Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/245daf3fa01dc6c11aaf9ed637c9f0f17116723a.roa
File: 245daf3fa01dc6c11aaf9ed637c9f0f17116723a.roa (raw, json)
Hash identifier: 6SDmlLWOaXjdSbykXgjxeh+eSyV0AT21FC0FZOuA0DY=
Subject key identifier: FD:DB:C2:DE:7B:CC:A9:9D:03:C7:49:3A:CA:B1:72:12:71:21:F3:07
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 0E35B9
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/245daf3fa01dc6c11aaf9ed637c9f0f17116723a.roa
Signing time: Wed 24 Mar 2021 14:45:11 +0000
ROA not before: Wed 24 Mar 2021 14:45:09 +0000
ROA not after: Tue 24 Mar 2026 14:45:09 +0000
asID: 22227
IP address blocks: 200.46.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 931257 (0xe35b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Mar 24 14:45:09 2021 GMT
Not After : Mar 24 14:45:09 2026 GMT
Subject: CN=245daf3fa01dc6c11aaf9ed637c9f0f17116723a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:69:2b:34:bf:0d:15:e7:50:79:4c:c1:56:
7e:6d:24:5a:d3:69:8c:6c:b0:4b:e3:ca:02:ac:75:
1e:3b:ef:43:51:d6:f1:ba:e3:7b:e8:0b:b3:29:6c:
fc:49:5d:f7:46:52:20:d0:cd:0b:42:60:00:a8:95:
5b:e1:9f:36:e5:74:0f:e3:43:26:9d:0f:3f:83:13:
98:f0:be:20:92:13:ad:dd:a9:cd:f0:73:11:0d:4d:
83:f4:02:95:f6:47:a0:95:0d:09:53:6a:6c:1c:00:
4c:18:72:41:26:6f:44:c0:2b:e9:d8:cb:27:c2:39:
68:d1:ff:f1:63:d3:22:d3:9f:48:21:60:8e:c2:c3:
ac:55:fd:86:72:d5:db:c4:a8:d3:d0:92:e9:86:18:
9a:c6:3d:ca:66:6b:1c:57:4a:03:aa:72:5e:bd:b1:
3e:93:d2:e1:03:f1:35:13:04:6c:ac:3d:d9:00:fd:
1d:1b:85:52:6d:fc:e0:f9:1e:f1:0b:28:76:7a:51:
86:fd:a4:b9:92:d9:cd:a5:b9:b5:c4:35:6a:f1:3d:
98:ab:ed:49:a2:9d:f0:99:6f:dc:1e:27:80:c1:f3:
b7:72:3b:d5:cd:78:2e:b3:c3:2a:42:61:1b:ca:99:
4e:4f:1b:69:b3:6f:bf:4f:7e:6c:f5:bc:b0:d4:30:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DB:C2:DE:7B:CC:A9:9D:03:C7:49:3A:CA:B1:72:12:71:21:F3:07
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/245daf3fa01dc6c11aaf9ed637c9f0f17116723a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.46.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:b6:d7:6d:87:b7:f1:23:6f:80:9d:aa:48:22:fa:c2:9d:82:
d5:a0:dc:a3:ee:cc:e5:7e:4b:6c:27:df:2c:0f:3f:84:52:8a:
25:3c:66:b4:a5:ab:aa:89:71:54:3d:26:f3:42:be:ec:98:73:
69:b0:4a:30:0f:79:a6:7a:99:46:d5:ce:1d:1a:a4:d1:4f:be:
fc:c7:79:8a:61:91:b9:0b:ea:17:d6:1e:a7:e8:92:45:da:48:
59:a9:6b:f1:75:89:68:aa:eb:ce:13:82:48:b6:fa:fc:fc:37:
b1:c4:26:8d:47:2a:08:4f:87:92:dc:32:33:95:2a:59:be:a3:
5d:8e:79:51:c4:3a:92:5c:6a:63:94:cd:f1:a2:9e:d2:27:a9:
5d:7e:52:15:b6:58:25:c2:2a:8d:b6:8d:e4:72:d4:ce:f3:25:
88:51:cb:b8:e0:89:91:da:ac:d1:05:06:c4:f3:22:43:ae:f3:
49:d3:8e:94:16:38:4d:84:d7:fa:cd:50:56:19:16:f2:c2:58:
00:f5:0d:0b:9c:6a:c9:7c:78:1d:a7:42:2a:5f:d7:0e:87:ea:
ba:46:62:49:a0:16:11:2a:a2:a3:8e:34:32:d5:66:44:10:9f:
03:26:d0:57:cc:e0:4a:c9:a1:6c:61:3c:ac:e8:65:84:85:1e:
ea:ba:57:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org