Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/fa5d1398237f20f4a5967d5e10d8def7c5c8fb01.roa
File: fa5d1398237f20f4a5967d5e10d8def7c5c8fb01.roa (raw, json)
Hash identifier: wfWr3baJSZoQBEXW5V+Q7ZAmzWGVumY35dv/E/q6mkY=
Subject key identifier: 8D:7D:72:2F:C4:2A:BE:43:CA:B4:A6:86:0F:2F:1C:DC:4B:0C:67:1E
Certificate issuer: /CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Certificate serial: 210C37
Authority key identifier: B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/fa5d1398237f20f4a5967d5e10d8def7c5c8fb01.roa
Signing time: Wed 14 Jun 2023 02:16:58 +0000
ROA not before: Tue 13 Jun 2023 02:16:58 +0000
ROA not after: Sat 14 Jun 2025 02:16:58 +0000
asID: 21575
IP address blocks: 148.102.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2165815 (0x210c37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Validity
Not Before: Jun 13 02:16:58 2023 GMT
Not After : Jun 14 02:16:58 2025 GMT
Subject: CN=fa5d1398237f20f4a5967d5e10d8def7c5c8fb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:02:d1:2a:43:40:c9:c1:93:92:ce:9a:79:
bf:29:f7:a6:10:f0:2f:4f:c4:a1:9c:a3:45:bb:9b:
ea:ec:92:51:5c:f3:47:b3:f2:cf:90:f3:90:c3:67:
05:d7:b4:f9:f3:19:e5:09:80:e5:be:2e:63:e3:b2:
50:75:91:bd:3b:40:c6:5e:71:b9:f1:b3:2e:ba:b2:
39:05:26:ea:1f:f1:55:b3:b6:11:24:c8:8f:cd:65:
3a:04:84:47:5e:ed:f5:f5:45:7d:39:1c:36:1a:8f:
5c:de:3e:88:b2:7b:d1:f5:21:3d:c8:af:26:91:67:
45:14:9b:ad:d1:f5:8d:43:5a:ce:f0:24:bb:f5:66:
55:03:ad:f5:f2:19:24:b8:5f:20:8c:1d:48:ba:3a:
52:5e:81:48:66:66:30:22:03:e3:bf:ed:bb:1b:dd:
dc:6e:d9:51:87:7b:bf:7f:d4:17:eb:49:ab:2c:0d:
a3:72:8e:7e:29:04:d2:19:9a:b6:b5:9e:92:b5:19:
0f:7e:84:12:b5:6a:e7:c8:ed:16:44:e1:4c:08:d4:
da:a3:6d:bf:e2:99:9a:5d:0e:da:51:2f:e2:09:c2:
01:6f:3d:bd:5a:d7:57:84:74:1c:21:ca:33:3f:4b:
08:a2:86:6e:ad:90:e5:c0:24:1e:7b:9c:ad:72:b5:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7D:72:2F:C4:2A:BE:43:CA:B4:A6:86:0F:2F:1C:DC:4B:0C:67:1E
X509v3 Authority Key Identifier:
keyid:B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/fa5d1398237f20f4a5967d5e10d8def7c5c8fb01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.102.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:83:ca:91:01:fd:f3:01:d3:f0:b6:17:6d:61:a2:79:1e:d3:
e8:70:e1:7c:b0:4c:ae:38:0b:32:67:11:14:03:44:ea:f1:5f:
2c:11:29:eb:83:76:42:93:aa:bc:5d:a8:6e:37:0b:5e:88:d7:
77:63:0b:4c:d6:3c:2d:fe:30:49:1a:3c:f0:bf:7a:02:26:4d:
81:5e:63:7d:b4:09:35:a9:5c:13:34:bb:f0:b0:b8:7c:ed:16:
51:79:81:76:94:4c:9d:d1:64:f3:88:91:ea:ef:c7:a8:f2:84:
7b:dd:88:52:f1:d9:e0:6f:fd:f8:58:ea:c2:9d:3f:60:67:a5:
70:51:30:59:26:b6:e2:26:6c:08:53:67:d7:51:36:34:81:9a:
6b:53:b7:56:d4:5e:7b:28:38:fb:02:31:b1:a1:c7:a8:94:ec:
85:2f:4f:08:e4:0a:6a:6c:04:ab:a7:04:b7:c9:7b:74:e4:c5:
03:06:19:c4:11:08:08:3e:60:cd:55:00:46:ab:eb:ae:f5:c3:
a4:f8:3d:be:a2:bb:58:28:6d:11:3e:e2:97:1c:15:30:ac:60:
9b:75:56:91:1e:f4:22:de:a9:d1:08:5b:3d:83:58:cd:b0:49:
13:ca:46:0a:58:79:f0:db:55:56:1c:ad:38:24:ee:f1:79:b8:
a7:9a:ad:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org