Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/bfadd9c7289fccd97b2a83cfa406583b199dbbd4.roa
File: bfadd9c7289fccd97b2a83cfa406583b199dbbd4.roa (raw, json)
Hash identifier: FSh+lWioSvj+xz5h6Er0IDKmE+BC+cAZYsvNtJ+z/nA=
Subject key identifier: D9:89:12:E6:84:6F:53:07:E4:54:72:D7:DC:1C:35:8A:F1:7A:38:77
Certificate issuer: /CN=29faf9dda9a05093ff92d48d0018f02866d6716b
Certificate serial: 1560
Authority key identifier: 93:2C:62:78:33:D5:C1:86:D7:C3:CF:A4:BB:29:4B:B9:8B:E5:EA:80
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29faf9dda9a05093ff92d48d0018f02866d6716b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/bfadd9c7289fccd97b2a83cfa406583b199dbbd4.roa
Signing time: Wed 01 Feb 2023 21:39:06 +0000
ROA not before: Sun 29 Jan 2023 21:33:34 +0000
ROA not after: Sat 01 Feb 2025 21:33:34 +0000
asID: 8151
IP address blocks: 192.100.161.0/24 maxlen: 24
200.33.7.0/24 maxlen: 24
200.33.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5472 (0x1560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29faf9dda9a05093ff92d48d0018f02866d6716b
Validity
Not Before: Jan 29 21:33:34 2023 GMT
Not After : Feb 1 21:33:34 2025 GMT
Subject: CN=bfadd9c7289fccd97b2a83cfa406583b199dbbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:06:3e:98:89:6f:4f:eb:fe:ad:ab:f4:f3:
9d:e9:91:1b:d4:2e:98:74:e0:a8:68:1e:22:44:7e:
0b:d7:63:c5:27:a9:6d:c5:5b:9d:59:94:bb:19:5f:
c0:f2:20:1c:b0:7f:df:30:fc:62:a3:96:69:96:5e:
68:e9:be:8f:d8:9a:92:f7:7a:19:70:81:4f:e1:b4:
71:79:e8:9a:ab:7f:ba:a8:a7:d9:68:09:54:1f:7a:
62:1e:96:b0:92:5e:47:a4:13:1d:31:a9:35:13:ff:
c4:21:62:3e:6b:89:ad:4d:bf:2f:45:ea:8b:7e:4b:
1e:28:32:90:89:13:3b:8a:d0:cf:7f:d3:e2:c3:84:
51:76:ab:0f:77:53:26:38:49:b1:69:1c:23:2f:c0:
0a:d0:aa:01:13:4a:5e:44:7c:ab:ed:f4:89:36:a9:
38:4d:85:d4:8e:4b:4c:78:c4:5e:0b:1c:53:95:13:
f7:cc:12:ac:92:b1:29:6d:17:9b:de:e2:cf:d6:88:
64:f1:70:59:55:68:3d:24:80:41:4e:55:44:e2:34:
d7:f3:b3:67:62:97:39:8f:ae:19:cc:59:30:ea:c9:
3a:98:eb:2b:25:63:8d:7f:3d:be:c6:34:cd:37:07:
79:db:b3:ee:57:1e:05:9d:0d:a6:ac:ba:4e:be:11:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:89:12:E6:84:6F:53:07:E4:54:72:D7:DC:1C:35:8A:F1:7A:38:77
X509v3 Authority Key Identifier:
keyid:93:2C:62:78:33:D5:C1:86:D7:C3:CF:A4:BB:29:4B:B9:8B:E5:EA:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29faf9dda9a05093ff92d48d0018f02866d6716b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/bfadd9c7289fccd97b2a83cfa406583b199dbbd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/29faf9dda9a05093ff92d48d0018f02866d6716b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.100.161.0/24
200.33.7.0-200.33.8.255
Signature Algorithm: sha256WithRSAEncryption
71:7c:ee:63:8b:69:df:a0:c3:54:71:08:8d:f6:f0:80:0e:68:
a6:7d:53:35:52:f1:8c:95:b8:39:eb:e0:9b:34:6c:c2:16:ad:
eb:3f:23:c7:d4:df:01:e9:a7:b9:44:d5:45:4e:1a:e2:91:66:
3c:fd:c5:ee:b8:c5:d6:83:23:83:94:f4:70:13:45:ab:8d:95:
55:fe:36:ae:1d:e5:a7:6a:64:14:8f:c1:ab:f4:bc:e9:a4:6c:
47:73:e4:90:56:8e:2c:8c:89:1c:a9:17:66:71:a7:59:67:35:
26:d5:82:4e:5c:d8:90:2c:0c:06:d0:5e:f2:fd:cd:ca:72:21:
73:d3:d4:32:b7:51:7d:3c:22:b8:59:00:79:9a:dd:6f:52:29:
33:c0:51:9c:c4:c8:e3:27:3e:09:f0:9b:3d:46:88:8e:56:52:
7d:50:d1:ab:75:aa:3f:37:55:62:98:38:37:06:58:4b:ac:1c:
a2:cb:41:5b:b3:33:a8:fb:f8:57:fe:24:40:35:e9:e7:59:68:
b0:f1:5a:11:49:1f:4f:f2:7b:69:9c:8e:9b:b5:ac:ab:08:1a:
6b:7c:6f:52:22:dc:71:bf:cb:e3:1e:a0:d3:47:01:6a:5f:f3:
35:97:31:5c:74:3a:39:2d:3d:30:e2:5b:5b:60:ee:b8:b4:96:
38:10:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:17 2024 by rpki-client on console-fra.rpki-client.org