Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f41c619c0537dd3a3f02041638fd8a8307f719cc.roa
File: f41c619c0537dd3a3f02041638fd8a8307f719cc.roa (raw, json)
Hash identifier: 02ckA0jUI7A9sdRyeaD7bWQi7zzlKeT3oDeKQpCdrLA=
Subject key identifier: 31:FD:17:95:4F:58:DE:91:ED:7F:B4:DC:9A:06:18:D9:43:90:5D:35
Certificate issuer: /CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Certificate serial: 27EA26
Authority key identifier: 14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f41c619c0537dd3a3f02041638fd8a8307f719cc.roa
Signing time: Wed 08 Nov 2023 15:00:58 +0000
ROA not before: Wed 08 Nov 2023 15:00:37 +0000
ROA not after: Wed 08 Nov 2028 15:00:37 +0000
asID: 272114
IP address blocks: 200.123.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2615846 (0x27ea26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccbab920b7079b1b74dd61d4ee180a04a34886f
Validity
Not Before: Nov 8 15:00:37 2023 GMT
Not After : Nov 8 15:00:37 2028 GMT
Subject: CN=f41c619c0537dd3a3f02041638fd8a8307f719cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:ac:44:c8:7e:da:e9:63:64:f8:78:58:47:
2e:e0:35:ed:c4:1f:40:0a:7a:b4:a2:c6:e5:d7:35:
de:da:f3:7e:26:5f:4e:c0:c6:b1:7c:a4:be:7a:e2:
59:8e:ec:76:4d:d4:56:07:34:d4:e8:5c:57:d8:3c:
bc:aa:06:b5:ad:67:94:50:b1:d1:2a:2f:92:26:fd:
e2:b3:33:6d:c0:fb:f2:a4:f6:0a:51:fc:e2:0f:60:
36:81:ac:02:9c:cc:7e:54:0c:a7:55:48:71:1b:da:
88:6c:20:28:86:1b:cd:71:b6:c3:23:13:eb:cd:17:
94:20:95:36:cf:04:5f:c3:20:e0:29:63:5a:36:23:
ac:31:88:41:13:f8:72:76:c7:01:3b:ef:d4:2c:c4:
0c:a2:43:91:2f:a0:54:72:6b:72:17:f0:e7:0f:97:
44:65:4f:f2:50:eb:23:aa:4a:32:d5:dc:12:4f:f7:
dc:df:01:e4:e2:0f:8c:15:13:2d:01:6c:4f:97:8b:
84:40:39:45:72:f4:82:fa:fc:5d:d1:bd:e0:6d:6e:
f0:38:82:ac:41:c1:84:68:01:0c:c4:47:d1:f9:bb:
91:cf:fd:76:61:e4:1e:0b:f7:e0:f1:b9:36:8e:a7:
cb:1c:e4:53:7d:8d:1b:0d:9e:79:da:43:5f:7c:cf:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FD:17:95:4F:58:DE:91:ED:7F:B4:DC:9A:06:18:D9:43:90:5D:35
X509v3 Authority Key Identifier:
keyid:14:80:24:EC:76:A9:C7:70:55:57:04:AC:79:14:94:FC:70:C1:9E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ccbab920b7079b1b74dd61d4ee180a04a34886f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/f41c619c0537dd3a3f02041638fd8a8307f719cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/7ccbab920b7079b1b74dd61d4ee180a04a34886f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.32.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:b5:02:09:30:4f:0b:48:79:c5:f6:bf:3a:1a:d7:3f:c6:69:
1d:bb:df:98:a0:f3:75:46:ed:c4:0b:fd:56:9e:f5:8a:b8:28:
1b:cf:48:cf:5c:10:ae:39:d4:92:ed:ef:f3:ed:0a:aa:05:c2:
ee:f4:a8:c6:4e:ba:d6:ac:81:4f:32:ea:9e:24:45:ea:42:ec:
67:04:64:a6:a0:78:ca:05:95:85:31:22:a6:1a:d9:bd:e9:61:
46:21:f2:73:ca:2d:69:6e:9c:f6:56:90:22:91:fb:b6:09:00:
88:31:44:10:22:c5:96:48:7a:90:71:1d:0c:92:b4:98:58:6e:
f3:7c:d0:70:c6:5f:5c:5f:24:f7:b1:4a:ba:73:9e:90:bb:8d:
66:a4:e6:69:ff:9a:fd:46:48:e5:e8:b2:b2:33:f1:52:5c:c2:
ea:20:e1:88:41:67:3a:2a:83:2a:10:09:a9:12:ed:dd:63:28:
17:04:35:42:7d:53:7e:36:1b:d6:71:ed:9e:71:ce:00:9f:44:
58:81:08:f5:f4:1e:57:e5:9c:2e:a6:f5:78:a2:3f:e5:87:de:
43:a4:e7:a7:09:65:f0:bc:45:12:e6:d9:da:75:87:4c:ba:4a:
1e:2d:0b:f2:bf:ae:a1:57:a5:be:b3:ec:22:08:05:f7:81:27:
7c:82:ca:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 19:34:51 2024 by rpki-client on console-fra.rpki-client.org