Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/f401d7bc14a4a7015784c50734b3632ddbcc6f73.roa
File: f401d7bc14a4a7015784c50734b3632ddbcc6f73.roa (raw, json)
Hash identifier: DbPpA+mAMS9UKfSKPQinl24tRlntsoDIA4/A8b6X5Fg=
Subject key identifier: F6:D3:E1:8B:7E:13:44:51:85:12:59:A3:34:A9:E4:70:5C:43:2C:16
Certificate issuer: /CN=bfa1a6cea5071fa02d7426401f14b3d6b3d0da83
Certificate serial: 065C07
Authority key identifier: 3A:13:D5:51:2E:F7:7C:6A:F8:FA:C3:BE:15:8C:AD:91:7C:C0:39:34
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/f401d7bc14a4a7015784c50734b3632ddbcc6f73.roa
Signing time: Mon 04 Dec 2023 05:46:32 +0000
ROA not before: Mon 04 Dec 2023 05:46:32 +0000
ROA not after: Thu 04 Dec 2025 05:46:32 +0000
asID: 271908
IP address blocks: 131.255.17.0/24 maxlen: 24
131.255.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 416775 (0x65c07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa1a6cea5071fa02d7426401f14b3d6b3d0da83
Validity
Not Before: Dec 4 05:46:32 2023 GMT
Not After : Dec 4 05:46:32 2025 GMT
Subject: CN=f401d7bc14a4a7015784c50734b3632ddbcc6f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:be:81:4f:8e:1e:01:7f:da:44:d5:ab:dd:
10:27:a8:92:7e:b1:3e:75:e2:bb:72:f3:a6:09:48:
3f:e6:29:dd:77:8f:75:1d:88:02:08:eb:b4:99:40:
42:0c:f5:cc:a5:46:17:be:25:b5:c9:66:f2:7e:e6:
6d:da:d8:11:43:e9:43:cb:c0:a0:65:06:0d:98:8f:
2c:93:af:6f:d3:42:5d:7c:95:1d:07:74:1b:c0:d7:
81:9e:c0:ef:c7:eb:77:d5:32:a9:88:13:24:96:0d:
25:48:62:b8:41:fa:87:07:34:2e:94:7d:3f:3f:57:
c4:c8:0d:d5:23:fd:b4:f3:c1:3c:fb:a6:04:78:9c:
01:da:46:5d:05:21:a9:aa:d9:f9:c8:48:10:7e:3b:
47:dd:f9:31:c1:97:7b:38:1d:61:ef:09:10:7e:29:
b5:f1:66:dd:e7:f2:6e:d7:1d:97:93:b3:d0:7b:41:
6e:74:34:5c:9a:c2:07:f4:1f:ab:9a:b9:42:db:0c:
8f:95:1e:49:e9:db:09:a6:ea:cd:c7:41:d0:3a:a5:
c1:35:05:e8:dc:6e:ba:e2:a3:30:dd:06:93:e8:7d:
b6:da:08:87:23:25:a7:aa:64:1c:0c:d0:83:0d:e6:
69:b8:7e:93:d5:bc:d1:77:d3:3e:d3:db:80:9c:c2:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D3:E1:8B:7E:13:44:51:85:12:59:A3:34:A9:E4:70:5C:43:2C:16
X509v3 Authority Key Identifier:
keyid:3A:13:D5:51:2E:F7:7C:6A:F8:FA:C3:BE:15:8C:AD:91:7C:C0:39:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/f401d7bc14a4a7015784c50734b3632ddbcc6f73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/bfa1a6cea5071fa02d7426401f14b3d6b3d0da83.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.17.0-131.255.19.255
Signature Algorithm: sha256WithRSAEncryption
5d:a4:30:8b:c5:98:18:e3:90:08:6b:88:4f:4b:52:c8:31:31:
84:64:b4:fd:f1:fb:8d:c2:94:9f:e6:22:75:14:9d:04:13:68:
90:04:21:27:22:cb:8b:d8:5b:0b:02:33:4d:0c:dd:25:aa:73:
32:c8:29:e7:01:8c:ba:f2:72:38:51:27:fc:78:d7:ee:5b:ff:
df:e8:0f:bc:30:66:fa:c4:49:cf:f9:e4:51:b8:b6:1b:59:15:
e5:47:18:d5:e8:65:85:1f:d8:0c:4d:a6:99:6a:18:98:75:19:
59:93:22:bc:28:ee:9c:00:f7:60:7c:3a:5c:25:5e:55:11:30:
40:3a:6a:14:ef:8a:88:39:bc:0d:c2:5e:bc:dd:05:7a:39:09:
7d:07:c5:d0:ab:9b:43:7a:8b:14:62:67:c5:01:cb:81:8a:9d:
d4:b3:ee:11:90:c6:40:5d:4c:53:3c:e9:ae:05:a9:e4:92:36:
67:1f:d6:68:9d:46:c2:bb:d0:27:f3:29:ee:b5:84:05:70:0b:
ac:47:5a:fa:38:e2:d9:49:73:26:93:01:e2:58:16:5e:79:18:
aa:0d:14:63:09:08:55:29:ae:e7:8c:ed:d1:89:37:d6:0a:70:
f6:6c:61:ea:6a:db:fd:84:3d:1d:a5:b6:cb:7c:fb:fc:e2:68:
d5:c3:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:28 2023 by rpki-client on console.sobornost.net