Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/1ecef5730e112c15aa512ab488ef95a31b6611a7.roa
File: 1ecef5730e112c15aa512ab488ef95a31b6611a7.roa (raw, json)
Hash identifier: LeRoEvYZ6s4BA9UEG3o/Iwb73BQK6RidEZjG6bLfW/4=
Subject key identifier: 4A:B8:8A:DB:ED:94:35:EA:EB:22:0D:87:3F:8B:E6:29:93:6E:E2:40
Certificate issuer: /CN=cb0d50fb966e4001e10ac528d57fe833560a5d85
Certificate serial: 07C27D
Authority key identifier: 27:71:FE:F9:8F:EB:73:41:30:2C:D8:40:3F:8D:24:3C:47:AA:83:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb0d50fb966e4001e10ac528d57fe833560a5d85.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/1ecef5730e112c15aa512ab488ef95a31b6611a7.roa
Signing time: Mon 08 Apr 2024 16:07:54 +0000
ROA not before: Mon 08 Apr 2024 16:07:54 +0000
ROA not after: Wed 08 Apr 2026 16:07:54 +0000
asID: 267850
IP address blocks: 2803:ec60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508541 (0x7c27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb0d50fb966e4001e10ac528d57fe833560a5d85
Validity
Not Before: Apr 8 16:07:54 2024 GMT
Not After : Apr 8 16:07:54 2026 GMT
Subject: CN=1ecef5730e112c15aa512ab488ef95a31b6611a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7e:23:ca:e4:3a:e7:20:fb:ce:b3:8a:f3:27:
2f:2c:1f:81:b7:6a:7d:d6:79:6c:c8:1c:9d:e3:bd:
eb:de:ed:cf:94:0e:6f:95:2a:63:a0:af:93:5d:b9:
86:52:d1:b8:f5:3b:81:af:e3:ec:82:df:38:ca:8e:
3b:77:c7:22:2a:b8:97:5c:ba:9d:bd:b0:95:75:16:
f6:07:03:da:de:16:c9:3b:9b:a8:9c:01:c4:a2:8d:
2f:6b:cd:80:7c:63:b7:ad:1c:2e:f7:24:47:68:51:
48:60:55:44:17:a8:97:50:9e:f1:aa:ed:df:5d:59:
af:fc:f7:52:a9:f4:6b:b0:e4:47:c1:98:26:29:3d:
5c:f9:1c:4d:69:51:ad:90:58:a9:3b:82:a1:ef:6f:
ca:1b:ed:b7:e5:3c:2c:3e:32:5b:88:ce:59:c8:f4:
1f:94:7d:89:53:31:f9:df:59:ce:7d:f5:05:75:a1:
f8:68:6c:c0:1d:37:e5:01:ba:1d:14:b5:72:03:e2:
4a:88:a3:2e:5f:cd:ee:9f:64:f0:94:ce:94:eb:75:
b7:5d:7c:c7:61:be:85:66:eb:4d:7d:6a:21:e1:7d:
34:4c:62:b9:60:44:01:14:af:bf:10:17:31:ad:e2:
51:44:9d:59:13:d7:3a:27:f6:89:13:7b:11:71:93:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B8:8A:DB:ED:94:35:EA:EB:22:0D:87:3F:8B:E6:29:93:6E:E2:40
X509v3 Authority Key Identifier:
keyid:27:71:FE:F9:8F:EB:73:41:30:2C:D8:40:3F:8D:24:3C:47:AA:83:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb0d50fb966e4001e10ac528d57fe833560a5d85.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/1ecef5730e112c15aa512ab488ef95a31b6611a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/cb0d50fb966e4001e10ac528d57fe833560a5d85.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2803:ec60::/32
Signature Algorithm: sha256WithRSAEncryption
31:15:25:53:bf:99:22:99:85:fe:4a:3d:6f:20:61:85:09:f1:
5a:c9:db:cd:b0:bc:c1:24:76:ec:e5:91:9d:4c:13:d0:48:99:
7d:fa:ed:25:34:d8:02:55:e4:bf:0a:a1:eb:8d:c6:e2:56:cf:
43:8a:a4:be:38:84:2c:c9:52:72:e1:8f:75:cf:46:84:e9:60:
32:0b:9f:94:86:a4:91:d5:ce:17:2d:24:1f:33:e8:ad:eb:b7:
bb:e0:47:b8:58:dd:9c:d1:b0:ad:56:bb:7f:41:05:9d:7e:49:
80:75:4c:b6:97:3e:3f:ed:32:ea:2f:8a:a8:c4:0a:98:1b:a3:
3f:49:2f:c9:c7:d7:52:5e:59:6d:fb:ba:0a:7c:b6:e4:b7:4e:
84:d4:c0:f6:43:06:fd:61:09:72:66:f4:58:78:af:5c:cd:4b:
11:27:b7:7b:88:57:19:6b:39:46:79:c9:e1:2c:4b:9b:b3:a0:
17:f3:c1:8e:ac:d5:35:48:4b:96:63:03:e0:09:cf:e1:e9:85:
62:2d:b5:cc:c4:1f:ab:c4:ef:6a:77:c6:4d:fb:c7:2a:94:33:
4f:d0:40:bc:48:4a:ae:39:9f:d9:b4:d5:d2:1f:96:56:ed:fa:
82:a9:51:59:c3:00:12:ae:2e:31:94:ce:d0:e6:5b:f2:81:8a:
4f:0d:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org