Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/bebd05f4ab5d4243da2f22a8cd9856da358dbae2.roa
File: bebd05f4ab5d4243da2f22a8cd9856da358dbae2.roa (raw, json)
Hash identifier: DBDu381enqjI6F+79UsTagywgH5aoickQbU7CxEmJEI=
Subject key identifier: 4E:C0:11:4B:D4:13:BD:AB:39:D9:C4:A0:EF:E7:30:DE:F9:AA:26:F2
Certificate issuer: /CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Certificate serial: 2AB3D5
Authority key identifier: C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/bebd05f4ab5d4243da2f22a8cd9856da358dbae2.roa
Signing time: Thu 15 Feb 2024 20:41:45 +0000
ROA not before: Thu 15 Feb 2024 20:41:24 +0000
ROA not after: Thu 15 Feb 2029 20:41:24 +0000
asID: 272114
IP address blocks: 200.123.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2798549 (0x2ab3d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c178e735cba3ee6de4d7789247cc09a6ad9bc2b2
Validity
Not Before: Feb 15 20:41:24 2024 GMT
Not After : Feb 15 20:41:24 2029 GMT
Subject: CN=bebd05f4ab5d4243da2f22a8cd9856da358dbae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9a:a2:2d:e2:4d:88:54:f8:db:04:89:3f:8f:
fb:32:f6:06:ab:56:c5:31:4d:00:84:57:37:b1:10:
5a:f2:09:95:3a:aa:34:48:c3:27:b9:8a:8b:d6:9e:
ee:2c:76:83:a7:d6:3e:6b:12:bd:fd:90:9d:da:90:
a0:11:9b:74:ee:32:08:60:3e:9b:51:ae:ed:d2:5c:
d9:48:3c:20:d9:2f:4b:6c:af:7b:f6:3e:79:64:ff:
24:cd:62:86:3d:f6:4f:5c:56:d1:9e:74:3e:c9:bf:
73:8e:d5:02:7d:8e:93:c7:c8:bd:0d:37:88:b3:25:
b1:af:1b:ba:97:ae:c9:bf:9f:2e:90:39:13:0c:7b:
34:4f:4a:59:d1:59:1c:c1:12:42:17:e1:fa:06:75:
75:70:db:08:5d:7e:5d:38:01:97:94:ba:51:df:d7:
63:26:1d:d8:52:ef:71:e9:c3:69:4f:83:d5:bd:7b:
40:27:ab:72:a9:66:e2:1f:d1:11:9d:6a:0d:36:43:
67:83:76:de:2e:7a:c3:a2:5f:d0:a4:0a:8a:72:b4:
02:e6:8e:48:f6:ee:9e:01:19:5f:3c:3e:92:ef:58:
d8:5c:55:58:fd:32:de:3d:66:d7:a4:e3:ce:95:cd:
cb:fa:f3:83:35:27:47:8a:8e:d4:15:fb:48:5f:8b:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C0:11:4B:D4:13:BD:AB:39:D9:C4:A0:EF:E7:30:DE:F9:AA:26:F2
X509v3 Authority Key Identifier:
keyid:C0:82:73:D3:37:38:17:9E:49:76:3F:05:C9:13:99:93:8E:39:75:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/bebd05f4ab5d4243da2f22a8cd9856da358dbae2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c178e735cba3ee6de4d7789247cc09a6ad9bc2b2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.32.0/23
Signature Algorithm: sha256WithRSAEncryption
45:8b:a5:14:2d:88:23:fb:65:6a:2a:73:99:c2:3c:4a:2f:68:
a8:4c:60:e7:42:2d:e7:4a:f7:2b:81:22:37:81:06:28:b3:8a:
b1:27:03:71:b4:47:7d:bf:95:01:5e:c9:8f:2d:2a:be:ae:f1:
99:84:88:0a:6a:60:26:8d:4d:90:23:83:ab:69:50:0a:c5:b8:
e3:9d:e1:3e:dc:0a:0e:d1:a2:85:a1:03:7a:38:0e:1b:2b:fa:
30:ee:f6:4c:51:4c:e2:4f:3d:84:25:79:de:4d:0e:f8:01:dd:
12:24:90:c1:f7:c1:d1:67:6b:60:0c:13:06:c1:e0:9d:98:a7:
d3:27:f1:08:cf:25:4b:a7:ab:f8:11:f1:42:06:ee:ad:0f:74:
ea:1d:ce:ba:c3:54:31:5b:05:4c:e7:95:f3:7b:7a:e9:68:d7:
e4:3e:dd:20:5e:41:f9:fe:56:17:46:c4:38:8a:4a:23:78:1d:
0e:41:53:bd:ba:dd:c0:d0:f3:45:e2:4d:f2:17:e4:11:6f:57:
bd:35:38:96:c3:ca:a8:6f:cd:ff:97:a8:a4:e0:c7:d5:9e:04:
68:67:f8:56:bd:ee:0a:a3:d3:fb:8c:11:5c:df:a7:10:d5:2f:
0e:98:44:a9:a5:5f:35:ea:f8:13:7a:f4:59:1a:5f:f1:29:09:
37:03:ce:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:04 2024 by rpki-client on console-fra.rpki-client.org