Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/471e66f2138f03d80b75d5b851b615e85dbc8bc9.roa
File: 471e66f2138f03d80b75d5b851b615e85dbc8bc9.roa (raw, json)
Hash identifier: HA3izGWBuAASBv9RGOl3X2Uhl/CEtOZEetVk2vYWsyo=
Subject key identifier: 98:C5:5D:4E:40:29:6D:B7:16:18:08:2D:04:43:C0:0C:EB:E0:DF:1F
Certificate issuer: /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial: 277C7B
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/471e66f2138f03d80b75d5b851b615e85dbc8bc9.roa
Signing time: Tue 13 Feb 2024 16:37:13 +0000
ROA not before: Tue 13 Feb 2024 16:37:13 +0000
ROA not after: Fri 13 Feb 2026 16:37:13 +0000
asID: 6471
IP address blocks: 200.7.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2587771 (0x277c7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
Validity
Not Before: Feb 13 16:37:13 2024 GMT
Not After : Feb 13 16:37:13 2026 GMT
Subject: CN=471e66f2138f03d80b75d5b851b615e85dbc8bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:f0:02:50:a7:05:b8:9c:9c:07:4e:ad:62:
d9:d6:e1:0a:c9:5e:fc:d9:9f:a8:6d:38:6c:ce:fd:
0c:75:c0:e9:52:c1:7a:5b:8d:7b:ff:d3:80:25:1b:
1d:11:cf:05:5e:6f:8d:bb:f1:67:44:1a:73:d1:76:
d9:3c:1c:ce:c1:ec:fd:d3:ba:5a:7c:eb:bb:a7:48:
c3:d5:f3:08:ea:23:d9:04:54:5e:e1:f5:54:c2:9a:
f8:6b:60:da:e2:81:a0:e1:68:ad:9c:19:6f:af:c3:
33:e1:b0:72:3e:7f:35:56:ab:ef:5f:56:33:cb:90:
9d:9a:d8:12:5e:49:6a:1d:3e:44:3e:4a:53:45:f4:
c2:05:2a:13:04:07:22:88:8f:ed:76:dc:29:9f:87:
57:35:d8:13:0b:22:df:80:33:a2:a4:22:4a:31:71:
65:7c:5e:59:cc:46:75:34:9a:96:22:3d:5f:61:11:
d6:97:dc:3d:c3:f3:26:1a:60:f4:6e:d6:76:9f:26:
25:a8:0c:70:c5:74:49:75:d3:e6:10:c5:ff:6c:66:
ac:8e:67:be:51:72:e5:ab:d8:70:7a:9d:c6:70:05:
8a:1f:7e:93:36:45:de:9e:b5:1a:b8:12:cd:08:2f:
90:53:f3:b1:02:d9:76:c6:ae:66:3f:7d:cd:6d:45:
b5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C5:5D:4E:40:29:6D:B7:16:18:08:2D:04:43:C0:0C:EB:E0:DF:1F
X509v3 Authority Key Identifier:
keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/471e66f2138f03d80b75d5b851b615e85dbc8bc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.16.0/20
Signature Algorithm: sha256WithRSAEncryption
29:7e:7a:af:57:18:69:63:6b:70:e6:63:0c:d5:36:d6:bd:a7:
5f:7d:52:dc:65:1d:26:38:b2:38:84:77:d1:fc:23:e6:77:b1:
7a:29:f9:9a:fe:33:28:a6:79:98:eb:d9:72:f9:1a:17:cd:0a:
33:88:ee:b8:4f:55:a2:93:27:65:ef:73:62:c5:9e:c2:28:11:
2a:3c:00:ad:11:2c:f0:77:76:b3:ef:42:af:54:a6:22:ea:70:
e0:67:73:db:b1:eb:00:d5:40:9d:e1:23:6e:06:8e:25:04:11:
1d:da:bc:78:e3:71:d2:5a:0a:6b:a8:d5:46:bf:ac:a3:23:76:
c4:c3:b8:67:bf:36:68:b4:f7:5a:7b:d2:9c:92:56:ca:cd:cf:
ce:d8:2d:fd:d3:4f:d5:9d:69:92:f1:de:55:91:a7:1f:c0:c9:
ea:55:02:74:ca:7f:24:40:3c:61:0c:ea:a7:53:c8:c6:90:e8:
a5:aa:e3:84:65:b0:00:24:e2:4b:6b:41:4f:24:b4:e3:00:02:
ba:fc:80:98:69:0c:b8:85:07:af:48:97:ec:f1:79:0c:f1:a2:
0c:93:8c:67:67:0a:18:e5:e3:d6:8e:5e:9e:1c:32:e6:94:e4:
78:7d:f6:cb:6d:b7:d3:87:76:93:c0:81:f7:b8:69:28:cd:86:
10:e9:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org