Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/1a55c1c0b14a7316262da113575a8916c62de5d3.roa
File: 1a55c1c0b14a7316262da113575a8916c62de5d3.roa (raw, json)
Hash identifier: o2Rqkb6jcI1T0hV0EiS7jQAK28tgogyefdeHWGA5fFs=
Subject key identifier: 62:41:10:1B:26:01:D6:75:83:35:9C:8C:1E:3F:83:55:5C:F8:52:0F
Certificate issuer: /CN=24b432c17b9178d531eefe49147c81e1af1b6784
Certificate serial: 24FA8C
Authority key identifier: 8C:D5:D1:14:8A:7F:1A:D0:BC:2C:81:F4:8D:DC:41:B4:D8:93:F9:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b432c17b9178d531eefe49147c81e1af1b6784.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/1a55c1c0b14a7316262da113575a8916c62de5d3.roa
Signing time: Fri 05 Jan 2024 17:10:53 +0000
ROA not before: Fri 05 Jan 2024 17:10:52 +0000
ROA not after: Mon 05 Jan 2026 17:10:52 +0000
asID: 61468
IP address blocks: 200.9.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2423436 (0x24fa8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b432c17b9178d531eefe49147c81e1af1b6784
Validity
Not Before: Jan 5 17:10:52 2024 GMT
Not After : Jan 5 17:10:52 2026 GMT
Subject: CN=1a55c1c0b14a7316262da113575a8916c62de5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b4:88:06:ae:bc:67:c3:35:67:a3:57:3d:cc:
71:3e:8e:68:f1:0f:14:5c:61:61:05:de:65:52:99:
5b:cb:4c:a1:91:fe:a9:1d:92:1a:c6:83:c3:76:55:
af:1e:08:ab:99:2d:55:0f:5b:5d:ac:a4:08:3b:a5:
7a:e4:d9:a9:9c:3c:53:62:dc:eb:96:24:e0:91:85:
e4:40:61:69:56:60:86:a2:0b:58:90:c6:a3:5f:8a:
2f:2e:da:94:df:ae:7e:a3:5d:1d:70:6d:91:a0:c8:
c6:62:32:80:af:59:01:ce:48:c9:28:4c:f5:ec:43:
6f:ab:8e:55:d7:74:ca:e2:35:52:bb:0b:24:4f:88:
50:d8:15:70:f2:10:62:ec:b0:6c:c6:db:41:4e:ae:
63:10:8d:5d:35:33:65:0d:c1:14:e0:00:60:ed:03:
9f:f3:04:f9:23:cb:80:f9:5b:47:75:9a:0a:fc:22:
f8:0d:f0:3d:ad:22:58:6a:e9:0c:3c:8d:19:d0:0a:
78:5d:7d:e8:22:b9:05:48:19:af:a5:22:74:f2:d8:
1c:23:da:69:3d:17:b7:a1:c7:92:e2:5d:22:80:b5:
6c:04:70:01:06:47:21:f6:09:36:07:f0:d2:6c:9a:
58:a0:88:71:3c:99:6d:27:2e:05:cb:41:56:32:42:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:41:10:1B:26:01:D6:75:83:35:9C:8C:1E:3F:83:55:5C:F8:52:0F
X509v3 Authority Key Identifier:
keyid:8C:D5:D1:14:8A:7F:1A:D0:BC:2C:81:F4:8D:DC:41:B4:D8:93:F9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b432c17b9178d531eefe49147c81e1af1b6784.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/1a55c1c0b14a7316262da113575a8916c62de5d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2ab36223-1cf8-4f39-9269-d599049c4749/24b432c17b9178d531eefe49147c81e1af1b6784.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.9.96.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:3b:9c:cf:b1:9d:5f:86:d0:69:43:7e:be:ab:34:b6:b1:7b:
87:15:75:96:df:07:ed:c1:e2:d8:be:5c:63:a4:fe:bd:02:fc:
18:e2:b5:e3:5c:ae:9f:c4:bd:37:9e:68:6f:a9:8e:04:b7:a4:
ed:5b:ef:b4:5e:fc:04:c0:7f:fd:9b:5c:8d:e2:57:7b:31:18:
29:95:10:3e:c8:84:50:83:39:0b:21:b0:7e:79:c7:c3:e5:b6:
b8:70:79:7d:57:08:8e:4a:c4:70:db:49:a2:44:e6:6a:21:93:
99:f5:eb:32:b7:5f:a0:6d:66:a2:18:b5:11:2c:89:1a:4e:a6:
ba:d3:84:f9:39:de:d0:8f:e7:bc:62:9e:d5:d5:f3:fb:b9:ab:
04:10:7d:65:8d:ac:b8:23:0d:14:76:16:16:e1:2d:3c:22:66:
0a:bf:0c:60:eb:8a:64:ea:74:f9:6f:6d:a7:28:cc:00:01:28:
f8:b4:7a:ab:fd:43:55:19:6a:ec:b2:57:f6:5c:88:c3:b4:00:
a5:67:30:08:ea:2a:63:95:b2:c5:6a:83:c2:9b:71:24:c5:1e:
90:ee:60:5d:7c:f6:e8:b6:5b:36:ff:2e:47:fc:b4:67:66:95:
e9:34:4b:16:9a:eb:54:ac:9e:6d:fd:ef:a4:41:ed:c2:34:63:
b2:b2:97:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org