Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5db403f-02ca-49b9-aabc-e02d6eddd22d/1b20288f89b1152eb3281fd3ea941b4e08491899.roa
File: 1b20288f89b1152eb3281fd3ea941b4e08491899.roa (raw, json)
Hash identifier: A4mx5oM2u+HtAU4huanK1Sofmd9jNE0D8pLE+uNeG74=
Subject key identifier: 77:5D:FB:82:A3:C0:37:10:88:7D:F6:81:71:18:D3:14:48:08:FF:B5
Certificate issuer: /CN=58e24a8af009b071877be55916e0b57102c2f9df
Certificate serial: 124E3C
Authority key identifier: C1:84:AA:C3:0A:E0:BA:86:CA:37:E2:52:AE:A0:FB:D3:44:F7:05:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58e24a8af009b071877be55916e0b57102c2f9df.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f5db403f-02ca-49b9-aabc-e02d6eddd22d/1b20288f89b1152eb3281fd3ea941b4e08491899.roa
Signing time: Tue 04 Jul 2023 08:30:19 +0000
ROA not before: Mon 03 Jul 2023 08:30:19 +0000
ROA not after: Wed 02 Jul 2025 08:30:19 +0000
asID: 265554
IP address blocks: 201.139.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1199676 (0x124e3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58e24a8af009b071877be55916e0b57102c2f9df
Validity
Not Before: Jul 3 08:30:19 2023 GMT
Not After : Jul 2 08:30:19 2025 GMT
Subject: CN=1b20288f89b1152eb3281fd3ea941b4e08491899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:af:e3:9d:32:36:00:5e:b0:5e:57:00:62:
b5:bb:b7:f4:c7:96:1c:8c:b7:e9:cc:4e:10:f2:d8:
7b:34:75:6c:78:22:94:ac:02:d5:3a:0e:7d:9d:b3:
71:57:1b:fa:11:e9:a5:38:4e:18:b7:c9:a1:d4:0b:
f1:80:16:9d:f3:04:5b:e3:1a:eb:3c:3a:57:ba:5c:
79:0a:29:a6:56:da:10:04:0d:34:91:7a:cb:af:d4:
8b:cf:b3:d3:2f:4c:12:b4:3a:31:9f:97:fd:98:50:
ae:08:13:4e:a5:65:41:41:5f:8f:9d:f5:ea:fb:29:
cc:14:48:48:5d:29:73:8f:bf:ba:ba:86:d6:47:7a:
e3:3b:d9:0d:ab:47:95:12:85:8d:3a:8d:ed:17:5a:
34:f3:26:37:3a:2b:7b:c3:99:0f:73:33:a4:aa:d8:
63:04:f1:ca:af:46:12:b1:9e:a5:ea:3c:08:95:55:
f2:7f:4d:d0:54:3e:35:1e:a4:11:d6:05:a1:2f:a8:
12:43:28:26:61:0d:9b:8c:af:e4:4f:54:3f:d8:7e:
25:5a:13:11:9e:08:cd:0e:1e:4f:76:b1:69:ed:89:
55:09:9e:a8:56:1b:0c:c4:b0:d3:3e:c0:42:22:d8:
70:4f:ac:11:12:0d:7e:4d:f0:fd:2b:c0:72:23:91:
2f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5D:FB:82:A3:C0:37:10:88:7D:F6:81:71:18:D3:14:48:08:FF:B5
X509v3 Authority Key Identifier:
keyid:C1:84:AA:C3:0A:E0:BA:86:CA:37:E2:52:AE:A0:FB:D3:44:F7:05:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58e24a8af009b071877be55916e0b57102c2f9df.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5db403f-02ca-49b9-aabc-e02d6eddd22d/1b20288f89b1152eb3281fd3ea941b4e08491899.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f5db403f-02ca-49b9-aabc-e02d6eddd22d/58e24a8af009b071877be55916e0b57102c2f9df.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.139.213.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c6:20:af:47:04:4e:9d:b9:28:10:09:14:83:8c:2e:54:4a:
b5:72:a7:48:c4:ac:ac:c0:82:e2:ca:bd:a9:23:92:f8:bc:80:
fd:22:97:c5:7e:62:5e:4e:9d:93:40:11:20:7c:26:d9:93:31:
58:0b:dc:99:9b:f5:75:f3:32:8f:c6:40:8a:3b:5c:3a:3c:8d:
1f:c3:51:32:e7:d3:90:b1:8e:98:f4:34:ff:65:5f:b5:06:ba:
36:34:d5:bc:e8:54:8a:a8:28:55:c3:f4:06:ba:87:df:81:0c:
fc:77:b4:3e:83:b6:39:ca:60:96:e0:2e:d7:1d:a6:82:d8:3d:
a2:e0:55:41:99:38:e7:53:ae:ea:8e:e3:41:41:c0:c8:ee:37:
86:e2:39:b4:b1:76:0d:56:60:60:89:83:59:c0:b8:19:79:0f:
50:a9:fc:5d:1d:ce:9f:9a:94:5d:3a:1f:e1:ba:de:42:61:4a:
e8:8c:c1:e9:88:bb:e9:b0:04:1c:a6:54:4f:b3:08:53:c8:e7:
52:ed:15:c0:31:cd:63:74:a3:c6:5d:ce:48:8d:7c:76:51:2b:
7e:75:e5:13:af:47:de:01:60:27:6d:ac:02:28:44:50:20:51:
34:4c:3a:3e:96:04:86:ff:a7:86:00:df:7e:fc:f6:82:47:8a:
76:7d:43:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org