Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/1d7664d6bebf0501e220b779229805c86c357cd8.roa
File: 1d7664d6bebf0501e220b779229805c86c357cd8.roa (raw, json)
Hash identifier: C2+dOCLnrNbjuY2BegQ8tLM3f7seoZrcwkOjLGbQgI0=
Subject key identifier: DB:83:03:B1:0D:EF:66:B5:20:CA:44:4F:B4:6E:71:48:14:88:49:A8
Certificate issuer: /CN=2ea1715958333398146179fdbf2e485fe6525742
Certificate serial: 1C7D4A
Authority key identifier: 60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/1d7664d6bebf0501e220b779229805c86c357cd8.roa
Signing time: Wed 06 Dec 2023 14:42:02 +0000
ROA not before: Wed 06 Dec 2023 14:42:01 +0000
ROA not after: Sat 06 Dec 2025 14:42:01 +0000
asID: 28000
IP address blocks: 201.219.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1867082 (0x1c7d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ea1715958333398146179fdbf2e485fe6525742
Validity
Not Before: Dec 6 14:42:01 2023 GMT
Not After : Dec 6 14:42:01 2025 GMT
Subject: CN=1d7664d6bebf0501e220b779229805c86c357cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:11:83:03:88:da:78:ad:c1:b9:e9:02:59:
5f:68:ef:6e:2b:41:43:c1:51:6a:50:a1:b3:ed:08:
b6:c2:e5:11:35:61:a7:6f:d0:41:29:e3:b7:22:5b:
74:59:08:9a:b2:88:25:ae:db:c4:27:a0:5d:23:fb:
81:e3:95:52:c0:f5:e1:86:2d:f6:e6:b9:3d:06:53:
c9:9f:09:32:cd:e7:4b:34:84:54:f5:ba:ee:36:b8:
01:08:f6:d4:a8:1d:60:2f:46:5a:71:6b:4b:ad:aa:
e7:f9:6f:44:86:3d:dd:cc:cc:5e:fe:94:f4:71:d7:
eb:68:6a:da:a7:93:c1:cb:7a:3c:57:85:c1:a3:41:
10:0d:05:71:61:47:54:f8:55:21:02:54:d1:49:c1:
bd:3e:af:95:89:80:ca:86:79:f8:64:c9:1c:b3:40:
2a:fc:7b:12:18:ad:be:c4:66:f5:87:18:7a:7e:6f:
83:0c:de:9d:2e:d0:b2:fd:93:c2:4a:b3:70:54:09:
d2:06:10:51:fe:ea:76:87:86:43:e6:47:89:be:6c:
b1:6e:99:bd:5b:3f:ed:8a:d5:7a:dc:80:f8:5c:79:
bd:04:d5:c1:01:37:27:0d:99:16:93:64:2d:09:2d:
6d:82:94:2f:72:df:56:4d:b1:27:30:4d:bf:3b:72:
7b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:83:03:B1:0D:EF:66:B5:20:CA:44:4F:B4:6E:71:48:14:88:49:A8
X509v3 Authority Key Identifier:
keyid:60:84:61:48:7C:36:64:D8:97:0A:C3:A9:A1:74:66:80:8B:AD:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ea1715958333398146179fdbf2e485fe6525742.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/1d7664d6bebf0501e220b779229805c86c357cd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9b6c5f5-2fb2-4744-b6e1-99d95892d377/2ea1715958333398146179fdbf2e485fe6525742.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.252.0/24
Signature Algorithm: sha256WithRSAEncryption
11:cc:85:cf:de:07:b6:de:38:35:27:88:43:e3:09:a8:19:34:
37:5b:f4:96:12:e5:2c:85:67:5f:36:ad:26:a7:68:f2:8f:95:
0d:6f:e6:1c:1d:af:98:b7:56:f2:db:50:58:60:e5:69:d2:87:
ee:c9:cc:6f:23:ff:85:2f:5f:f7:9d:0d:a0:3f:d8:27:e5:64:
40:1e:30:50:df:70:3a:46:fe:28:47:73:34:81:70:90:7f:13:
76:6e:4f:d9:6b:3e:85:f8:6d:d0:8f:6a:a3:69:ae:26:68:bd:
08:43:3d:5d:43:3d:e0:9c:12:ba:3b:d9:c2:d6:ed:93:13:28:
83:72:b0:0f:04:96:b8:e8:08:84:4b:45:fd:13:27:b5:00:0d:
e6:e8:4b:4f:4a:90:46:52:1f:6c:aa:9f:34:b7:ba:6d:98:46:
0c:0f:37:ff:f7:8f:9b:44:7e:c5:28:2e:63:b0:f5:b8:e6:9a:
f7:0f:f8:e0:bf:e8:fc:da:42:8a:ea:58:79:70:ba:8e:bc:ed:
23:d3:dc:c1:ab:c6:11:c6:69:8f:c4:66:f4:23:dc:fb:4c:a0:
b1:42:9a:26:8a:fb:48:8e:fb:a5:96:f2:9b:81:5c:bb:7f:57:
7e:0b:14:7c:51:66:25:14:71:c6:76:4c:26:9f:ae:b7:a0:79:
35:14:d9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:45 2025 by rpki-client