Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/a872ddb65c9b48da72ca06d6d413dea2575065ae.roa
File: a872ddb65c9b48da72ca06d6d413dea2575065ae.roa (raw, json)
Hash identifier: CVdq75AVuWLCPmYwFPUJDC48LMF0duQjJfJjYf6ByX8=
Subject key identifier: 70:81:20:F9:45:48:76:2B:25:20:2B:A9:40:64:9B:7F:B4:80:44:16
Certificate issuer: /CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Certificate serial: 243572
Authority key identifier: C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/a872ddb65c9b48da72ca06d6d413dea2575065ae.roa
Signing time: Mon 17 Jul 2023 16:09:32 +0000
ROA not before: Sun 16 Jul 2023 16:08:49 +0000
ROA not after: Thu 17 Jul 2025 16:08:49 +0000
asID: 52444
IP address blocks: 200.123.56.0/23 maxlen: 24
200.123.56.0/23 maxlen: 24
200.123.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2372978 (0x243572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7a43fc33bfc7ff5ea592decadde645288705e
Validity
Not Before: Jul 16 16:08:49 2023 GMT
Not After : Jul 17 16:08:49 2025 GMT
Subject: CN=a872ddb65c9b48da72ca06d6d413dea2575065ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:8f:c7:90:c8:78:9c:84:f0:5a:29:6a:69:
e7:ed:50:11:19:3e:ce:07:0a:8c:0c:88:16:cf:e7:
56:94:fc:16:69:98:14:38:d4:b8:eb:e1:21:71:03:
94:8e:47:e7:d2:32:01:41:58:19:09:dd:a3:ed:18:
17:27:52:f3:d6:2e:60:eb:7a:d7:ac:dc:32:20:a8:
17:a7:d5:07:21:26:17:9a:8e:08:30:4e:69:89:c6:
0f:f1:e1:01:ae:64:b5:e9:b0:72:0f:3d:df:57:13:
5a:d7:b5:d5:71:ff:d7:3d:a2:1f:0e:27:7b:9f:e9:
2e:0b:1e:9b:d5:96:11:10:6d:53:98:42:0f:d6:4f:
15:81:26:df:e2:de:2f:d3:35:5d:9b:9f:6f:26:5b:
59:d6:92:be:7b:e3:22:ae:da:47:62:ad:5d:c0:21:
b5:6c:5f:9c:de:17:29:36:0e:d0:38:8f:10:f2:0d:
85:a6:d9:15:9d:72:b3:39:7d:f3:ea:ff:76:07:f9:
6e:12:95:2c:ff:3d:f0:b7:f3:be:a5:4a:7d:8e:6a:
d8:8d:d6:8c:d6:49:60:4b:1a:52:66:44:3d:57:af:
e3:db:0e:7c:b5:33:ce:2f:48:88:62:00:41:bc:08:
5c:5f:77:60:b7:2f:b8:f7:73:7d:8a:a5:95:39:4e:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:81:20:F9:45:48:76:2B:25:20:2B:A9:40:64:9B:7F:B4:80:44:16
X509v3 Authority Key Identifier:
keyid:C1:A4:F9:06:D7:C5:6B:7D:5E:32:B4:3C:AE:33:6A:BD:11:7D:39:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33b7a43fc33bfc7ff5ea592decadde645288705e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/a872ddb65c9b48da72ca06d6d413dea2575065ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/33b7a43fc33bfc7ff5ea592decadde645288705e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.56.0-200.123.58.255
Signature Algorithm: sha256WithRSAEncryption
84:32:49:a4:27:68:44:68:ef:7d:94:98:88:3f:15:a9:b0:29:
8c:4b:6d:36:82:e3:2f:63:31:af:09:6c:8a:cb:18:9b:22:02:
bf:ac:b0:f9:de:b0:86:dd:18:04:d0:a5:17:4a:98:47:f7:66:
bf:da:4f:34:f9:0b:5a:3f:85:47:30:3b:57:72:21:93:a8:5a:
b5:cf:b0:5a:79:ce:32:5f:b9:e9:8a:e9:94:41:09:30:70:9e:
be:8b:54:76:68:21:d8:e5:07:b6:56:b7:41:61:6c:69:dc:da:
57:e2:f7:02:05:93:05:0a:33:9c:7d:47:8f:0d:b2:92:32:d4:
4a:d6:a2:3d:b8:1f:eb:4e:b6:23:b4:1b:ef:09:1d:70:80:55:
c8:be:b0:bf:73:6c:4d:70:ea:97:6a:64:c8:60:e5:07:dd:0b:
d4:6e:9b:d7:c0:01:bb:27:dc:ea:07:ba:7b:f4:b5:ce:7f:85:
66:04:70:a8:6d:9c:e4:97:a4:a9:9f:b1:3f:ba:d2:15:23:4f:
60:9f:a3:6f:50:a4:05:32:87:12:f9:d2:ec:8f:da:b4:da:84:
fa:fd:52:c8:d1:d5:fd:11:0d:5f:9b:f9:68:cc:85:30:76:1a:
3b:34:4b:a0:1c:de:e2:48:74:e6:b7:4e:55:27:ff:78:9b:39:
8f:92:5e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 18:46:42 2023 by rpki-client on console-ams.rpki-client.org