Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/babcc28c420fd1a447fbe38fac1820c3fc71275d.roa
File: babcc28c420fd1a447fbe38fac1820c3fc71275d.roa (raw, json)
Hash identifier: aR1WC5UEEYST0iPAb3bjpoAULKiCtFTDrKoqvWN8IDQ=
Subject key identifier: 85:5E:20:53:4E:03:BE:FE:5C:F5:02:20:15:42:B7:0B:86:0B:B2:A6
Certificate issuer: /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial: 0E1F2F
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/babcc28c420fd1a447fbe38fac1820c3fc71275d.roa
Signing time: Wed 24 Mar 2021 14:45:11 +0000
ROA not before: Wed 24 Mar 2021 14:45:09 +0000
ROA not after: Tue 24 Mar 2026 14:45:09 +0000
asID: 27755
IP address blocks: 186.179.112.0/20 maxlen: 24
190.2.224.0/20 maxlen: 24
200.3.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925487 (0xe1f2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
Validity
Not Before: Mar 24 14:45:09 2021 GMT
Not After : Mar 24 14:45:09 2026 GMT
Subject: CN=babcc28c420fd1a447fbe38fac1820c3fc71275d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:70:d0:8d:5f:34:83:79:7e:83:c4:49:b1:
3a:1b:7f:f4:af:d9:18:bf:23:c9:87:f7:3c:c4:82:
20:2d:42:86:6e:43:39:44:1f:7e:b3:fb:83:fa:9a:
61:ad:8f:0e:ea:3c:58:89:72:a2:08:d8:a5:41:07:
83:63:68:46:a8:33:c4:7d:dc:70:f6:4d:46:47:53:
16:5b:05:ca:e4:9c:ae:08:22:b1:3c:30:e8:66:cf:
0c:89:c0:c2:8d:ed:c9:16:96:ff:7a:8d:81:de:9b:
60:8d:e4:fd:f3:3b:01:17:7a:f8:22:7b:a7:09:80:
fd:fe:5b:ba:8b:96:81:ef:6c:70:a3:de:5a:7d:03:
db:83:2c:49:28:62:d6:22:f5:4d:1e:8e:10:c9:19:
04:be:66:0b:7b:3b:58:47:d3:26:34:16:15:1e:02:
00:53:21:8d:01:7e:d2:45:be:63:10:2d:41:c9:11:
11:69:03:2a:7f:4c:2b:c1:8d:00:02:fd:a0:0e:41:
12:1e:8b:c9:55:e4:f5:7b:f4:95:bc:24:30:32:e9:
36:d7:8d:a8:e9:c1:00:93:33:93:ac:6a:01:55:e7:
cd:21:4b:51:c5:74:ea:fc:b2:02:21:46:1d:0f:bf:
4a:23:43:91:7b:d1:4e:4a:2a:10:fe:83:35:1b:11:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5E:20:53:4E:03:BE:FE:5C:F5:02:20:15:42:B7:0B:86:0B:B2:A6
X509v3 Authority Key Identifier:
keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/babcc28c420fd1a447fbe38fac1820c3fc71275d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.179.112.0/20
190.2.224.0/20
200.3.200.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:31:de:2e:b4:7b:01:bf:98:a2:b1:4f:08:a6:af:44:15:e2:
da:4a:8c:c6:31:46:07:42:38:47:d1:f3:3e:e5:72:7c:db:94:
89:13:dd:20:d7:9c:d9:d0:96:b5:79:aa:c8:52:bc:8d:6e:e5:
00:6a:07:f5:4b:5a:05:b8:4c:3f:b9:3a:63:d4:15:84:64:ef:
87:aa:8c:bf:24:d2:a5:87:c2:ae:fd:ad:b9:42:2e:2e:e3:62:
5c:13:b8:7a:0d:7d:7a:ec:0b:b5:7e:37:8d:24:60:4a:2a:e1:
83:03:1f:bd:bd:b9:32:c9:88:19:7a:a8:0a:bb:f4:3a:ca:2b:
ed:21:1c:3b:fd:dd:26:06:55:89:58:c9:9b:6c:fc:b3:e3:82:
b5:d5:98:71:41:1c:1e:5d:87:e8:8f:f8:76:24:2f:c4:f3:1f:
ec:53:e7:23:45:f4:83:c6:d5:46:03:cd:32:14:b2:4c:74:76:
b3:5d:c2:35:94:c6:ec:de:fc:53:9b:1d:9c:7c:50:66:b1:3e:
4a:90:66:6d:91:b6:70:a4:b9:91:a2:a7:a8:0c:35:0f:45:cc:
7a:71:7f:5a:30:f1:ae:d6:91:bc:4b:1a:c2:49:99:82:cb:3e:
20:31:c7:ca:2a:41:84:39:e7:0b:e9:75:fe:45:cb:7a:4b:49:
3e:dc:3f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org