Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/b20539027b16ad989e83c2bb0e81a8b4d3f2b93c.roa
File: b20539027b16ad989e83c2bb0e81a8b4d3f2b93c.roa (raw, json)
Hash identifier: ikn0S6/2z/xrEycgVvxKnbNP9ZMR8gFz+3+VnYngGOU=
Subject key identifier: 5B:FF:EC:E0:69:1A:45:20:1A:3B:4D:88:E3:96:88:B9:77:54:EE:94
Certificate issuer: /CN=a8e12cca2129bde3aeb4d1487df86eba9960d067
Certificate serial: 20457A
Authority key identifier: E9:2B:09:39:E8:2A:A8:A4:6C:8E:8F:E1:58:E9:0D:A2:33:D7:97:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8e12cca2129bde3aeb4d1487df86eba9960d067.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/b20539027b16ad989e83c2bb0e81a8b4d3f2b93c.roa
Signing time: Wed 05 Jul 2023 16:46:33 +0000
ROA not before: Tue 04 Jul 2023 16:46:32 +0000
ROA not after: Sat 05 Jul 2025 16:46:32 +0000
asID: 265771
IP address blocks: 128.201.108.0/22 maxlen: 24
2803:d7c0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2114938 (0x20457a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8e12cca2129bde3aeb4d1487df86eba9960d067
Validity
Not Before: Jul 4 16:46:32 2023 GMT
Not After : Jul 5 16:46:32 2025 GMT
Subject: CN=b20539027b16ad989e83c2bb0e81a8b4d3f2b93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:e9:62:da:57:63:b4:16:ed:f5:d1:ac:2d:
c4:97:31:d8:0d:1d:9c:ea:06:40:b4:0b:f8:b0:ca:
34:a4:e2:30:81:42:f5:70:01:4c:53:9b:91:e0:83:
48:4e:41:db:38:05:60:86:fe:a3:7e:f7:af:e9:41:
2b:39:f6:16:ab:53:a4:ed:51:5f:2b:7d:fa:19:86:
92:6c:45:ce:22:df:8f:61:c7:16:24:63:ad:21:85:
df:ae:e8:1d:e9:22:6a:eb:f6:a2:d9:ed:37:a4:ce:
7f:38:b9:6b:3b:7d:b6:aa:f2:3c:a3:0d:4d:dd:42:
1a:3a:70:d9:1b:df:78:6a:7b:c2:5a:15:26:ca:3c:
75:57:d8:76:6c:6b:79:bf:a4:b8:a3:22:01:2d:40:
84:cb:c6:2d:af:8c:1f:94:ab:b9:5c:d1:44:bc:1e:
d0:6a:66:d6:38:59:4b:52:3a:0e:22:0e:fd:14:be:
4c:b7:34:3c:bd:e2:d6:0f:15:7c:59:6c:d9:5b:68:
e2:3c:be:a0:e7:95:0b:7d:ea:75:4c:1e:cb:8c:63:
e6:64:64:cd:4b:06:f1:61:9f:fd:b5:09:51:d2:d5:
68:28:a0:9c:11:21:5a:52:78:14:2d:65:1c:e5:f5:
3b:f1:6b:12:e9:b6:de:d8:ce:a2:2b:be:a8:af:07:
65:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FF:EC:E0:69:1A:45:20:1A:3B:4D:88:E3:96:88:B9:77:54:EE:94
X509v3 Authority Key Identifier:
keyid:E9:2B:09:39:E8:2A:A8:A4:6C:8E:8F:E1:58:E9:0D:A2:33:D7:97:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8e12cca2129bde3aeb4d1487df86eba9960d067.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/b20539027b16ad989e83c2bb0e81a8b4d3f2b93c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/a8e12cca2129bde3aeb4d1487df86eba9960d067.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.108.0/22
IPv6:
2803:d7c0::/32
Signature Algorithm: sha256WithRSAEncryption
9f:ee:cf:47:57:5e:f4:7d:e4:67:90:35:bb:a8:0d:fa:0a:ed:
0e:0c:c1:d9:7c:33:e0:c6:02:00:e4:b9:4d:b0:01:43:0e:e1:
81:4d:98:20:b9:ac:4f:3b:39:46:45:c2:ea:10:3b:b4:95:4b:
b6:40:36:65:90:c3:4c:86:da:28:46:33:a8:d9:bc:e3:02:33:
98:20:65:d0:0b:eb:fd:bd:7a:e2:92:b1:e9:17:eb:00:94:f5:
25:f6:f3:f7:91:30:29:00:9d:57:4a:db:3c:de:91:43:4f:6d:
21:39:82:89:80:17:37:19:89:1e:80:05:80:20:e2:b1:21:98:
f9:aa:b1:96:2b:ad:f5:8b:0e:8c:20:43:98:2b:94:73:a2:c1:
77:c6:91:f7:af:03:be:a1:b0:58:43:61:e8:44:03:f8:f0:77:
5d:e4:5a:5f:3e:9d:35:ef:f2:ba:1c:db:d3:9b:00:a9:76:91:
8d:4b:5e:92:00:45:e6:13:9f:9d:af:6a:09:d7:a7:67:cf:ae:
a1:5a:e6:cf:4b:36:ee:e0:f1:b0:e8:33:90:1d:41:9c:05:f4:
7e:55:8e:5a:85:80:37:71:f4:30:b5:1d:52:91:63:3b:11:2f:
48:26:4a:cb:eb:d1:ca:4a:5f:9d:99:03:b1:70:a8:07:f8:bd:
c2:be:e0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org