Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/052ceed1-33f6-4ab1-89a1-451074697254/ab9f5ecc48cd8633b8a2c40fa583390129f6e8a1.roa
File: ab9f5ecc48cd8633b8a2c40fa583390129f6e8a1.roa (raw, json)
Hash identifier: gsxWQyd8G29xxSROeQWmaxqEuWQvfzcBD5HcYcLefDM=
Subject key identifier: F0:5F:F1:FA:07:07:69:27:10:15:92:C5:E0:73:8C:EA:CF:4C:73:90
Certificate issuer: /CN=c7256964f9010e745d04aefcbdad1b63db6e507e
Certificate serial: 0CEE50
Authority key identifier: D8:0A:28:C6:0B:6C:60:99:44:4D:EF:FE:71:69:86:FA:CD:12:E4:6F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7256964f9010e745d04aefcbdad1b63db6e507e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/052ceed1-33f6-4ab1-89a1-451074697254/ab9f5ecc48cd8633b8a2c40fa583390129f6e8a1.roa
Signing time: Wed 24 Mar 2021 14:34:38 +0000
ROA not before: Wed 24 Mar 2021 14:34:38 +0000
ROA not after: Tue 24 Mar 2026 14:34:38 +0000
asID: 27763
IP address blocks: 200.25.224.0/20 maxlen: 24
200.25.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847440 (0xcee50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7256964f9010e745d04aefcbdad1b63db6e507e
Validity
Not Before: Mar 24 14:34:38 2021 GMT
Not After : Mar 24 14:34:38 2026 GMT
Subject: CN=ab9f5ecc48cd8633b8a2c40fa583390129f6e8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b7:c6:4f:10:c8:9c:14:1d:8a:c9:39:cd:2d:
92:13:ce:d4:9c:ee:1b:34:8c:64:41:8e:f6:b7:4b:
ea:34:76:a6:13:e5:52:33:43:6a:1a:09:38:a9:1d:
a7:cb:94:50:47:89:fb:70:d1:c8:f1:be:01:2c:ec:
35:e9:54:c3:1d:d3:53:7e:c6:02:54:97:a5:5c:e6:
02:70:4b:b2:3b:7c:6f:f0:80:4f:67:62:b1:52:65:
75:89:71:29:98:83:bb:d8:bf:8c:17:92:84:fc:5f:
bc:d1:9a:b0:d9:cb:6c:75:2d:3b:a4:b8:35:b3:6c:
a0:3f:90:8c:09:1b:de:82:6d:3a:f4:aa:06:cf:ca:
dd:36:d8:7a:c4:cf:d6:22:5c:27:a3:22:8c:63:a4:
78:55:13:1b:27:d2:aa:04:2b:e1:7c:1b:8c:9f:ce:
f8:33:93:bf:6a:d8:e9:95:19:e3:a0:e9:bd:ee:3b:
3a:a0:1b:da:40:3a:24:2e:0d:21:0c:24:42:13:3e:
70:35:20:36:da:8b:97:b7:22:ac:69:86:52:81:95:
4d:fb:91:65:2d:69:79:7c:03:84:db:81:cd:42:23:
ef:22:f8:ae:48:54:5d:e6:1c:9e:82:f1:9a:2a:c5:
33:60:78:88:8c:b8:3e:a8:6f:f3:08:28:d4:61:54:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:F1:FA:07:07:69:27:10:15:92:C5:E0:73:8C:EA:CF:4C:73:90
X509v3 Authority Key Identifier:
keyid:D8:0A:28:C6:0B:6C:60:99:44:4D:EF:FE:71:69:86:FA:CD:12:E4:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7256964f9010e745d04aefcbdad1b63db6e507e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/052ceed1-33f6-4ab1-89a1-451074697254/ab9f5ecc48cd8633b8a2c40fa583390129f6e8a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/052ceed1-33f6-4ab1-89a1-451074697254/c7256964f9010e745d04aefcbdad1b63db6e507e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.25.224.0/19
Signature Algorithm: sha256WithRSAEncryption
86:ee:a5:df:76:6d:8e:06:b2:29:ea:97:da:27:eb:85:81:3c:
5d:7f:5c:c1:5e:52:72:b9:44:0a:a7:b3:88:86:28:64:db:56:
4b:bd:b9:4e:5c:29:68:ba:a4:59:0b:81:a0:66:48:62:6e:e5:
eb:3c:5f:ca:19:46:15:1c:c0:e3:eb:a7:6b:31:9f:09:b7:c8:
c0:de:e4:3e:37:da:3d:01:f4:d9:25:dd:42:18:37:8d:63:f2:
b6:02:8e:be:fd:be:fa:29:8e:55:9c:59:d1:0f:a3:b7:26:44:
ea:bf:59:fa:4a:90:33:ad:b0:32:29:06:31:7e:c0:3e:e6:b1:
f8:f8:22:d3:91:23:f2:03:e1:f9:c2:19:72:67:df:95:02:d4:
a8:de:2b:fb:6b:59:59:95:27:e7:81:d5:4f:8e:34:37:8e:ec:
db:1e:99:08:a4:82:b2:84:40:6c:bd:19:04:bf:f2:a1:d6:72:
46:4f:2e:dd:a0:c9:7d:e4:61:41:ce:17:3f:50:96:02:76:1e:
50:03:95:0d:bb:c4:09:54:09:bb:bf:39:49:0c:a0:fb:bb:5d:
f2:8d:ae:e9:6a:75:af:af:9b:b8:d1:70:ef:e8:c3:f4:b2:ad:
2c:a3:f6:9e:28:a1:36:80:6c:d2:4e:04:59:29:dc:76:4e:f4:
7a:9d:0c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org