Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/7ed0c87d2d66c21ea95804a94fed97d58d38169d.roa
File: 7ed0c87d2d66c21ea95804a94fed97d58d38169d.roa (raw, json)
Hash identifier: +V2Kxpzb82zQzIPo67ZcASYLeJvFwxl+HVhyxF9oPyo=
Subject key identifier: C9:BD:44:84:56:91:E3:EB:45:7C:5C:FB:85:50:A8:AD:2D:EF:A6:7D
Certificate issuer: /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial: 15787C
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/7ed0c87d2d66c21ea95804a94fed97d58d38169d.roa
Signing time: Fri 29 Dec 2023 03:38:58 +0000
ROA not before: Fri 29 Dec 2023 03:38:57 +0000
ROA not after: Mon 29 Dec 2025 03:38:57 +0000
asID: 20473
IP address blocks: 201.217.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1407100 (0x15787c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
Validity
Not Before: Dec 29 03:38:57 2023 GMT
Not After : Dec 29 03:38:57 2025 GMT
Subject: CN=7ed0c87d2d66c21ea95804a94fed97d58d38169d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:38:00:7f:8e:92:92:e9:9c:c4:b3:43:da:e0:
41:9d:03:ce:12:18:29:6a:2a:1a:9c:54:f5:d8:2e:
24:46:63:d5:88:2f:16:16:5c:bb:7c:e2:ba:b8:f4:
f0:3b:11:6b:3b:7b:88:a4:8d:9b:5c:7d:2f:6f:4f:
f1:17:f5:f9:6d:3d:71:91:b4:58:32:7c:0c:94:1f:
cf:26:2d:80:73:16:ad:0a:5a:88:38:59:e1:6b:83:
4c:a8:12:f3:33:a6:99:e7:0a:db:2e:5c:82:f2:25:
2e:97:27:a3:ea:ba:2c:62:7e:08:42:73:26:e7:9d:
e4:50:e5:10:3a:38:61:b7:17:fc:cb:0a:94:a2:1d:
2f:d7:33:25:c9:62:2a:86:d2:9d:a7:3b:22:a5:50:
c5:59:d5:01:55:9f:c9:ce:d9:31:95:48:bf:67:67:
ff:9c:a6:00:c1:02:81:d6:c9:c2:b7:fc:c1:d8:1f:
fa:4a:99:c1:a5:ae:b9:4b:f4:ac:e1:31:0b:a4:f7:
c8:c8:55:a2:ed:30:38:44:0e:a3:18:71:10:b0:3b:
b4:4a:b8:f5:85:e6:91:7c:f8:63:77:4b:92:a8:c6:
8c:d0:f0:e4:e1:b8:29:b4:68:d0:e6:79:1f:4c:1c:
8f:4f:a1:af:ea:af:b6:ff:a7:b8:03:87:49:c2:6a:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BD:44:84:56:91:E3:EB:45:7C:5C:FB:85:50:A8:AD:2D:EF:A6:7D
X509v3 Authority Key Identifier:
keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/7ed0c87d2d66c21ea95804a94fed97d58d38169d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.20.0/24
Signature Algorithm: sha256WithRSAEncryption
82:be:d3:34:0f:44:32:99:de:0c:d4:51:29:ce:eb:7c:ca:44:
71:00:8b:e4:5c:e3:f1:39:f2:29:ac:15:0a:5a:5c:e8:8a:be:
eb:d2:4d:c1:4c:81:97:92:d7:97:11:4a:55:7d:af:e5:44:72:
ff:65:bc:4d:c8:cf:b7:40:b5:bc:a6:d4:b9:15:4e:a4:81:a9:
e0:2f:96:3a:6c:9f:5e:06:3a:d0:04:f8:84:4c:f8:4e:4d:44:
ba:ad:3f:ff:8c:1c:51:be:07:fc:99:92:90:ec:be:d0:de:65:
4c:65:b7:4a:c7:d6:ed:71:c8:33:6b:cd:8b:30:7e:e5:66:ad:
6d:39:6f:b2:61:d6:1f:4e:e8:d8:d6:c4:e0:ae:bb:b1:97:70:
be:cf:45:fc:22:50:97:65:61:a9:fa:9b:5d:f0:d2:fd:c6:74:
aa:d3:cd:19:58:ed:97:c8:ca:bd:8e:13:c7:31:0a:7b:ce:08:
97:a9:47:40:b8:8c:55:15:a1:69:14:e2:56:73:3f:8b:5b:07:
c4:b8:32:e2:53:c8:69:ba:c5:3f:79:7b:cc:3a:4d:5d:f4:a8:
dc:14:4e:97:c9:96:07:7a:7a:c6:3d:b3:6e:72:af:5f:f0:0c:
8a:25:3f:d2:22:c7:eb:b5:ee:bb:5a:3f:79:89:29:98:50:47:
99:88:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org