Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1bfecc37d9b4028befbd6ecd12025a7be6fa7f14.roa
File: 1bfecc37d9b4028befbd6ecd12025a7be6fa7f14.roa (raw, json)
Hash identifier: mYiPm0FTAncMlK/GyiWQKlk13G1C280fYBj3rJ+ykVI=
Subject key identifier: BB:A0:FC:D4:9F:67:E2:18:C6:A6:DC:49:B2:AC:71:26:AA:DC:E7:D9
Certificate issuer: /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial: 0E61ED
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1bfecc37d9b4028befbd6ecd12025a7be6fa7f14.roa
Signing time: Wed 24 Mar 2021 14:38:32 +0000
ROA not before: Wed 24 Mar 2021 14:38:31 +0000
ROA not after: Tue 24 Mar 2026 14:38:31 +0000
asID: 27757
IP address blocks: 201.219.43.0/24 maxlen: 24
201.219.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 942573 (0xe61ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Validity
Not Before: Mar 24 14:38:31 2021 GMT
Not After : Mar 24 14:38:31 2026 GMT
Subject: CN=1bfecc37d9b4028befbd6ecd12025a7be6fa7f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:85:11:c5:73:79:42:dd:30:1b:fc:c6:9c:01:
72:54:ae:d0:69:82:20:97:e2:4e:a3:da:8b:59:7e:
dc:ed:8a:75:8d:13:6d:f0:82:93:e9:c9:ea:a6:94:
ca:6a:65:12:59:14:7d:6e:78:03:4c:18:4f:dd:26:
b8:00:fb:df:23:ff:12:47:a6:61:8d:be:4c:d6:99:
1a:e1:70:36:d5:39:cd:6c:b3:47:2e:97:03:20:61:
47:78:5f:4f:c8:28:63:74:64:5d:2c:ce:ff:23:10:
73:bf:3f:e3:a8:d4:88:f1:5c:98:fa:03:c2:67:56:
24:77:c6:e6:d3:55:4c:86:c6:73:9d:3e:73:10:df:
52:7a:4c:03:26:f9:8a:b6:6f:20:2b:d0:8c:ed:3a:
e1:b9:69:9e:f6:7e:a4:0c:c5:23:b0:87:24:99:ec:
d3:aa:bc:0e:e9:bc:20:2d:cc:a2:fd:68:af:02:46:
2b:80:e6:b8:b8:fa:5d:47:9b:b3:5c:24:39:65:dd:
21:82:8d:68:7b:d9:76:6b:54:9f:37:1d:2e:68:7f:
3d:ee:a1:b8:49:c3:2c:ba:ac:f1:b0:83:e6:b7:93:
64:d8:d0:8f:1e:27:d6:29:01:88:36:97:a6:6c:47:
d0:e0:a1:cc:34:fe:38:62:9e:e6:ef:21:a5:b2:53:
dd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A0:FC:D4:9F:67:E2:18:C6:A6:DC:49:B2:AC:71:26:AA:DC:E7:D9
X509v3 Authority Key Identifier:
keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1bfecc37d9b4028befbd6ecd12025a7be6fa7f14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.43.0/24
201.219.56.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9a:38:fe:72:9f:46:f7:ab:fd:39:54:a8:9f:47:a0:4d:e7:
21:fe:cd:18:1f:97:fe:86:45:79:8d:ed:b8:f4:05:11:22:f5:
83:8d:d8:66:10:c2:54:6e:c8:1d:3d:13:85:1d:6c:25:e1:ac:
09:93:b1:f3:c8:60:6b:48:36:f7:3b:7c:b3:e5:37:a5:c2:83:
2c:4e:d6:ff:74:23:0d:bd:ca:ea:04:5f:9c:b6:67:f0:b0:5e:
7f:da:40:53:59:d5:31:1b:0b:00:12:27:ac:c0:3a:83:7f:f8:
0f:fc:5d:91:6c:7d:c6:62:5e:39:ac:81:14:d1:de:f5:96:b0:
bd:76:37:4c:44:e0:08:19:80:ca:75:c1:33:7e:68:77:91:d1:
bd:68:6c:27:22:0b:e3:f2:10:98:b6:29:20:a0:01:4a:27:91:
e8:13:f5:15:02:a0:aa:ea:79:d0:ae:e0:5d:f8:31:51:56:69:
45:5e:a2:39:bd:94:a2:58:de:d8:fd:00:6f:45:07:6f:8d:92:
a9:b8:9e:1e:4b:f1:b4:31:78:1d:4e:69:e0:cc:6f:5d:77:ef:
35:d2:72:8c:b4:4f:0a:1a:d8:a9:e2:23:79:53:38:3a:2c:92:
02:81:af:01:66:a8:12:13:5c:6a:af:a9:8e:5e:75:53:7e:d5:
09:13:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-ams.rpki-client.org