Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/a655a4b5c219be1f29298e40a66cb37de6d525e2.roa
File: a655a4b5c219be1f29298e40a66cb37de6d525e2.roa (raw, json)
Hash identifier: bHlHGpPeER4NW9QxbB/tNpuxRPifq4gZw0cRKREhcMg=
Subject key identifier: CE:56:68:4C:85:85:15:35:9E:18:5E:BD:1A:79:EC:F7:13:24:BA:82
Certificate issuer: /CN=0a6ca410e9d4d6609a966809763133d36a922b82
Certificate serial: 28BE50
Authority key identifier: 61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/a655a4b5c219be1f29298e40a66cb37de6d525e2.roa
Signing time: Tue 09 Apr 2024 16:54:04 +0000
ROA not before: Tue 09 Apr 2024 16:54:04 +0000
ROA not after: Thu 09 Apr 2026 16:54:04 +0000
asID: 270009
IP address blocks: 201.182.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2670160 (0x28be50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a6ca410e9d4d6609a966809763133d36a922b82
Validity
Not Before: Apr 9 16:54:04 2024 GMT
Not After : Apr 9 16:54:04 2026 GMT
Subject: CN=a655a4b5c219be1f29298e40a66cb37de6d525e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:4f:82:ea:34:0c:b1:00:f1:70:2a:4b:00:
31:3b:98:a8:ec:ff:4c:35:5e:5f:1e:18:18:21:9f:
83:0e:9b:88:79:b2:f2:e8:5b:2f:99:45:07:8a:f2:
6a:d2:f2:fc:5e:93:da:00:e9:85:86:c5:d3:3b:d9:
6f:5e:cd:97:24:ad:40:df:40:69:27:5d:dc:70:97:
e7:92:03:7f:e3:7b:dc:2e:1f:17:a5:2c:30:6e:d0:
64:de:8a:71:36:4d:8b:f3:84:8a:98:56:9b:ac:75:
f2:e2:83:20:b0:21:71:45:a4:e4:6b:44:a3:c2:a2:
72:fe:8d:09:ab:76:f6:81:15:b7:d9:0c:e3:c6:a9:
76:8c:68:cb:68:97:5d:e6:b4:83:4e:b6:ab:d9:08:
d6:93:cd:53:b0:e2:5c:22:ec:b1:0f:0e:42:27:a3:
46:1d:cb:d7:6c:44:ac:0a:a0:eb:13:7d:f6:fb:7a:
9b:67:03:f2:3e:50:a7:e8:af:09:96:b0:15:c1:a4:
5d:b3:d2:a3:7c:ab:d9:82:0a:e8:06:a1:55:ef:ed:
ff:d1:67:36:42:c1:cb:67:96:25:1c:b7:cd:b5:f0:
0e:d9:aa:bb:d2:c2:7d:ed:f3:6b:48:b4:95:bd:d2:
80:db:11:52:b3:3d:8c:29:67:9f:97:f7:99:43:18:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:68:4C:85:85:15:35:9E:18:5E:BD:1A:79:EC:F7:13:24:BA:82
X509v3 Authority Key Identifier:
keyid:61:C9:65:C6:9A:7F:33:31:54:6E:E9:D0:48:29:82:DF:45:9C:76:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a6ca410e9d4d6609a966809763133d36a922b82.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/a655a4b5c219be1f29298e40a66cb37de6d525e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/db8be682-ea56-4747-a132-8b50509f808a/0a6ca410e9d4d6609a966809763133d36a922b82.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.240.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:6a:dc:c3:50:14:5a:4a:f9:ca:65:44:0c:11:9b:d7:aa:1c:
be:62:82:ec:ce:e2:86:03:09:5a:48:25:3a:91:d0:7a:73:44:
3e:4c:80:dc:7a:d6:ca:cb:47:df:43:b0:d2:63:3b:83:67:27:
59:a8:b5:d7:44:5c:ac:2b:43:7d:d7:ab:f6:67:7c:1b:8f:72:
6d:d6:44:2c:05:35:9e:1a:df:8a:a1:00:66:58:48:69:28:c1:
88:e6:94:d4:96:a8:4e:6e:f8:c6:ef:95:8e:14:79:0d:d4:67:
68:ef:1e:4f:34:5b:79:84:da:7f:37:34:21:24:a5:7b:22:d9:
69:d9:b7:17:69:55:ab:2a:1f:a3:3c:21:68:a0:d4:bb:05:ec:
db:ec:cb:bf:3a:ab:40:ac:41:df:43:f4:f5:3c:e5:42:18:b4:
58:a5:34:48:d9:7f:e0:36:90:39:23:b8:01:ff:61:89:09:17:
e2:80:58:f2:55:eb:68:a0:63:b5:d8:57:57:88:0b:80:22:60:
57:64:62:90:25:ca:94:8d:12:67:26:50:e3:11:57:c9:48:f1:
07:6c:bb:11:51:89:8f:17:1f:a8:9b:d3:db:cd:7c:a0:02:6f:
a6:e9:51:8f:ce:55:f8:00:4d:e9:36:de:1a:11:db:07:e7:27:
f5:f0:51:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org