Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/50cf49fa11b0d2325a57fdcc5115e93922fa2631.roa
File: 50cf49fa11b0d2325a57fdcc5115e93922fa2631.roa (raw, json)
Hash identifier: vEhKaTzHQNQxsRqSOeN1hg4bCVMK7DLemtMWPlGKgLM=
Subject key identifier: B4:18:FB:92:F4:6C:43:CB:F6:A4:04:2D:16:0A:D7:AA:45:E4:56:B6
Certificate issuer: /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial: 19F085
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/50cf49fa11b0d2325a57fdcc5115e93922fa2631.roa
Signing time: Thu 31 Aug 2023 16:26:26 +0000
ROA not before: Wed 30 Aug 2023 16:26:25 +0000
ROA not after: Sun 31 Aug 2025 16:26:25 +0000
asID: 30133
IP address blocks: 200.93.240.0/24 maxlen: 24
200.93.241.0/24 maxlen: 24
200.93.242.0/24 maxlen: 24
200.93.243.0/24 maxlen: 24
200.93.244.0/24 maxlen: 24
200.93.245.0/24 maxlen: 24
2001:13c7:7006::/48 maxlen: 48
2001:13c7:7007::/48 maxlen: 48
2001:13c7:7008::/48 maxlen: 48
2001:13c7:7009::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1699973 (0x19f085)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Validity
Not Before: Aug 30 16:26:25 2023 GMT
Not After : Aug 31 16:26:25 2025 GMT
Subject: CN=50cf49fa11b0d2325a57fdcc5115e93922fa2631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:85:7d:2f:98:9e:c5:0c:9b:4a:1d:40:e9:
6a:9a:ec:8a:95:a2:b3:2f:a5:a4:c7:19:d2:a5:d2:
3d:e4:59:f6:6e:6d:00:1d:88:13:a3:b7:f8:cc:a9:
02:76:1f:fa:75:c2:79:a3:2a:55:18:77:da:09:83:
8f:4f:15:16:6e:f1:d5:bb:1a:f5:f8:19:94:9e:b9:
66:9b:85:5d:92:14:ef:28:bf:31:8c:3b:bd:a1:47:
e0:52:ce:c7:cd:a1:67:25:bf:ab:6a:93:e3:c4:3e:
a9:a6:c5:0b:e0:db:f7:61:c5:d8:69:18:da:35:de:
1a:8b:06:ab:12:f5:b7:d6:b4:6f:75:7e:9b:54:bf:
5b:9f:8b:80:a2:06:37:57:c4:b1:6a:d8:00:5d:c0:
ac:c0:bd:8a:9a:1e:6d:30:0f:26:b2:19:83:96:25:
c4:47:6f:02:80:64:e3:e5:e9:f2:51:1f:5e:cd:3e:
b0:f4:d1:88:4f:89:0b:db:ba:a0:4c:7a:e0:b2:a9:
a3:2d:9a:18:e7:c2:34:5f:31:ce:4c:67:c3:48:4d:
d4:0b:16:3a:77:d1:54:0f:45:6e:77:6d:8b:4c:ce:
e0:76:77:71:7f:a1:18:5e:f9:36:54:15:51:99:17:
7c:bc:db:4f:20:82:25:49:79:a9:27:81:10:52:8b:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:18:FB:92:F4:6C:43:CB:F6:A4:04:2D:16:0A:D7:AA:45:E4:56:B6
X509v3 Authority Key Identifier:
keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/50cf49fa11b0d2325a57fdcc5115e93922fa2631.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.93.240.0-200.93.245.255
IPv6:
2001:13c7:7006::-2001:13c7:7009:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3f:43:fd:ea:23:23:0f:b8:99:24:ba:e7:7f:eb:06:ea:85:08:
4b:05:2c:e3:c1:d5:bc:5d:3a:11:ee:1d:70:e8:1f:19:19:50:
64:4c:08:8d:87:14:dd:e8:74:1e:30:52:81:d8:6e:36:62:45:
e2:59:72:a6:2e:24:bd:f1:a4:29:38:91:13:90:89:c2:b1:6e:
c0:86:e8:cf:71:8c:e4:9a:96:b4:cb:85:f4:a4:76:4b:c2:65:
24:2f:0e:1a:b7:5c:bd:e4:ee:2d:cf:00:5c:f3:c8:ec:8e:b2:
4b:9b:5b:a3:44:81:47:c5:e3:3f:44:8b:bf:de:be:5b:43:f1:
2e:ed:da:c2:07:c7:e6:7e:44:71:9f:44:00:f1:11:0e:ae:05:
d9:e8:9f:a0:4a:1f:98:de:f8:ae:38:11:5e:f9:4d:c5:d8:6d:
0b:29:8a:a5:f9:45:fe:cc:e0:83:0b:3f:32:34:89:90:5e:6a:
0e:af:5f:48:d3:6e:b2:ad:44:94:fb:a8:69:52:cb:fa:da:b3:
87:30:4b:3f:f1:95:b3:a0:61:14:c5:f6:6c:80:24:41:5b:b3:
53:8f:a8:1c:9c:91:50:ad:58:b7:fe:9f:c6:cd:03:4a:48:3e:
09:63:b1:55:77:b0:f9:f2:9f:73:6b:8a:83:32:bb:f7:dd:9a:
04:55:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org