Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/72cb0e81155574ff2c47cac1c5f0d6c4685ec997.roa
File: 72cb0e81155574ff2c47cac1c5f0d6c4685ec997.roa (raw, json)
Hash identifier: h3vmdYJnUvJWYBbgLOVYrkoL2ArIJ5nHoVPQ/uhrWsc=
Subject key identifier: 34:F1:4C:D4:43:49:D9:5E:48:23:BA:9A:C5:B2:31:26:B5:56:F9:3E
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 22048D
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/72cb0e81155574ff2c47cac1c5f0d6c4685ec997.roa
Signing time: Tue 25 Apr 2023 15:04:44 +0000
ROA not before: Mon 24 Apr 2023 15:04:37 +0000
ROA not after: Fri 25 Apr 2025 15:04:37 +0000
asID: 27802
IP address blocks: 200.46.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2229389 (0x22048d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Apr 24 15:04:37 2023 GMT
Not After : Apr 25 15:04:37 2025 GMT
Subject: CN=72cb0e81155574ff2c47cac1c5f0d6c4685ec997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:11:18:c3:ad:e7:9b:01:11:c8:16:f6:8b:
0a:bd:43:f7:1e:6d:d2:3e:d2:1f:21:64:b5:f2:07:
ab:45:08:b2:96:0f:fd:62:03:7a:ea:7d:8c:56:ac:
3a:57:8a:55:5a:b5:d3:d4:b0:73:fb:13:f9:6e:45:
bc:5b:9d:bf:32:86:56:2d:d3:95:7f:88:8d:dd:c1:
20:6a:af:bc:c7:22:93:22:b1:b9:8f:31:6d:6e:8f:
3a:6d:75:fc:f6:23:df:ad:8f:bd:50:58:dd:b4:da:
e4:4f:7b:65:6a:f0:ab:1a:9d:84:b3:e4:b6:82:5c:
f0:22:f1:3b:17:bc:2c:03:a7:3a:df:0d:a2:e0:0f:
ad:84:68:ee:4b:4b:bb:e0:b7:07:e1:7c:aa:9b:46:
18:f9:05:c8:ea:de:3f:20:06:19:70:23:36:cb:39:
f1:c0:39:7b:ad:18:dc:28:fb:90:5d:3d:3f:58:a6:
4d:29:74:45:19:5d:a2:82:d3:d2:bf:75:67:6d:07:
93:0d:ca:9d:e6:ad:40:e8:ec:b4:c5:fe:2b:75:c2:
fd:15:f2:df:b1:88:82:8f:99:3b:4a:1a:90:68:f8:
3a:4e:6c:b5:2b:bb:d3:43:b9:e0:74:56:f1:04:77:
9e:3e:b2:85:5d:99:9f:29:8b:05:91:10:b0:16:65:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F1:4C:D4:43:49:D9:5E:48:23:BA:9A:C5:B2:31:26:B5:56:F9:3E
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/72cb0e81155574ff2c47cac1c5f0d6c4685ec997.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.46.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:91:56:4a:c1:f9:0d:50:21:32:dc:1a:65:3d:90:df:54:86:
93:41:22:ca:8a:b4:68:2c:10:f8:87:66:ba:b0:82:1f:a8:c0:
b0:de:a6:34:c0:29:f9:2c:10:02:b4:82:f8:8d:1e:fe:ca:8f:
8d:ef:79:c1:d9:19:c8:7c:fc:d8:96:b0:df:bc:d0:4e:3f:e2:
24:3e:87:49:ac:cc:40:83:f4:21:99:8e:6f:a1:2f:e0:b9:63:
4f:41:05:c2:cb:d5:1e:1a:41:00:fc:63:88:f4:e7:24:e3:fe:
e4:a2:1e:f2:96:36:3b:35:a8:e7:94:32:3c:9c:7d:88:00:a6:
1c:5c:fb:63:60:a8:f0:2f:af:f7:29:71:79:56:1b:7d:f4:81:
e9:f1:68:e2:ea:ea:97:74:4f:f1:65:97:d1:59:07:35:dd:ae:
7a:37:46:c2:b4:ed:53:e9:ce:75:b0:11:76:20:68:20:79:c9:
0e:9d:0f:2b:48:29:37:63:e4:1f:e8:34:fa:d4:0c:db:f6:6c:
7c:75:e0:0c:bd:79:e9:bc:a1:27:aa:c4:ff:39:c3:ff:4d:48:
1c:77:48:db:84:d9:63:4c:06:18:6c:e0:e0:52:b4:a4:9a:c7:
e0:ba:f9:88:2c:31:e9:dd:ea:52:6c:01:5f:b5:00:a4:39:05:
21:ad:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org