Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d0deb57-60d1-43e1-a55c-a6e0df83c9d9/7b17b86416673d9778366dcfb8f808df72583009.roa
File: 7b17b86416673d9778366dcfb8f808df72583009.roa (raw, json)
Hash identifier: tHYTdYSrWe6iSvqv5YCePTZlWPZPPRoHWVKtCeBUQSw=
Subject key identifier: 99:77:B1:CE:F3:EC:75:2D:29:BD:15:26:50:E3:BE:FA:81:2B:8B:6D
Certificate issuer: /CN=b6aec1e3a9102baedb85d261f29b6ba51c5736b5
Certificate serial: 1F2145
Authority key identifier: 8A:79:4E:6E:E5:AE:75:F3:22:ED:8B:9B:B0:7C:A4:10:5F:8E:0D:07
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b6aec1e3a9102baedb85d261f29b6ba51c5736b5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3d0deb57-60d1-43e1-a55c-a6e0df83c9d9/7b17b86416673d9778366dcfb8f808df72583009.roa
Signing time: Thu 21 Mar 2024 15:51:05 +0000
ROA not before: Thu 21 Mar 2024 15:51:04 +0000
ROA not after: Sat 21 Mar 2026 15:51:04 +0000
asID: 264774
IP address blocks: 168.197.200.0/22 maxlen: 22
168.197.200.0/24 maxlen: 24
168.197.201.0/24 maxlen: 24
168.197.202.0/24 maxlen: 24
168.197.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040133 (0x1f2145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6aec1e3a9102baedb85d261f29b6ba51c5736b5
Validity
Not Before: Mar 21 15:51:04 2024 GMT
Not After : Mar 21 15:51:04 2026 GMT
Subject: CN=7b17b86416673d9778366dcfb8f808df72583009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:12:07:f3:74:a9:fc:13:82:88:83:35:f5:
83:df:cb:1b:7e:dc:58:f4:61:a5:68:4e:6c:a8:1f:
23:89:06:97:17:23:d3:c9:c2:10:45:f7:aa:d6:a7:
31:98:61:e1:dd:fb:44:45:45:38:fe:37:cd:47:e8:
1d:6a:71:d6:24:56:78:67:c2:78:e0:f7:a2:a9:cf:
97:01:b2:ec:46:39:70:8c:02:50:28:f4:69:cd:c1:
0d:95:9e:1a:32:fe:d7:f5:ff:cd:60:57:11:df:8e:
08:17:ac:f2:6a:a2:bf:f7:39:4d:e1:b0:41:fe:37:
fc:f2:23:a2:ae:21:a1:b6:80:8e:5b:e7:81:78:fb:
16:e4:59:f0:2c:ea:9b:45:01:e1:a4:30:ec:b0:d7:
05:63:ab:37:32:8d:e8:4b:41:2e:be:42:d9:b6:ed:
c8:29:39:78:77:1f:7f:fb:b0:1b:f4:28:84:53:f5:
3e:01:ab:e2:78:be:0e:7d:fb:2a:61:f2:40:35:17:
84:17:e4:64:ae:1e:1e:3c:b5:08:0b:9a:8a:88:cb:
b0:52:27:51:1e:b6:95:ad:84:3f:3f:ad:d8:de:bf:
b1:f2:c6:a0:13:f8:4c:7a:e7:46:27:ae:a8:17:dd:
40:8e:ba:d3:1f:fb:73:fa:5b:4b:30:27:4f:43:c8:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:77:B1:CE:F3:EC:75:2D:29:BD:15:26:50:E3:BE:FA:81:2B:8B:6D
X509v3 Authority Key Identifier:
keyid:8A:79:4E:6E:E5:AE:75:F3:22:ED:8B:9B:B0:7C:A4:10:5F:8E:0D:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b6aec1e3a9102baedb85d261f29b6ba51c5736b5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d0deb57-60d1-43e1-a55c-a6e0df83c9d9/7b17b86416673d9778366dcfb8f808df72583009.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3d0deb57-60d1-43e1-a55c-a6e0df83c9d9/b6aec1e3a9102baedb85d261f29b6ba51c5736b5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:fb:0e:f5:b2:b0:c2:63:3c:4d:43:84:f9:a1:f2:3b:ad:ef:
dc:7d:bc:a9:d1:e4:8b:90:b0:9f:f9:69:f7:98:19:85:ce:8f:
cc:03:06:46:56:c4:c1:f0:9b:05:3e:ec:3f:65:31:73:da:28:
b1:1c:5e:71:bf:44:c3:5c:2f:9a:0a:8d:cd:cc:af:99:00:14:
b1:53:7b:6d:e4:55:49:dd:f5:cc:ef:d2:00:fe:68:48:13:6b:
1c:d9:86:a0:24:e8:86:a5:ff:80:34:fb:7a:3f:ad:dd:b9:8a:
f9:3b:63:d1:68:56:99:87:ff:de:c3:4f:8e:c4:fe:ba:35:55:
b8:8b:7f:b3:35:b0:fd:fa:6c:92:45:6e:18:b5:33:6e:b0:1d:
9b:29:50:11:25:a7:83:03:75:40:37:c7:24:ae:53:9b:28:91:
f3:32:d0:90:a9:a3:f8:60:b4:76:50:c8:73:d3:dd:82:13:c9:
55:79:8a:9c:54:08:54:9f:b3:9b:22:09:24:c5:39:08:5b:1e:
6e:93:e8:56:b3:82:67:6a:7a:f5:aa:57:71:3d:f7:f7:92:7d:
6f:70:1d:18:47:46:20:6e:85:64:9e:18:f7:4d:b5:dc:ac:95:
89:34:4a:5f:91:41:c0:5b:13:8e:4d:8b:b8:42:52:e3:9b:34:
8a:79:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:05 2024 by rpki-client on console-fra.rpki-client.org