Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/beed47c6fa2bb2a30af90ada4223027e01f2b128.roa
File: beed47c6fa2bb2a30af90ada4223027e01f2b128.roa (raw, json)
Hash identifier: XVfjLAK5JwI05UYcxUCKL/p1YLXfSu6Sy/vs6s/CNoA=
Subject key identifier: 01:CD:A4:85:53:A2:19:C5:6C:9E:CD:29:F1:2F:F1:D9:6B:1D:C2:CF
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 252AF2
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/beed47c6fa2bb2a30af90ada4223027e01f2b128.roa
Signing time: Fri 21 Jul 2023 20:57:44 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 263736
IP address blocks: 200.31.3.0/24 maxlen: 24
190.216.28.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2435826 (0x252af2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=beed47c6fa2bb2a30af90ada4223027e01f2b128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:07:b3:00:c9:75:6c:0b:5f:3e:67:69:30:
fa:1f:a5:f6:af:81:bb:05:7c:ec:48:53:ec:33:14:
b9:4f:5e:f1:2c:f4:70:57:42:8d:65:f3:4b:82:3e:
05:80:ef:06:a7:08:2e:4e:40:50:52:6d:f8:2e:a7:
5c:84:08:bf:ae:6d:17:4d:25:a2:82:d4:f5:c5:e8:
47:31:68:c2:90:49:ac:d0:da:e8:16:1e:30:6e:d5:
a1:78:9c:17:cb:92:02:69:6a:bd:0c:4f:08:85:c0:
ae:29:05:3f:a7:3b:71:71:de:0c:89:5a:d6:97:16:
6d:58:37:96:2e:47:2f:19:9a:d9:6f:b0:cb:27:b7:
c6:c1:e0:a1:2d:be:71:3b:34:57:dd:ea:eb:8f:64:
26:2a:2f:56:57:cf:40:0d:e6:8b:6c:fa:a7:a0:4d:
a6:14:9b:38:30:01:73:34:74:cc:c0:fd:d6:ac:e5:
5d:92:20:4b:4b:bd:07:5d:d2:37:94:a1:8c:b5:b1:
8c:34:2a:b7:a3:63:e5:cf:13:a2:30:37:c2:9d:7b:
d3:91:ab:cc:b0:d4:02:c7:7b:9e:7e:36:9a:d4:cd:
82:df:ab:05:38:bd:28:f1:f7:9f:a2:dd:ee:d4:87:
5f:b3:75:0b:08:ee:63:2b:61:d6:c2:38:15:82:48:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CD:A4:85:53:A2:19:C5:6C:9E:CD:29:F1:2F:F1:D9:6B:1D:C2:CF
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/beed47c6fa2bb2a30af90ada4223027e01f2b128.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.216.28.128/25
200.31.3.0/24
Signature Algorithm: sha256WithRSAEncryption
97:68:9a:4d:a0:91:7f:87:28:5c:31:e8:99:cf:54:54:e5:b9:
15:5a:50:57:b0:d1:31:1d:32:d9:33:66:82:fd:c7:b6:43:8f:
e8:01:8b:f6:20:8b:2f:67:09:11:7b:db:c4:d1:54:7b:3e:c9:
25:37:de:a7:88:96:92:b8:9b:51:ad:eb:c0:3d:ab:a0:cf:1d:
1d:6f:ff:c1:89:9b:3f:97:50:ba:e4:09:3f:50:3b:8e:a6:5f:
73:ee:4f:d9:3a:2f:56:75:2a:00:b5:48:ec:29:b7:c2:fe:ba:
d7:53:3a:97:96:9a:ff:bd:74:19:70:5e:ed:07:26:b1:3e:18:
82:78:18:cf:01:7a:00:ee:19:0c:ea:12:fc:2d:ad:5d:69:ba:
9e:41:b7:d6:2a:0e:56:aa:ca:f6:02:33:59:4e:8a:b5:a7:fa:
5c:e0:4a:b8:ff:6e:80:ff:92:3c:41:47:80:59:4a:00:9e:97:
cf:06:65:33:b4:88:ba:e8:61:07:b5:d4:3b:47:b1:cc:90:a5:
82:38:de:65:16:a9:c1:1d:66:e2:a9:de:15:6a:b1:95:8b:f9:
9e:0d:c2:b7:b6:9d:cf:c3:8c:0f:4f:62:49:e2:c6:d5:8b:51:
f5:81:b8:8c:7d:4f:f1:fa:ed:69:18:36:50:15:16:70:6c:09:
4e:aa:83:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org