Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/87a26a60f035c4b7896423508c5646aeff9451fa.roa
File: 87a26a60f035c4b7896423508c5646aeff9451fa.roa (raw, json)
Hash identifier: zryOSTCqD3/XKsYqO4aTG0XHlNf2qtFb3bebWMTMkV8=
Subject key identifier: 2E:22:5D:B3:A6:00:5E:32:38:3F:09:D2:73:AD:51:DB:00:C1:FD:B4
Certificate issuer: /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial: 2A9288
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/87a26a60f035c4b7896423508c5646aeff9451fa.roa
Signing time: Thu 15 Feb 2024 20:41:29 +0000
ROA not before: Thu 15 Feb 2024 20:41:24 +0000
ROA not after: Thu 15 Feb 2029 20:41:24 +0000
asID: 52444
IP address blocks: 200.123.56.0/23 maxlen: 24
200.123.56.0/23 maxlen: 24
200.123.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2790024 (0x2a9288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Validity
Not Before: Feb 15 20:41:24 2024 GMT
Not After : Feb 15 20:41:24 2029 GMT
Subject: CN=87a26a60f035c4b7896423508c5646aeff9451fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:23:f5:f8:35:73:52:4e:01:ce:f3:f3:4f:
39:78:b0:35:d2:11:6a:bd:0e:70:29:35:c4:21:09:
4e:6a:aa:6e:6a:11:fe:89:32:3d:f0:ca:fe:0c:43:
a9:28:32:9f:71:10:a8:48:5f:e0:9d:24:09:fa:3a:
44:40:69:43:60:86:9c:1e:ba:d2:55:01:cc:82:7a:
a4:49:77:11:a2:76:ba:65:c8:fb:62:7f:23:b4:8c:
1d:eb:93:e7:cb:d1:47:62:1d:68:24:51:06:0c:d4:
69:1d:99:5e:49:e9:e4:56:1b:3f:00:69:e7:77:8d:
e5:76:e9:08:bc:04:0d:33:ed:62:aa:d3:b0:27:35:
c0:07:1e:0b:61:8c:36:2a:2d:4b:83:88:55:41:98:
a7:7c:cd:06:02:0b:a8:77:f9:c1:62:35:8c:76:34:
ad:ab:78:25:0d:e4:cc:b7:8d:d8:1e:a1:55:a9:12:
86:70:34:c0:c8:56:cb:9f:40:1f:01:f2:b4:50:86:
73:ca:ea:33:24:04:ba:9a:c2:e8:e1:41:ee:90:b0:
b1:3d:56:28:ad:65:c5:8f:fe:94:82:14:1e:c4:03:
c2:2a:c1:de:15:01:08:c0:d4:9d:4a:92:d9:e8:47:
7b:7d:12:d2:22:a6:5a:cc:ac:a5:24:a4:0d:1b:e5:
25:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:22:5D:B3:A6:00:5E:32:38:3F:09:D2:73:AD:51:DB:00:C1:FD:B4
X509v3 Authority Key Identifier:
keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/87a26a60f035c4b7896423508c5646aeff9451fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.56.0-200.123.58.255
Signature Algorithm: sha256WithRSAEncryption
5b:91:7a:93:cc:57:ca:b0:01:5f:55:86:25:f5:cf:88:5f:a4:
be:d4:19:4c:a8:ab:e6:b8:17:54:d4:15:5f:02:6e:fc:4a:ef:
f3:28:b1:74:27:29:cd:88:56:d4:aa:0c:8e:0e:cd:43:5f:19:
d2:0b:03:9a:86:1a:49:b8:67:9d:f0:1b:48:9c:b0:d4:99:52:
89:4c:cd:04:ca:22:80:d0:86:59:6f:09:f7:cb:86:cd:22:c0:
73:19:07:28:50:d2:33:1a:55:93:eb:7d:ea:bd:28:71:e8:29:
34:c9:e4:14:d1:94:04:ae:ba:23:82:66:ac:3f:9c:e4:76:96:
54:07:ab:73:88:f6:33:26:1e:48:88:30:87:83:de:51:1e:0a:
22:e9:72:46:1e:c5:3b:60:c3:7f:f7:ec:c6:f8:b1:4c:a1:62:
ad:3d:5e:73:9e:18:16:01:67:89:bc:7e:cc:2b:cf:31:2c:71:
00:d2:49:2e:fa:c3:d0:62:16:e0:57:9b:50:76:7d:54:aa:8a:
6a:8b:ef:c3:dd:77:b8:d4:3e:3e:00:43:23:dd:bc:5e:bc:4d:
4b:59:33:0d:8e:ba:16:a0:0e:49:60:d8:f6:60:3d:48:95:e5:
f9:5a:8d:88:52:dd:d9:28:29:2b:a3:65:f0:73:3b:af:cb:7f:
73:fb:71:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org