Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/a5d01e597389eb46ba0476fcbbe1c2be57ab8a27.roa
File: a5d01e597389eb46ba0476fcbbe1c2be57ab8a27.roa (raw, json)
Hash identifier: QpmIYneyR4SSJJhBFyR/MLyJ1jw5xZmHXy3xzIvgTYY=
Subject key identifier: 4C:92:C9:56:5D:3C:C4:77:CD:9F:9B:27:14:45:1D:F6:CA:0D:47:1C
Certificate issuer: /CN=ec902101fc98565e74f436a72f5cb8e35599e267
Certificate serial: 025345
Authority key identifier: 82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/a5d01e597389eb46ba0476fcbbe1c2be57ab8a27.roa
Signing time: Mon 07 Aug 2023 16:01:54 +0000
ROA not before: Sun 06 Aug 2023 16:01:54 +0000
ROA not after: Thu 07 Aug 2025 16:01:54 +0000
asID: 7004
IP address blocks: 200.91.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152389 (0x25345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec902101fc98565e74f436a72f5cb8e35599e267
Validity
Not Before: Aug 6 16:01:54 2023 GMT
Not After : Aug 7 16:01:54 2025 GMT
Subject: CN=a5d01e597389eb46ba0476fcbbe1c2be57ab8a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:0b:60:d1:be:9a:1c:60:2b:88:4a:23:39:
7a:b1:ce:2d:bb:ea:05:6c:c7:57:53:e1:96:c2:32:
14:fe:08:24:05:a4:33:0f:a6:30:c9:80:4a:f9:9b:
36:ec:d3:50:1a:ac:17:db:78:c3:1d:fa:21:38:d4:
a3:65:39:37:54:2b:60:9e:5a:46:95:7a:ef:74:24:
01:70:63:df:4a:6e:76:fc:94:82:dc:2e:bd:59:12:
6f:93:0e:32:ae:8e:50:e6:5f:28:0a:81:9b:9f:cc:
5c:23:4d:0f:ab:d6:4a:be:2b:f1:2a:d0:7a:70:87:
5d:21:d1:6d:d1:0d:5a:b8:3c:6a:61:d4:0c:2d:96:
40:14:e8:e0:76:06:de:87:88:c6:3a:9a:62:63:12:
fe:69:37:86:77:9a:88:68:59:b7:a1:22:b1:b9:65:
ad:78:5f:bc:e5:46:fb:b0:e7:8b:f5:1d:f7:34:9c:
fd:1c:da:e2:09:42:f7:75:51:62:1d:a0:15:31:11:
64:c1:42:d9:10:e3:f6:e8:88:64:04:37:86:76:d5:
f1:ac:10:77:b6:9b:ec:73:01:5e:de:4d:d6:99:04:
1f:eb:70:65:de:59:b7:7b:4a:f8:42:21:41:16:a8:
93:5b:9a:d8:e1:ca:75:7d:e1:c3:35:49:0e:86:2d:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:92:C9:56:5D:3C:C4:77:CD:9F:9B:27:14:45:1D:F6:CA:0D:47:1C
X509v3 Authority Key Identifier:
keyid:82:BE:16:91:AF:73:AF:56:DF:E0:7C:47:FE:36:A6:D7:6D:A1:DF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec902101fc98565e74f436a72f5cb8e35599e267.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/a5d01e597389eb46ba0476fcbbe1c2be57ab8a27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4ae6c2d9-6a94-49d9-9a48-5138831d3362/ec902101fc98565e74f436a72f5cb8e35599e267.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.91.2.0/24
Signature Algorithm: sha256WithRSAEncryption
16:0f:d8:fc:ac:59:04:cf:c0:30:54:c9:88:dd:da:f6:1a:21:
3a:16:a1:8a:b9:c0:12:91:a3:87:04:b6:54:37:db:a9:9b:f0:
66:99:43:73:8e:df:87:eb:78:1b:fe:cd:c7:26:f8:94:df:27:
d5:6c:56:ea:e3:60:23:63:5c:49:ad:33:af:03:b0:81:1d:0a:
9b:5b:c3:59:68:bf:12:16:4e:b3:e9:45:71:6d:d8:4f:2c:0e:
16:a9:cf:3b:3f:92:ee:14:b8:d0:82:2f:03:4f:b9:82:75:24:
24:82:e2:7e:fe:6e:ce:e3:ed:9c:72:e3:26:52:d5:d8:be:89:
be:0a:4e:16:d0:73:37:6e:55:33:8a:bd:17:0c:88:9e:b4:60:
26:77:8b:c1:fb:28:f9:13:4d:d7:85:e8:3d:db:fa:19:8f:71:
a6:5b:d0:15:b8:45:a0:fe:49:63:9e:6b:c9:aa:69:83:a2:c9:
19:50:23:ad:6f:16:56:f6:91:16:10:5f:3c:cd:be:55:7a:d1:
fb:03:87:b3:3e:79:cd:3e:81:87:05:78:24:88:8c:ff:83:4b:
39:c3:5b:4b:ad:3e:b1:63:87:80:f6:b1:d1:63:0a:1f:b6:0a:
7c:03:c9:86:67:62:53:3c:9e:bf:a0:2d:16:4f:98:b2:9c:cc:
16:a4:39:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org