Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7e2b6b2-4c2e-4934-8d31-74e09994d07b/f24f192b9a7b4c0f7663283c7f5e8f052052053e.roa
File: f24f192b9a7b4c0f7663283c7f5e8f052052053e.roa (raw, json)
Hash identifier: EbqN37hbc36OUC2+POA2PE0ucACL57tikUHU81WSDOk=
Subject key identifier: 30:E3:0A:F3:66:BB:0F:23:07:C8:25:1A:65:31:35:45:8A:61:35:62
Certificate issuer: /CN=f3a05bdb86c0d94abfb2a46e721512e0fce81378
Certificate serial: 0861E4
Authority key identifier: 48:CE:AC:AD:6D:23:FB:50:BF:02:35:58:AB:18:84:F7:F2:C4:CC:95
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3a05bdb86c0d94abfb2a46e721512e0fce81378.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a7e2b6b2-4c2e-4934-8d31-74e09994d07b/f24f192b9a7b4c0f7663283c7f5e8f052052053e.roa
Signing time: Thu 11 Apr 2024 22:45:40 +0000
ROA not before: Thu 11 Apr 2024 22:45:39 +0000
ROA not after: Sat 11 Apr 2026 22:45:39 +0000
asID: 18747
IP address blocks: 201.130.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 549348 (0x861e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3a05bdb86c0d94abfb2a46e721512e0fce81378
Validity
Not Before: Apr 11 22:45:39 2024 GMT
Not After : Apr 11 22:45:39 2026 GMT
Subject: CN=f24f192b9a7b4c0f7663283c7f5e8f052052053e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:57:42:06:60:8f:28:83:66:73:ea:dc:43:
47:67:15:de:ca:e5:19:59:ee:41:81:3d:e3:2b:87:
4a:48:d2:b1:9e:1b:27:01:05:8f:80:58:81:c2:a4:
05:7c:c9:58:41:96:12:18:4e:00:d0:6f:c6:f0:98:
17:04:8b:cb:02:4b:61:b5:c3:04:cc:63:48:7a:f6:
3f:11:89:91:16:f9:41:0b:19:72:6e:7a:62:0f:0b:
44:89:25:a2:77:5c:07:01:1f:96:9c:69:25:71:f6:
59:11:de:8c:2c:c2:39:b1:b6:16:08:86:3a:6b:bc:
d8:f6:9c:dc:95:33:52:15:9c:d9:eb:63:fc:16:b3:
7e:f5:e3:b7:b0:3f:7c:0e:d1:10:ff:89:17:57:0a:
4c:23:e4:c7:56:34:0a:1c:e6:25:73:50:ec:af:d7:
09:a8:82:08:63:52:54:b5:51:4f:47:70:3d:9b:34:
90:0a:4a:e0:6d:55:a6:92:0b:11:f2:f0:82:14:74:
4c:bf:b1:cc:14:f8:4d:5c:2c:ed:1f:83:20:46:53:
53:8a:64:57:10:9d:25:69:58:ab:58:cd:9f:2a:32:
d4:39:ed:5c:5e:e2:c7:d2:08:b9:dc:58:8b:61:bb:
31:e5:ad:40:7c:45:0b:58:df:6f:0f:29:bf:93:0b:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E3:0A:F3:66:BB:0F:23:07:C8:25:1A:65:31:35:45:8A:61:35:62
X509v3 Authority Key Identifier:
keyid:48:CE:AC:AD:6D:23:FB:50:BF:02:35:58:AB:18:84:F7:F2:C4:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3a05bdb86c0d94abfb2a46e721512e0fce81378.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7e2b6b2-4c2e-4934-8d31-74e09994d07b/f24f192b9a7b4c0f7663283c7f5e8f052052053e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a7e2b6b2-4c2e-4934-8d31-74e09994d07b/f3a05bdb86c0d94abfb2a46e721512e0fce81378.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.130.16.0/22
Signature Algorithm: sha256WithRSAEncryption
60:cf:ab:83:39:02:94:34:76:cc:f0:51:b9:95:c4:f9:0a:48:
d0:dd:c5:41:ad:f5:b7:b9:87:b8:b8:ea:86:bc:cd:f3:7a:20:
ce:fb:b0:1b:f1:1e:ad:5f:7b:e8:b2:2b:b6:d9:c1:36:65:ed:
25:68:dd:09:86:cd:73:2c:d2:3b:b0:34:6f:77:00:4d:ad:53:
d3:82:78:53:1d:2b:da:3f:7f:6b:7d:ba:f1:7c:bb:cc:5f:f7:
e3:29:d2:5c:01:90:a5:77:c0:1f:22:a6:3c:8f:4e:52:c3:ff:
00:b4:a1:67:70:c9:5d:27:98:fa:62:ab:18:c8:3e:5c:4d:3b:
91:61:87:a7:39:b9:03:f5:a8:63:82:e5:07:b1:e8:b9:74:45:
ac:7c:f0:6c:c0:dd:00:e9:89:d2:8b:64:87:db:09:d6:48:e1:
b4:b2:43:d9:15:ca:14:44:0f:b5:a5:dd:bc:c9:34:ab:ac:e7:
82:55:8f:a6:b8:27:60:57:ab:6c:96:45:ea:91:8f:40:d0:46:
15:e3:d2:4b:86:96:1f:08:58:28:5c:2c:97:47:cc:05:86:52:
a9:04:41:0f:2d:3f:67:c4:c9:d8:73:42:57:1a:8c:d1:ee:68:
b2:b7:b8:75:7a:d0:dc:3e:7c:4c:25:6f:7c:8d:32:98:64:b6:
31:5d:39:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org