Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/0f2aaad6f5220ab1b343983ec8d9dca49629257f.roa
File: 0f2aaad6f5220ab1b343983ec8d9dca49629257f.roa (raw, json)
Hash identifier: LxhlGW8BMWhX63Ib/qtDb1px6PuBENW1zVLRal1oJJk=
Subject key identifier: CF:2C:B4:87:A9:F1:3D:9A:83:80:44:71:09:F2:C7:78:8A:21:BD:45
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 24C476
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/0f2aaad6f5220ab1b343983ec8d9dca49629257f.roa
Signing time: Fri 21 Jul 2023 20:55:54 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 20207
IP address blocks: 200.41.17.0/24 maxlen: 24
190.216.60.0/24 maxlen: 24
190.216.62.0/24 maxlen: 24
200.41.20.0/24 maxlen: 24
200.55.26.0/24 maxlen: 24
200.55.28.0/24 maxlen: 24
190.216.18.0/24 maxlen: 24
190.216.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2409590 (0x24c476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=0f2aaad6f5220ab1b343983ec8d9dca49629257f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:ea:64:d1:93:10:7e:df:c0:ad:d8:b4:ab:
4d:b9:49:47:3d:34:19:ed:17:c5:73:35:07:8d:f7:
19:39:35:f6:56:65:15:5f:5c:8e:6b:4b:94:01:15:
35:ff:cb:f9:23:b0:59:8c:ba:c6:3f:23:5a:9e:ce:
c0:ee:f9:c6:44:81:2f:04:b4:a7:d8:84:e3:75:56:
47:fe:d9:49:6f:dc:7b:2c:0e:65:1f:ba:de:3b:23:
91:44:d9:c6:48:af:99:c7:1f:6d:ba:b0:dc:ec:f7:
b2:0c:f1:83:99:e1:a1:78:4c:bb:6d:27:0a:73:9a:
c7:2e:e3:92:b1:9c:e4:f2:e3:1b:f0:22:6e:4e:33:
b7:5d:fb:5f:63:49:39:08:7a:d4:ad:77:d7:8a:22:
e6:03:9c:0a:db:a6:4d:47:c3:c7:07:59:20:ac:b6:
38:d6:76:d8:a1:36:8c:a5:47:db:3e:78:3a:d7:d9:
4a:3d:29:93:59:1b:97:db:eb:dc:5f:bf:3b:e8:28:
54:dc:61:ce:15:9f:05:4f:76:a1:7f:19:1e:df:ec:
c6:10:5e:26:bd:1c:7e:6b:e9:c3:d9:50:e0:e8:d2:
09:5a:f7:19:c1:ae:53:c4:4b:c9:ef:b0:d3:93:00:
31:ac:db:3f:ea:61:00:7e:18:0b:66:46:6d:c4:8e:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:B4:87:A9:F1:3D:9A:83:80:44:71:09:F2:C7:78:8A:21:BD:45
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/0f2aaad6f5220ab1b343983ec8d9dca49629257f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.216.18.0/24
190.216.24.0/24
190.216.60.0/24
190.216.62.0/24
200.41.17.0/24
200.41.20.0/24
200.55.26.0/24
200.55.28.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c2:e9:c9:49:16:aa:16:84:eb:03:0a:66:b2:de:b9:9f:8c:
a1:9e:8f:60:c4:3d:93:3c:b0:95:75:26:6c:30:5e:99:77:75:
58:68:91:2e:42:ff:0a:a2:1e:af:57:38:77:bb:cb:dd:65:46:
c7:02:f5:fb:c1:2e:0f:35:78:ca:98:51:da:39:bd:c5:76:0b:
98:e8:cf:eb:45:a0:61:59:fb:50:48:43:57:f9:85:d7:2d:7a:
91:4d:c0:0d:99:d3:91:3b:04:d4:b9:dd:13:42:c5:2b:46:f1:
89:96:c6:14:36:eb:aa:40:26:f2:4f:fc:40:31:58:9d:f7:61:
24:34:f5:52:0f:cd:cb:a6:f1:d1:7b:c1:80:2c:7f:0c:d1:a0:
99:90:3a:61:81:70:5b:d9:df:be:61:e5:07:e3:98:b5:a7:88:
b9:16:04:ac:0c:69:c1:18:60:1c:7a:e9:77:d7:71:9f:de:e4:
95:4f:fe:64:a0:64:7a:ef:18:e5:1f:56:60:8e:52:03:9e:21:
af:f6:17:24:bb:ae:76:55:06:68:1c:bd:57:6f:8d:3e:9c:e8:
7c:8b:14:af:7e:11:f0:1e:16:5a:9d:bf:c0:82:9d:54:91:f2:
02:7d:e5:2f:67:d8:35:cb:3d:6d:dc:3a:8d:82:13:da:8b:92:
5d:01:65:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org