Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1980e981-810a-41fe-9d73-f1c36894c51b/dd4e21c9509fd2d8857c8680a3fe39b03658d1ef.roa
File: dd4e21c9509fd2d8857c8680a3fe39b03658d1ef.roa (raw, json)
Hash identifier: ednaWR1ip9qrNBSg4yveBwBi9k0eypvNsE/E5B+KYnw=
Subject key identifier: 68:E9:78:15:19:75:90:13:98:78:6A:90:B1:5E:C9:49:66:D2:03:DD
Certificate issuer: /CN=2741c4b95ce4e26190e9cd3600e7acc3be164b12
Certificate serial: 0B8AC6
Authority key identifier: 9E:3E:A2:A6:AF:27:BB:E3:FC:18:69:8C:1C:27:0E:13:CD:1C:5E:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2741c4b95ce4e26190e9cd3600e7acc3be164b12.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1980e981-810a-41fe-9d73-f1c36894c51b/dd4e21c9509fd2d8857c8680a3fe39b03658d1ef.roa
Signing time: Sat 21 Oct 2023 17:17:13 +0000
ROA not before: Sat 21 Oct 2023 17:17:13 +0000
ROA not after: Tue 21 Oct 2025 17:17:13 +0000
asID: 270083
IP address blocks: 200.23.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 756422 (0xb8ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2741c4b95ce4e26190e9cd3600e7acc3be164b12
Validity
Not Before: Oct 21 17:17:13 2023 GMT
Not After : Oct 21 17:17:13 2025 GMT
Subject: CN=dd4e21c9509fd2d8857c8680a3fe39b03658d1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:08:cb:99:df:21:cd:c6:d2:25:4d:9d:4e:
19:c6:a8:38:83:c8:2c:1b:8c:8e:c8:b9:ab:28:b9:
2e:0c:77:e4:b3:e7:be:de:94:13:43:83:11:16:eb:
21:fa:89:7e:0c:e1:fe:1a:ef:68:ea:17:03:85:34:
4d:bd:1f:b7:60:8e:a6:8d:92:23:ef:e2:9e:f5:68:
29:16:c4:d1:ba:ea:43:64:81:6c:ac:15:11:d8:51:
a3:a7:83:22:8d:67:66:99:e4:fc:94:d1:1c:fd:3d:
3a:74:f1:02:1e:c2:da:d8:09:85:86:99:50:28:01:
f6:23:74:21:62:9c:70:25:d2:5d:64:7f:b9:89:fb:
3d:20:ce:26:33:09:ad:e6:a1:74:10:f2:dd:72:56:
f2:a5:84:6b:98:58:0c:87:89:e2:64:84:58:3d:5e:
4e:3a:1d:f7:be:8e:b5:41:b2:58:90:37:3b:4d:f4:
f7:1e:b3:0a:4d:6f:9c:18:fb:f1:11:ed:dc:18:08:
e9:08:d6:ae:90:cf:cb:a2:01:3d:e5:13:10:d1:be:
63:6f:91:f8:ff:d7:30:f4:14:57:97:01:fc:9a:c5:
e4:ee:ac:b8:75:61:8e:2f:b1:11:e8:82:7b:71:2b:
57:64:a4:35:b7:8f:bc:17:b9:51:48:52:35:ec:06:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E9:78:15:19:75:90:13:98:78:6A:90:B1:5E:C9:49:66:D2:03:DD
X509v3 Authority Key Identifier:
keyid:9E:3E:A2:A6:AF:27:BB:E3:FC:18:69:8C:1C:27:0E:13:CD:1C:5E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2741c4b95ce4e26190e9cd3600e7acc3be164b12.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1980e981-810a-41fe-9d73-f1c36894c51b/dd4e21c9509fd2d8857c8680a3fe39b03658d1ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1980e981-810a-41fe-9d73-f1c36894c51b/2741c4b95ce4e26190e9cd3600e7acc3be164b12.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.23.159.0/24
Signature Algorithm: sha256WithRSAEncryption
20:dc:71:11:20:f6:a5:8f:6e:62:55:32:48:37:5b:aa:47:ff:
c4:1d:7e:fa:42:cc:c2:6f:a8:f9:08:55:63:4b:6e:54:da:17:
ce:24:ad:9b:b4:a3:91:0f:87:dd:79:66:d3:f2:63:97:4c:31:
3d:e1:21:5f:40:13:6c:cc:52:f3:63:ce:0a:63:b3:99:f5:07:
17:de:0c:d7:4a:ac:45:cf:f0:f8:20:df:20:08:f5:db:52:6c:
7f:8d:9d:ee:f5:b5:07:05:9b:01:5d:87:8d:37:d8:65:49:e9:
70:1d:58:bb:88:91:f2:ac:33:b7:d6:f6:59:5d:2d:07:5d:bb:
29:76:c3:9b:5b:7d:85:6d:7a:b6:e1:bd:48:d5:f6:c5:c0:7e:
59:75:78:51:cb:d1:ea:cc:b8:71:b2:2f:1f:12:dd:54:31:98:
59:37:72:d2:e9:1d:64:58:cd:7e:90:33:fc:87:4b:e3:00:4c:
54:56:f3:27:09:10:c3:38:c4:c7:f4:04:c2:24:15:52:26:c8:
ce:7f:3c:11:03:67:d2:df:83:e9:2c:7c:a9:29:c6:28:42:02:
44:66:02:65:88:6b:ad:eb:ef:48:df:a9:38:c8:24:12:85:50:
c4:02:9f:42:f8:ab:a3:2e:dd:96:a4:00:3e:5b:5c:25:36:df:
d5:53:da:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org