Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/a5f65694268a962d0c53cf74e8cac94afd62f6e5.roa
File: a5f65694268a962d0c53cf74e8cac94afd62f6e5.roa (raw, json)
Hash identifier: gSAFoN0vuRQYJcoIOouX8im4TYlqaBH4BQNjeij540o=
Subject key identifier: E4:BD:03:92:95:6E:F8:91:AA:AB:99:5C:C5:16:A4:90:BD:82:05:FA
Certificate issuer: /CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Certificate serial: 0E1683
Authority key identifier: 5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/a5f65694268a962d0c53cf74e8cac94afd62f6e5.roa
Signing time: Wed 24 Mar 2021 14:42:05 +0000
ROA not before: Wed 24 Mar 2021 14:42:05 +0000
ROA not after: Tue 24 Mar 2026 14:42:05 +0000
asID: 27742
IP address blocks: 200.30.128.0/24 maxlen: 24
200.30.130.0/24 maxlen: 24
200.30.132.0/24 maxlen: 24
200.30.165.0/24 maxlen: 24
200.30.170.0/24 maxlen: 24
200.30.177.0/24 maxlen: 24
200.30.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 923267 (0xe1683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350
Validity
Not Before: Mar 24 14:42:05 2021 GMT
Not After : Mar 24 14:42:05 2026 GMT
Subject: CN=a5f65694268a962d0c53cf74e8cac94afd62f6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b9:79:63:9f:07:0d:08:7e:fc:11:16:0d:2e:
56:77:bb:3e:e9:8c:05:79:2c:07:1b:bd:b6:a5:2b:
6b:ce:b4:90:af:f2:9b:3e:c6:c9:bf:67:b5:ad:cd:
c9:13:70:9c:fd:04:05:db:a4:c5:e1:5d:6c:7b:4b:
25:53:22:a3:c6:d1:8a:76:69:95:fa:e6:10:4d:91:
cb:95:37:38:5f:60:ec:7c:6c:52:07:da:0c:f2:9e:
74:8c:f5:22:81:6f:3c:48:2d:b6:e9:00:6a:75:fc:
5c:8c:91:9c:dd:66:cd:72:3b:d2:4a:18:4d:52:de:
0f:57:42:67:49:9f:da:90:56:d4:e4:26:c0:65:eb:
50:d4:ed:ec:da:92:4c:d3:75:71:3c:a8:90:7f:09:
e9:0f:94:64:2c:4b:92:37:7b:49:3a:b4:43:27:a6:
bb:d0:e7:c6:ee:a3:f2:2c:2c:11:7c:1b:65:ef:eb:
86:f7:4c:83:2e:98:af:41:cd:23:f7:03:99:8e:8c:
2e:94:1c:5e:ce:87:ac:96:77:fe:a2:c1:c3:72:4e:
00:59:ef:bd:bd:56:5d:79:cf:e0:04:2a:7e:05:3d:
7c:b2:7d:c7:aa:c6:9a:d8:66:e8:ee:a2:20:09:44:
3c:80:c4:7a:f5:76:9f:f2:bd:32:de:03:2c:63:3d:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BD:03:92:95:6E:F8:91:AA:AB:99:5C:C5:16:A4:90:BD:82:05:FA
X509v3 Authority Key Identifier:
keyid:5F:58:C6:83:CE:D5:C8:0E:0F:DF:DB:14:B9:1D:DC:AF:3C:E2:AB:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/a5f65694268a962d0c53cf74e8cac94afd62f6e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1a646a5a-e03b-48ec-8ec3-8065cce10e9e/7aab3a1b1d30b14b6d9a3fe39cefe867d60ff350.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.30.128.0/24
200.30.130.0/24
200.30.132.0/24
200.30.165.0/24
200.30.170.0/24
200.30.177.0/24
200.30.182.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:8c:26:7a:29:9e:7f:8d:00:fb:19:0e:ed:f7:f2:55:8f:58:
de:ae:f9:64:aa:b8:7e:d3:c4:18:4c:59:33:36:eb:db:ef:43:
64:f3:5e:cf:32:db:7d:41:1e:5e:8d:cf:66:f1:45:2a:66:c7:
b3:af:af:49:e0:e7:c8:b6:82:9a:e2:f8:d1:ee:46:11:d6:28:
ed:69:4a:44:ec:14:14:3a:79:48:8f:02:38:9e:e1:3b:27:42:
cf:91:9f:8d:6b:11:39:8b:85:e5:fa:6d:ae:bf:f5:6f:f5:40:
02:aa:48:ea:c3:72:88:5c:4e:54:fd:d6:81:78:df:d6:d9:cd:
07:5c:e0:eb:b6:0b:c7:e3:27:50:d3:58:bf:fc:6c:9b:9b:ef:
4e:3b:e5:29:2c:54:dc:05:5f:35:ab:59:6c:46:58:03:ab:3d:
8e:11:65:dc:57:6f:47:1e:be:97:5f:58:cf:6a:ab:7f:f8:18:
59:a5:26:fc:2a:6b:04:8b:75:fc:5f:8f:a2:74:66:23:ae:79:
34:19:bd:dc:8b:64:52:3e:c2:fc:77:b7:ce:14:51:10:b6:a2:
6f:92:4c:23:95:08:50:14:dc:7f:be:75:5c:9b:12:4d:f6:4b:
8e:73:03:11:56:df:cf:c1:e6:0b:c4:89:07:14:de:f7:87:65:
d1:b2:da:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org