Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c11e2de4066adae1114a90a8af16a6a460a500ec.roa
File: c11e2de4066adae1114a90a8af16a6a460a500ec.roa (raw, json)
Hash identifier: nrwBEukRK0CuJAOFfmJZycQiYoRMHMk0IYcM0+aRdtE=
Subject key identifier: 0A:AC:D4:1E:E2:B4:AA:2D:23:BD:78:7C:59:DA:42:8D:0B:10:20:EE
Certificate issuer: /CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Certificate serial: 29E9A4
Authority key identifier: 43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c11e2de4066adae1114a90a8af16a6a460a500ec.roa
Signing time: Tue 30 Jan 2024 15:00:56 +0000
ROA not before: Tue 30 Jan 2024 15:00:49 +0000
ROA not after: Tue 30 Jan 2029 15:00:49 +0000
asID: 265689
IP address blocks: 200.123.59.0/24 maxlen: 24
200.123.60.0/23 maxlen: 24
200.50.162.0/23 maxlen: 24
200.50.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2746788 (0x29e9a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529d28a5769af1e1987aada52d4d9ac3bec39b68
Validity
Not Before: Jan 30 15:00:49 2024 GMT
Not After : Jan 30 15:00:49 2029 GMT
Subject: CN=c11e2de4066adae1114a90a8af16a6a460a500ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:47:d8:e9:93:b2:25:57:cb:30:05:7c:85:
3e:5a:5d:dd:b3:5f:66:46:8b:78:b8:18:22:d0:50:
83:19:6b:65:a5:95:b6:dd:62:a6:96:32:f2:fd:9a:
1c:b2:1b:69:e3:6a:f5:22:0a:ce:98:91:55:26:d2:
a5:7d:05:5a:06:95:c7:38:79:68:82:a0:7d:ad:54:
96:c4:30:75:e3:2a:2d:9b:c7:18:66:2e:a1:0f:78:
ae:1a:2e:3c:3f:35:22:26:7b:aa:69:75:57:a9:25:
44:bf:2e:50:8b:82:fa:36:ef:73:cb:c2:8b:04:85:
ec:2a:a6:54:3e:d8:51:fc:d7:a2:5f:eb:6b:d0:08:
cf:f5:8f:0e:e0:0d:0f:eb:df:7f:12:55:73:4f:2f:
29:4a:1b:44:4e:f9:c2:8b:60:31:fe:5c:52:57:fa:
d2:18:5b:52:e3:c8:78:7e:54:93:09:d9:8d:27:cf:
f0:ca:c9:0d:5f:b9:9c:7e:7c:78:44:04:8c:9a:70:
a6:4e:72:93:85:4b:d8:4c:fe:86:4a:f8:e4:8a:eb:
d8:f6:e1:10:70:6c:25:fe:68:22:44:da:cc:71:92:
c8:65:17:4b:0b:2c:5c:bd:01:df:8a:20:38:d2:f4:
1d:09:ab:0c:fb:59:48:cf:e0:95:fd:e1:d0:f5:4b:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AC:D4:1E:E2:B4:AA:2D:23:BD:78:7C:59:DA:42:8D:0B:10:20:EE
X509v3 Authority Key Identifier:
keyid:43:76:7A:C8:B9:C4:46:E4:13:DD:A2:B5:C9:85:3A:17:68:A4:E1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/529d28a5769af1e1987aada52d4d9ac3bec39b68.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/c11e2de4066adae1114a90a8af16a6a460a500ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/529d28a5769af1e1987aada52d4d9ac3bec39b68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.162.0/23
200.50.165.0/24
200.123.59.0-200.123.61.255
Signature Algorithm: sha256WithRSAEncryption
7b:b3:b8:90:19:e5:69:7c:be:a5:5b:6e:65:b3:78:22:f4:dc:
61:69:45:8d:89:a5:3a:94:7a:fb:d0:1f:65:6f:14:04:c3:05:
71:b1:40:cd:58:f5:8b:90:99:a6:5b:dd:c6:5b:79:96:09:89:
20:ed:e2:17:41:17:51:ee:08:32:aa:24:ca:b7:e0:fd:d0:6b:
0b:96:3e:5d:ef:f3:d5:9a:7e:89:5d:36:3d:5e:9e:64:28:32:
0a:24:87:4c:20:a3:ce:b2:c3:28:2e:95:de:93:e4:ae:ec:66:
89:cf:64:20:6c:75:14:10:9b:ac:83:15:bf:50:eb:1d:9b:fd:
d7:d7:e1:56:a2:df:db:d5:9d:f9:4e:6f:c2:05:09:dd:ae:3e:
e5:a6:ef:4a:31:82:cc:ae:1a:0f:a8:1a:a0:f3:cd:b5:ea:2c:
2b:7c:30:f9:62:e8:0b:5a:03:7e:b5:6b:6e:72:4e:21:07:34:
f2:60:73:f1:42:62:a9:ca:b9:44:50:7e:91:a6:0a:64:4f:4f:
31:de:31:1e:7d:16:88:67:0e:57:55:f1:95:f2:31:35:1b:2b:
98:b7:98:29:bf:7a:7f:df:da:b5:0f:9a:bf:5a:8c:03:82:1f:
11:34:c4:21:58:a8:f1:9d:fc:91:dc:81:e4:cf:14:be:a8:b6:
80:b0:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 23:53:32 2024 by rpki-client on console-fra.rpki-client.org