b:3c:93:92:f9:80:51:ef:2c:
a3:9c:e5:e4:96:f0:9f:1a:40:fc:6e:65:31:80:e2:
c7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D4:D9:80:75:36:0A:36:D2:9F:53:26:64:AF:52:02:C4:91:D3:8B
X509v3 Authority Key Identifier:
keyid:5A:89:C0:83:EE:24:78:13:17:0C:71:9F:E7:2F:9B:FF:29:BA:1B:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/0600214a1d9144acb4424be92ea87b3e717e1c1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.188.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:2d:c5:a4:a9:7d:c8:f1:85:36:8f:e1:28:0c:d3:96:2c:35:
6a:8f:77:b8:24:81:60:d0:9f:4a:cc:10:e9:cd:b0:99:0a:fa:
b8:0d:67:19:ae:24:6a:f6:cd:1a:87:e1:38:7e:54:61:b6:6c:
93:bc:14:e8:5d:56:9f:40:6a:29:65:94:21:34:03:b4:d4:99:
24:b1:d3:e5:24:99:08:55:a0:e9:60:8d:8b:33:71:b6:08:eb:
54:de:21:2b:97:3d:47:fb:28:b8:bf:01:9a:1c:73:76:9b:09:
35:3a:f0:00:c6:7d:18:27:30:03:12:cd:ce:33:3b:b0:07:cf:
75:11:7c:92:77:63:03:71:ad:26:9e:5e:0f:10:37:14:ca:14:
c2:cd:6e:b7:66:3f:d6:12:6c:11:c0:56:ce:d9:d4:2c:6f:93:
de:26:ef:0f:50:b6:56:a9:43:2e:df:50:cd:13:5b:d9:8a:59:
a5:cc:d6:4f:48:81:ae:7f:e6:9c:34:71:5c:41:9c:e0:e6:36:
f9:3a:e8:e3:6f:78:78:6e:c1:ee:9e:04:1f:c9:4f:17:37:6b:
74:4a:fb:32:f7:a7:99:f0:24:5f:de:0f:f3:f4:82:73:5d:4d:
2d:bb:f5:50:bd:e6:f7:37:ab:8f:35:eb:6d:d8:57:03:4c:3b:
68:c4:90:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org