Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/ca311e128348a325dae4b4842ff70a70e0d5b416.roa
File: ca311e128348a325dae4b4842ff70a70e0d5b416.roa (raw, json)
Hash identifier: comuTlC+fNHZMvdntl/x01huCiTkZTwVl9vf74c8iis=
Subject key identifier: E8:AF:FF:BF:A5:8A:5D:F3:0A:DD:85:E0:F1:E0:C2:19:1D:D8:4F:CD
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 14DEF4
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/ca311e128348a325dae4b4842ff70a70e0d5b416.roa
Signing time: Mon 06 Nov 2023 21:56:48 +0000
ROA not before: Mon 06 Nov 2023 21:56:48 +0000
ROA not after: Thu 06 Nov 2025 21:56:48 +0000
asID: 23243
IP address blocks: 200.12.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1367796 (0x14def4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Nov 6 21:56:48 2023 GMT
Not After : Nov 6 21:56:48 2025 GMT
Subject: CN=ca311e128348a325dae4b4842ff70a70e0d5b416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:0c:1c:ce:60:04:be:6d:4a:5d:c8:30:33:
fb:81:fa:56:46:17:ee:32:64:4c:93:54:c1:99:de:
c5:8d:8d:c4:01:29:9c:35:7e:94:35:75:c1:f8:f7:
7e:b3:85:13:ae:1e:21:3e:9d:4f:48:6a:a3:4a:c6:
43:e7:05:f6:31:58:f7:8b:5f:ab:90:d3:83:1f:d6:
c7:35:ef:4c:c1:f0:f7:b3:e9:df:27:d3:6a:f4:56:
88:eb:57:a9:97:6c:45:71:2c:7b:87:03:d3:48:a3:
e2:1d:68:92:c8:13:4d:a8:60:45:f5:71:de:c2:92:
e4:bd:17:b6:1c:2c:86:d1:ac:b1:fe:71:9d:65:4e:
1f:79:fc:84:48:df:8b:9f:a9:c8:7c:b9:27:13:c5:
24:ad:66:75:f8:50:53:dd:83:5c:ea:d2:a5:56:d7:
80:95:72:04:c6:01:70:80:f9:e6:8a:2f:d9:47:07:
37:c9:fb:df:59:89:27:03:34:f4:a0:13:53:a0:75:
1f:41:e8:8b:af:c4:94:b1:32:8d:0e:5e:e9:bb:99:
d9:82:f4:53:74:9c:ff:d5:90:21:56:90:46:3b:e9:
62:76:b7:93:e3:ed:eb:c8:12:a7:fe:76:e4:e8:7f:
ec:e5:42:7e:a6:45:1a:3b:58:b7:74:cc:a3:36:ea:
f3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AF:FF:BF:A5:8A:5D:F3:0A:DD:85:E0:F1:E0:C2:19:1D:D8:4F:CD
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/ca311e128348a325dae4b4842ff70a70e0d5b416.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.42.0/24
Signature Algorithm: sha256WithRSAEncryption
17:77:1f:96:c0:66:f0:78:e9:44:1c:5c:1e:da:69:83:fa:9d:
19:6c:2e:76:86:22:ef:06:a3:20:07:bc:4c:7f:7e:ef:b7:a5:
f8:f1:86:3b:24:a9:7d:98:59:c8:37:3b:af:c8:d0:c4:f5:d0:
42:93:97:21:55:bf:a9:c9:d5:b1:c0:c5:6b:dd:3b:52:3d:22:
5f:8d:cc:59:46:2f:af:51:03:6b:dc:7c:35:dd:22:86:c1:90:
06:ed:c5:95:a6:d2:e7:56:40:bb:ba:5e:53:61:d2:e1:b6:72:
72:1a:23:07:00:9b:9e:da:b9:9b:e7:2d:54:a2:8e:a5:a1:1d:
da:15:0f:04:86:c3:4a:7b:7d:0e:47:1b:89:31:fb:91:98:be:
d0:cc:e0:f4:19:2f:85:5b:2b:b5:06:59:9e:2c:e0:b9:7a:1a:
6d:95:59:e8:cf:a1:79:52:7f:14:b1:e8:05:ef:8b:15:9b:7d:
f4:19:df:83:44:66:1c:53:cb:da:3c:d3:20:dc:2f:86:d6:0a:
34:72:b8:59:eb:88:7d:dc:1d:96:d0:c8:3f:aa:5c:e8:3f:c2:
91:29:f4:12:90:19:82:39:6e:fe:43:c8:1e:a3:2d:84:81:37:
05:f0:4f:9a:27:f1:9a:9a:4f:f6:ea:ca:d0:f2:2e:0b:e9:37:
fa:0c:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:02 2024 by rpki-client on console-fra.rpki-client.org