Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/354066223396c3886cfa6d85514211976fd684ad.roa
File: 354066223396c3886cfa6d85514211976fd684ad.roa (raw, json)
Hash identifier: 3TKdmlWaTP068ZlKQXMERWANWZPd2Ptylq7YBWdVBHo=
Subject key identifier: AC:E4:CF:45:E4:D3:39:2A:5C:3A:1F:8B:17:E1:39:41:61:41:0F:A3
Certificate issuer: /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial: 27C377
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/354066223396c3886cfa6d85514211976fd684ad.roa
Signing time: Wed 08 Nov 2023 15:00:42 +0000
ROA not before: Wed 08 Nov 2023 15:00:37 +0000
ROA not after: Wed 08 Nov 2028 15:00:37 +0000
asID: 52444
IP address blocks: 200.123.56.0/23 maxlen: 24
200.123.56.0/23 maxlen: 24
200.123.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2605943 (0x27c377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Validity
Not Before: Nov 8 15:00:37 2023 GMT
Not After : Nov 8 15:00:37 2028 GMT
Subject: CN=354066223396c3886cfa6d85514211976fd684ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:a8:d0:e6:6d:78:1d:50:ea:aa:a8:cd:3c:
e4:7d:14:94:79:d7:c3:69:52:9e:32:df:5a:37:af:
e5:19:0b:e4:0c:9c:17:e6:85:45:73:ff:f7:6c:6b:
16:58:a5:15:c6:f2:0a:19:ed:c0:eb:11:0f:4f:7a:
51:95:a3:68:da:c7:0d:0e:b8:8c:2c:07:60:d6:6c:
e0:8d:08:1f:a9:48:45:1f:9b:59:77:6f:de:2f:25:
88:f9:6c:a5:ff:fc:77:61:f7:6d:91:72:a4:bb:d4:
75:53:75:5c:b3:ff:a4:c6:11:cb:df:59:75:c4:44:
6c:07:2f:a1:0b:b0:b2:e4:cc:f5:61:9f:f4:b9:e2:
d0:5d:d8:22:e3:bf:d1:21:f6:78:2e:31:43:6b:04:
bb:21:e4:1b:31:ba:d2:c6:cd:a6:4e:d7:7a:46:8c:
49:0c:a1:1c:67:6f:50:21:d9:3b:9c:a9:ee:3a:ab:
f5:33:1d:5e:e9:a1:78:6c:6a:e3:c7:19:63:79:09:
92:d0:22:23:0b:bd:bc:25:42:87:96:a0:0e:bb:77:
76:fc:12:3e:e7:e5:cf:48:4d:43:6f:2e:82:4e:b5:
47:cd:f0:d3:2b:f6:f0:74:6f:e7:a1:0b:09:f3:fb:
36:b4:78:b2:4b:86:54:81:bd:5c:d5:42:df:bf:93:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E4:CF:45:E4:D3:39:2A:5C:3A:1F:8B:17:E1:39:41:61:41:0F:A3
X509v3 Authority Key Identifier:
keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/354066223396c3886cfa6d85514211976fd684ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.56.0-200.123.58.255
Signature Algorithm: sha256WithRSAEncryption
38:f5:8a:75:ee:02:74:12:de:0d:9d:8f:02:59:19:8c:14:d6:
f6:5c:7f:95:7c:50:ad:45:f9:c7:75:62:ff:87:0a:aa:9c:2b:
10:f2:e3:1b:7e:55:73:1e:66:86:40:79:d4:44:e3:40:1c:35:
72:6c:40:5a:f7:65:30:05:3a:63:ab:f9:d6:5c:e1:37:4c:f6:
60:bc:14:11:06:b3:47:12:41:e8:6d:22:5e:94:a0:9b:46:18:
d1:0c:73:8d:be:eb:41:90:f5:3f:ba:71:2c:36:69:18:e2:b8:
17:a9:c3:30:f5:8a:3a:e8:12:39:1b:ef:5f:db:eb:b6:d7:2d:
44:05:b9:b0:6e:15:d5:c5:b0:87:6c:f1:00:4f:1b:42:ec:fe:
3c:fd:c0:df:87:d4:2b:99:28:c6:a5:93:ca:20:20:6d:81:b0:
8f:20:bb:ba:d4:85:e6:a0:f3:86:2b:72:b8:a8:89:22:94:e6:
61:8a:17:6a:ce:5c:87:28:4a:bf:e6:37:40:9f:e9:11:4c:fd:
31:7a:a4:c9:62:06:6e:be:9f:e8:86:6f:e4:e8:5c:fd:6a:ee:
3c:e9:ca:e8:a1:a9:8b:47:ed:6d:4c:00:c0:50:01:12:04:0e:
f9:8a:d9:41:38:e4:e9:00:11:65:ea:67:9f:b5:1a:34:15:6e:
4d:8b:e4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 19:34:51 2024 by rpki-client on console-fra.rpki-client.org