Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f8070cc-6648-4467-a7a0-3cf27e412c37/01b67f6840e3b2bcc759bda35f6323c3bf72dd81.roa
File: 01b67f6840e3b2bcc759bda35f6323c3bf72dd81.roa (raw, json)
Hash identifier: Hgize/ZUwemfLhBVdq/kiuPStnYu3X2/Fs0V0gtnSgc=
Subject key identifier: 9E:DE:FE:BC:91:97:04:FE:34:A7:64:B3:A0:E9:63:0D:0A:C2:33:C8
Certificate issuer: /CN=6888ea401829b521f341a745ae20cf56ff8b19b3
Certificate serial: 22D4CB
Authority key identifier: 0E:48:E0:E6:53:2E:F9:75:76:BF:46:D1:19:68:EC:36:3F:0E:0B:CC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6888ea401829b521f341a745ae20cf56ff8b19b3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3f8070cc-6648-4467-a7a0-3cf27e412c37/01b67f6840e3b2bcc759bda35f6323c3bf72dd81.roa
Signing time: Tue 29 Aug 2023 08:30:01 +0000
ROA not before: Mon 28 Aug 2023 08:30:01 +0000
ROA not after: Wed 27 Aug 2025 08:30:01 +0000
asID: 20015
IP address blocks: 200.71.192.0/19 maxlen: 24
200.71.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2282699 (0x22d4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6888ea401829b521f341a745ae20cf56ff8b19b3
Validity
Not Before: Aug 28 08:30:01 2023 GMT
Not After : Aug 27 08:30:01 2025 GMT
Subject: CN=01b67f6840e3b2bcc759bda35f6323c3bf72dd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dd:8c:80:13:ed:73:74:2f:45:4a:84:1d:98:
51:89:1f:78:26:05:e3:de:4a:4c:2e:98:72:cd:ce:
3c:57:cb:de:b6:ea:39:c5:1c:3d:96:1b:5b:9c:2d:
eb:95:01:ac:d1:30:77:4c:11:e0:74:7c:59:9a:7e:
d8:06:0c:eb:6d:f6:1d:8e:5f:d7:1a:40:9e:ff:fb:
9d:d6:2f:e9:ac:99:dd:a7:f6:2e:62:f8:21:0a:f0:
60:54:89:d4:7e:2b:c2:be:2e:bd:84:6a:9e:7b:27:
1e:54:9c:65:6e:4d:e6:1c:a3:6f:9a:a4:df:79:c0:
cd:a5:cd:7a:23:01:14:8c:2d:1a:8a:b3:a2:b6:45:
92:44:44:31:69:66:d6:c1:28:fd:b3:39:81:e4:74:
97:d5:ab:2a:70:2f:1e:d2:df:cd:4b:51:c1:4c:f1:
82:be:83:25:f1:2f:7b:21:dd:e7:65:ef:0c:6d:31:
45:58:47:14:91:c3:e5:4c:8b:e9:23:02:5a:ec:ac:
30:4e:50:d9:49:92:11:a6:bc:ff:d6:53:60:e3:3d:
5b:36:75:f0:b3:1a:ba:87:16:d4:7c:00:9f:e3:17:
39:6e:37:8e:1a:18:ec:e6:9d:6f:0f:6b:b7:02:fe:
83:e6:5b:bb:04:fb:bc:65:39:e0:7f:c8:71:21:a3:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DE:FE:BC:91:97:04:FE:34:A7:64:B3:A0:E9:63:0D:0A:C2:33:C8
X509v3 Authority Key Identifier:
keyid:0E:48:E0:E6:53:2E:F9:75:76:BF:46:D1:19:68:EC:36:3F:0E:0B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6888ea401829b521f341a745ae20cf56ff8b19b3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f8070cc-6648-4467-a7a0-3cf27e412c37/01b67f6840e3b2bcc759bda35f6323c3bf72dd81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3f8070cc-6648-4467-a7a0-3cf27e412c37/6888ea401829b521f341a745ae20cf56ff8b19b3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:1d:29:32:79:be:3e:42:aa:f8:c2:42:25:a5:71:60:2c:1d:
82:19:8d:4b:8c:cf:59:d1:84:cb:f4:33:54:88:ce:dd:54:dc:
aa:05:44:8c:a5:57:2f:c4:73:c4:ec:dc:84:3e:bb:18:0b:c2:
b7:19:cf:fd:c3:18:9a:84:11:eb:ea:3f:7a:da:8c:e7:dc:4c:
0c:9d:11:3e:ef:3f:e5:5a:ba:5e:f4:75:08:57:1e:d8:8e:b6:
b7:5b:c0:3b:97:d8:d2:01:5c:26:a7:f2:12:97:a2:f5:40:7e:
2c:78:56:e2:43:18:ce:ac:e8:82:55:c3:9b:3e:92:38:c5:10:
90:98:77:d0:1f:d2:e5:54:75:26:ff:c0:40:6f:34:68:61:71:
14:2f:08:25:fb:c9:84:4a:3a:23:af:93:23:e2:c0:85:9a:5b:
08:03:72:37:4f:05:51:47:a4:c5:3b:8c:c3:24:c2:d9:80:e5:
1c:4f:fe:06:9a:7b:7b:8b:3b:95:72:60:11:60:ca:c2:c9:2a:
cc:5a:41:a8:3a:0e:60:f2:8b:c5:13:16:82:57:e0:7a:9e:d3:
8f:61:2c:e2:ce:73:55:60:84:18:f7:47:8e:5a:ce:65:52:f1:
ae:fa:e4:ef:b8:9d:07:33:5b:12:a8:a6:1e:bb:ca:e9:4b:ba:
29:63:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org