Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/87a0eab8538bd2d7bccd367aac21eae5f1c02807.roa
File: 87a0eab8538bd2d7bccd367aac21eae5f1c02807.roa (raw, json)
Hash identifier: fWjF/A1kkY1EQ323sV8AR2+wmuW319Ze0TmtztQUDZU=
Subject key identifier: 94:5E:11:EE:C7:6D:25:0C:A2:0D:2F:B1:E5:03:5E:1D:EF:D8:07:8F
Certificate issuer: /CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
Certificate serial: 29A173
Authority key identifier: 1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/87a0eab8538bd2d7bccd367aac21eae5f1c02807.roa
Signing time: Sat 16 Mar 2024 22:03:23 +0000
ROA not before: Sat 16 Mar 2024 22:03:19 +0000
ROA not after: Fri 16 Mar 2029 22:03:19 +0000
asID: 27742
IP address blocks: 200.30.128.0/24 maxlen: 24
200.30.130.0/24 maxlen: 24
200.30.132.0/24 maxlen: 24
200.30.165.0/24 maxlen: 24
200.30.170.0/24 maxlen: 24
200.30.177.0/24 maxlen: 24
200.30.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2728307 (0x29a173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5d1117ae408cf5674d277fb7690575abaf8ac60
Validity
Not Before: Mar 16 22:03:19 2024 GMT
Not After : Mar 16 22:03:19 2029 GMT
Subject: CN=87a0eab8538bd2d7bccd367aac21eae5f1c02807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:f5:d7:4f:5b:e9:3b:48:47:2e:1a:2c:2f:
a3:07:df:8c:e5:e0:99:c8:98:6c:62:03:e1:ac:5a:
22:50:d9:70:c5:a8:24:c0:de:8f:37:a1:64:0a:cc:
4f:d9:ed:1f:15:dd:84:4e:29:45:f4:8e:2b:7e:f5:
5e:11:e7:61:ee:bc:c8:60:3f:57:96:24:35:8f:11:
49:28:89:88:75:c5:b9:50:b8:81:af:59:04:e9:f6:
fb:07:21:ab:b6:3e:96:a3:a8:d9:16:ba:bb:8e:f9:
4a:31:e9:71:78:57:9f:d7:11:b6:75:21:b9:2f:04:
8e:d5:02:35:ee:d8:56:e2:a2:34:55:d0:6f:a9:b2:
40:bb:1a:2f:45:a9:2a:4f:ae:1a:cb:f3:c5:f4:bc:
64:3d:9e:82:ba:57:67:47:14:07:22:27:aa:a7:af:
56:0a:46:aa:6c:fd:63:4c:a7:2f:43:59:3b:ef:6f:
f3:3d:cc:6b:f2:a9:2d:19:2e:67:9d:d7:11:e5:c5:
e8:8b:6f:1d:c9:09:d4:7c:8b:87:57:27:34:dd:3f:
be:86:f2:6c:48:27:98:f1:73:e0:b4:4e:25:4f:4c:
4c:49:57:ab:97:42:33:15:2c:51:19:e2:89:af:b7:
f9:8d:77:51:76:97:0f:49:94:50:3b:1c:b3:00:b9:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5E:11:EE:C7:6D:25:0C:A2:0D:2F:B1:E5:03:5E:1D:EF:D8:07:8F
X509v3 Authority Key Identifier:
keyid:1D:70:01:B3:6F:E8:15:02:20:97:48:42:D0:1E:89:9B:74:12:94:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d1117ae408cf5674d277fb7690575abaf8ac60.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/87a0eab8538bd2d7bccd367aac21eae5f1c02807.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/b5d1117ae408cf5674d277fb7690575abaf8ac60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.128.0/24
200.30.130.0/24
200.30.132.0/24
200.30.165.0/24
200.30.170.0/24
200.30.177.0/24
200.30.182.0/24
Signature Algorithm: sha256WithRSAEncryption
78:07:b9:8a:ca:68:16:9b:a6:c0:5f:d2:97:ee:58:13:b6:4c:
59:8b:9b:e8:47:0f:bc:62:e4:3a:18:2a:9f:87:08:d3:43:18:
b8:2e:22:5b:2b:28:b8:ca:d9:53:0e:ca:b8:3e:f5:a0:43:3e:
85:62:4e:99:a7:bf:11:50:82:ca:77:a6:bd:ae:6f:45:58:9c:
e5:6b:02:b1:f4:29:c5:c3:65:91:eb:6e:26:7e:43:b1:d8:07:
aa:50:4b:28:27:e6:13:f0:e5:12:40:be:bc:33:74:80:8d:74:
a2:3b:96:02:cf:1d:29:60:83:42:25:74:71:dc:78:cc:b2:38:
a9:2c:a5:7c:1d:97:78:8b:c5:1a:aa:3e:5a:6b:58:66:be:43:
86:1c:f1:4f:b8:01:b1:8c:7f:c4:ab:91:a9:2e:42:93:c4:f5:
bf:c1:b6:d0:5f:04:35:7a:0c:45:d2:b8:68:c6:0e:bc:1a:f6:
54:5a:08:a7:24:d7:e1:c6:01:6a:76:16:35:53:e5:d0:18:81:
4b:53:0d:07:31:a2:d6:13:b0:6c:b3:d7:ff:9e:6a:18:5d:99:
18:00:32:2a:75:0d:d5:1d:03:fc:b0:0f:1c:98:f7:46:98:a1:
5a:a3:68:f4:92:75:df:71:c4:1c:d2:86:de:4f:29:c8:e1:e0:
d9:4c:5b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:01 2024 by rpki-client on console-ams.rpki-client.org