Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3233322e302f32312d3234203d3e20323635353534.roa
File: 3230312e3135392e3233322e302f32312d3234203d3e20323635353534.roa (raw, json)
Hash identifier: +IpXJt+WaAQGFCnYDc+LeyZGQDrXr4mdP8V3iNvCxF0=
Subject key identifier: 1D:6E:02:DC:B5:98:2A:2D:F7:4B:AA:9A:74:D0:F0:E4:8E:06:58:37
Certificate issuer: /CN=DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E
Certificate serial: 022F0F8057F6B6F08E766BD64FD6476149984794
Authority key identifier: DF:E8:C1:96:5C:AF:4A:5F:DC:69:B9:28:E3:B8:18:B7:97:47:EF:7E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3233322e302f32312d3234203d3e20323635353534.roa
Signing time: Wed 03 Jul 2024 14:35:00 +0000
ROA not before: Wed 03 Jul 2024 14:30:00 +0000
ROA not after: Wed 02 Jul 2025 14:35:00 +0000
asID: 265554
IP address blocks: 201.159.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:2f:0f:80:57:f6:b6:f0:8e:76:6b:d6:4f:d6:47:61:49:98:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E
Validity
Not Before: Jul 3 14:30:00 2024 GMT
Not After : Jul 2 14:35:00 2025 GMT
Subject: CN=1D6E02DCB5982A2DF74BAA9A74D0F0E48E065837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:aa:dc:50:77:2d:a0:cd:c0:83:02:3e:14:4e:
7e:08:a7:06:c3:f9:bc:03:aa:80:f9:42:9a:c1:45:
0d:01:a6:fd:74:54:5e:e2:73:a3:54:f4:a5:41:d7:
62:a8:7f:94:03:7a:ed:c2:29:2a:33:6c:74:2d:1b:
28:c0:71:7a:12:cc:ae:dc:94:92:19:14:1c:bb:06:
86:f9:73:73:4d:70:04:68:b9:64:25:7b:a2:6b:1e:
17:50:e4:18:b3:03:1e:21:32:ff:2c:f3:b1:b9:11:
72:ad:a8:a1:8b:f1:86:9d:7a:48:29:93:ed:7c:24:
a1:95:ed:f4:1b:82:48:b8:57:77:4b:c0:a0:00:4d:
e5:7d:92:d7:52:ea:2b:d9:c5:2e:ee:69:2e:b0:6f:
9d:a3:87:69:7d:a7:63:c9:7f:57:01:d3:72:83:9f:
83:9d:cc:18:e7:c3:39:a5:7d:7a:74:c4:af:50:4b:
ba:43:15:83:1f:68:ac:5a:6c:25:a3:ac:73:51:db:
8a:6a:34:2d:ff:63:3a:ee:17:90:fc:15:4d:56:36:
6f:7d:60:b4:82:18:7a:32:66:fc:08:b7:ce:cc:6e:
ea:1c:a0:ec:b9:60:d4:91:6b:fa:57:0f:a6:30:d1:
6e:f2:4b:a4:13:91:b1:bb:ca:c3:ee:ee:a1:18:3a:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6E:02:DC:B5:98:2A:2D:F7:4B:AA:9A:74:D0:F0:E4:8E:06:58:37
X509v3 Authority Key Identifier:
keyid:DF:E8:C1:96:5C:AF:4A:5F:DC:69:B9:28:E3:B8:18:B7:97:47:EF:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFE8C1965CAF4A5FDC69B928E3B818B79747EF7E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E673182B88BF611C219B8AAAAABFA070D5D229D94B5C3959D65E0D27AC02C043/0/3230312e3135392e3233322e302f32312d3234203d3e20323635353534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.232.0/21
Signature Algorithm: sha256WithRSAEncryption
38:0a:f4:36:8f:fa:0b:d6:ad:ec:d6:d9:f9:c7:48:35:bf:ac:
9c:ba:45:8a:58:fe:8f:28:ad:f4:ca:11:67:58:84:93:12:1d:
ec:32:b9:5e:6a:ca:74:8d:12:21:9d:7e:a6:1d:87:8b:8c:40:
89:dc:0d:95:84:16:79:7c:ab:80:6d:2a:82:19:05:f1:d9:c5:
cc:eb:40:ff:f6:b9:c5:fb:96:38:d0:23:b7:fc:37:1f:34:ad:
24:0b:ba:fd:59:18:03:1f:d1:29:76:fd:d8:21:88:29:55:06:
82:b7:21:c0:b8:8d:62:11:b6:2b:30:44:d8:40:43:fa:45:be:
10:b5:4e:8d:7c:df:7c:28:1a:7d:06:b2:5b:fd:e0:94:e4:2d:
8e:5a:f5:f0:a7:35:38:ba:77:0c:2e:26:51:44:e2:ea:d6:b1:
0f:e6:35:81:3d:b0:3f:3d:45:03:c4:f6:8d:cb:44:39:a7:9b:
9d:f2:96:f4:a4:1d:64:7c:d2:64:d7:59:d3:96:00:d9:79:b2:
e8:4c:b9:b0:f8:c9:f5:89:75:96:26:9f:f8:7a:30:de:92:e0:
fd:7a:5e:77:2b:97:49:8a:c9:1b:48:3c:dc:cd:88:44:08:e3:
f4:04:40:d7:8e:97:da:0f:1b:c2:47:bf:a1:19:78:6d:4f:77:
35:af:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 22:04:05 2024 by rpki-client on console-fra.rpki-client.org