Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/5230555a902a4a87cdfbfeaedd063fd82b5d87df.roa
File: 5230555a902a4a87cdfbfeaedd063fd82b5d87df.roa (raw, json)
Hash identifier: 5QlvGrx2ri0AEZrO2vTinToW4bdc1p0zVNMEjSw6jlI=
Subject key identifier: 08:38:4D:85:B5:B7:9D:0C:85:67:7A:D0:21:13:00:45:EA:AC:D6:E0
Certificate issuer: /CN=8b93ccfac824196843701fdd92655044ac70189f
Certificate serial: 119BB9
Authority key identifier: 9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/5230555a902a4a87cdfbfeaedd063fd82b5d87df.roa
Signing time: Wed 31 May 2023 08:30:00 +0000
ROA not before: Tue 30 May 2023 08:30:00 +0000
ROA not after: Thu 29 May 2025 08:30:00 +0000
asID: 27989
IP address blocks: 200.1.175.0/24 maxlen: 24
201.221.124.0/24 maxlen: 24
201.221.125.0/24 maxlen: 24
179.0.27.0/24 maxlen: 24
201.221.124.0/23 maxlen: 23
2801:15:4000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1153977 (0x119bb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b93ccfac824196843701fdd92655044ac70189f
Validity
Not Before: May 30 08:30:00 2023 GMT
Not After : May 29 08:30:00 2025 GMT
Subject: CN=5230555a902a4a87cdfbfeaedd063fd82b5d87df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:a7:d2:a4:77:11:0a:da:ac:eb:b4:0b:99:
e4:e8:d6:e4:1d:bc:e8:08:f6:4f:3c:90:cb:bc:62:
b1:fe:93:23:25:53:23:7f:ad:f3:7c:c6:bd:86:3d:
ce:ff:2d:e3:45:7f:93:a4:cb:42:7a:cf:56:54:aa:
f4:1b:00:43:b8:c5:38:f7:a8:b4:08:cc:5f:fb:f1:
22:ec:b4:f0:13:1d:29:62:ee:2f:6c:f5:10:e5:f5:
9f:cf:d7:cb:93:63:a6:30:0f:b2:38:0b:73:ec:69:
c7:67:d9:23:d7:41:cb:69:56:57:44:e2:71:73:6d:
c8:47:83:b6:18:65:41:09:16:b4:66:d7:66:71:a4:
6f:ba:ae:85:5e:27:34:6f:fd:35:41:53:79:83:df:
5d:a3:1c:29:21:4c:aa:47:68:9d:3b:96:fd:66:b6:
39:f9:98:7f:30:68:a2:f6:29:bb:19:59:7f:91:a0:
38:c3:23:4d:a1:33:07:a0:e9:f5:b1:b1:63:b9:a8:
e1:12:cd:cd:e5:97:95:07:6a:10:9f:e6:36:10:ec:
8b:c2:3a:f1:e6:aa:7e:bc:d1:48:e0:32:db:05:50:
c8:39:17:4b:1f:4e:7f:9b:ae:8c:99:63:8a:26:cc:
e7:53:81:a8:01:04:90:96:4a:32:25:8f:d6:f3:de:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:38:4D:85:B5:B7:9D:0C:85:67:7A:D0:21:13:00:45:EA:AC:D6:E0
X509v3 Authority Key Identifier:
keyid:9A:75:62:AC:B4:E4:BE:75:76:41:83:91:33:D8:B0:8B:41:70:5E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b93ccfac824196843701fdd92655044ac70189f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/5230555a902a4a87cdfbfeaedd063fd82b5d87df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2a1eec21-f9a0-46dc-9b27-0c62f8da2d17/8b93ccfac824196843701fdd92655044ac70189f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.27.0/24
200.1.175.0/24
201.221.124.0/23
IPv6:
2801:15:4000::/48
Signature Algorithm: sha256WithRSAEncryption
44:e8:04:b7:e0:e8:15:9c:93:f6:d6:36:5f:d7:a3:8d:c6:7f:
96:78:76:8c:e3:bd:1c:ab:e9:a0:01:89:5e:ff:18:c8:44:83:
16:44:82:0c:bf:3b:2a:23:cc:d6:a3:c4:2e:48:e6:b1:77:45:
54:14:92:00:72:e6:8b:5d:0a:c2:d6:57:0f:45:98:d0:0f:44:
0c:78:17:31:e7:f1:7a:5e:3a:d1:09:a9:da:04:fa:56:f7:62:
8e:7a:3f:43:c6:a9:dd:66:30:a4:37:1c:8c:2d:16:ed:c2:5f:
a3:c6:91:34:28:79:e7:30:25:de:e3:3e:3f:ff:c5:64:70:37:
fa:f8:e6:20:9f:3f:ba:fd:62:0a:42:08:eb:09:25:73:f3:1e:
52:5a:6b:6a:ac:59:4c:4a:58:be:be:39:3e:76:12:54:86:4b:
26:ed:9f:cc:3d:42:66:2d:3b:f0:3d:4b:e7:18:91:c2:db:fd:
26:6c:3d:78:23:cb:22:31:66:04:c3:66:87:f2:f9:32:6c:17:
a6:37:af:54:38:eb:32:1c:ab:84:3b:3d:f1:bd:f7:19:87:d1:
59:a2:a8:79:21:c1:5d:98:84:f6:f7:c2:07:8e:21:4f:6c:c0:
ca:6a:9f:c0:11:ae:32:f8:8b:3a:b2:40:eb:e1:42:d7:4e:d1:
94:7d:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:25 2024 by rpki-client on console-fra.rpki-client.org