Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/4abf95d7660d19ff22b0114656426d9e7b26cfba.roa
File: 4abf95d7660d19ff22b0114656426d9e7b26cfba.roa (raw, json)
Hash identifier: /xdELE+pMWGV6VsGwbavwX6vmeXBtSumAYZ/PHfaWt4=
Subject key identifier: 99:78:E2:29:76:20:5E:93:37:9F:D8:66:04:9E:E7:4A:24:EA:4D:D3
Certificate issuer: /CN=8b93ccfac824196843701fdd92655044ac70189f
Certificate serial: 12C754
Authority key identifier: 9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/4abf95d7660d19ff22b0114656426d9e7b26cfba.roa
Signing time: Thu 22 Jun 2023 19:12:30 +0000
ROA not before: Wed 21 Jun 2023 19:12:29 +0000
ROA not after: Sun 22 Jun 2025 19:12:29 +0000
asID: 27989
IP address blocks: 200.1.175.0/24 maxlen: 24
201.221.124.0/23 maxlen: 24
179.0.27.0/24 maxlen: 24
2801:15:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230676 (0x12c754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93ccfac824196843701fdd92655044ac70189f
Validity
Not Before: Jun 21 19:12:29 2023 GMT
Not After : Jun 22 19:12:29 2025 GMT
Subject: CN=4abf95d7660d19ff22b0114656426d9e7b26cfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:eb:f9:5b:3e:9b:f5:ba:36:22:f6:c1:1f:cf:
c6:4f:43:2a:2e:cc:70:7d:dd:68:2f:a2:45:2c:52:
7d:16:38:df:c7:7d:f5:58:85:96:47:a3:a6:55:f7:
11:f8:0b:d7:57:5a:b3:37:d6:7f:4c:8b:5b:5a:16:
e5:59:ee:60:57:f7:c2:22:73:b8:c5:53:39:63:77:
9d:13:dd:6d:14:0b:2e:99:33:63:0d:1c:20:bf:44:
e5:e7:94:74:84:99:d9:57:75:00:f1:32:33:a4:af:
1b:e4:f7:39:c2:21:e8:64:f0:cf:fd:32:9c:03:96:
f1:d4:5a:ec:cd:bb:b4:9b:e8:c3:30:a6:6b:04:aa:
0f:47:a6:17:79:26:3e:9f:1b:3c:52:c3:bb:b6:4e:
3f:23:f2:8a:cc:5f:fb:42:52:66:13:b9:9c:c4:6d:
ee:4f:31:20:6e:c4:bd:e8:84:76:4b:d4:d4:91:ca:
9c:81:fe:92:ac:c2:92:72:6e:bc:1b:13:92:e4:5e:
20:54:5e:20:60:2b:f4:da:88:0a:d7:85:06:a2:8e:
4d:7d:29:fd:01:5c:1b:b0:36:ca:76:f1:91:cd:17:
82:1f:4e:cb:f6:c3:55:35:54:5b:a9:82:af:5d:7b:
c3:1c:fb:ae:a1:c4:0a:a7:ef:70:8e:c2:1e:e9:32:
05:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:78:E2:29:76:20:5E:93:37:9F:D8:66:04:9E:E7:4A:24:EA:4D:D3
X509v3 Authority Key Identifier:
keyid:9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/4abf95d7660d19ff22b0114656426d9e7b26cfba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/8b93ccfac824196843701fdd92655044ac70189f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.27.0/24
200.1.175.0/24
201.221.124.0/23
IPv6:
2801:15:4000::/48
Signature Algorithm: sha256WithRSAEncryption
21:1e:26:f2:2e:2e:3c:58:aa:13:5d:87:50:eb:c9:6f:da:1d:
1d:3a:b1:b4:c5:a4:2b:42:87:74:bc:47:a0:fb:61:d4:d0:b2:
71:ae:cf:f0:11:5f:7b:18:7d:8f:39:83:33:eb:1f:2d:eb:c0:
10:9b:c2:f5:99:86:7c:7e:5d:84:ce:76:db:78:34:b8:b0:60:
75:30:6a:f5:4b:36:79:0f:90:f3:37:c1:41:93:b7:11:fa:c8:
4f:09:8c:47:d7:b6:45:8f:62:ed:55:99:47:eb:c0:4d:3e:a6:
2b:be:8f:2f:02:23:f0:c1:82:09:34:42:92:db:59:9a:1f:aa:
81:09:a8:9e:f0:42:6c:39:ae:26:00:bc:14:be:35:22:a9:8d:
94:26:61:1a:3b:62:ee:dd:d8:04:fa:df:42:fd:a3:40:7e:f4:
a9:ba:27:04:e3:56:92:0a:27:52:86:06:43:32:1c:6d:9c:c2:
b0:3f:2e:fc:92:ce:c2:d5:48:ad:56:a7:8d:ee:c5:e9:04:01:
f8:a9:7a:8e:f8:21:fc:e3:90:83:f2:fc:01:8a:00:db:ac:d2:
57:74:84:92:82:74:5c:e6:69:c9:b6:be:00:87:60:9c:9a:50:
82:31:51:66:1b:2f:01:f9:d6:d5:09:3b:0e:2d:f4:d0:8d:44:
6c:10:0a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org