Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e03be6af6042e3934a5ae2bdcadb61a8181c4a21.roa
File: e03be6af6042e3934a5ae2bdcadb61a8181c4a21.roa (raw, json)
Hash identifier: mxk54hGZNEp7rxPmywLu9tx9+Y+7e142KylsbgQWRiA=
Subject key identifier: DB:36:14:21:4E:E5:82:8A:81:04:90:79:0B:FD:C0:49:7D:38:7D:03
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DD8B2
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e03be6af6042e3934a5ae2bdcadb61a8181c4a21.roa
Signing time: Thu 07 Dec 2023 12:42:42 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 52279
IP address blocks: 200.45.120.0/24 maxlen: 24
200.43.105.0/24 maxlen: 24
200.43.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3004594 (0x2dd8b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=e03be6af6042e3934a5ae2bdcadb61a8181c4a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:40:d1:93:23:e2:10:6b:c8:35:dd:b2:c3:
64:09:56:3b:d1:80:7a:02:b6:6c:16:1c:8b:7c:9c:
80:00:f3:69:e8:b5:46:11:01:c8:5e:c2:d4:d7:48:
06:3d:9b:f2:b5:3b:0f:88:1e:f4:d4:24:ac:b2:ce:
3a:b9:13:62:62:61:5b:bd:96:74:6e:c5:cd:b9:38:
67:df:4c:db:39:d6:e8:bb:86:82:4f:8a:51:5f:59:
5e:eb:6f:9d:a3:a0:2b:b6:67:46:ad:96:c5:8f:fe:
ca:ed:d8:f7:14:62:2b:96:91:ad:c8:d6:fe:3f:86:
32:0d:0e:ca:83:25:37:b1:3f:48:96:4e:88:d1:4b:
b5:19:08:a5:3c:f7:f2:07:4f:f5:d6:54:bd:b7:8f:
9d:39:16:55:e3:d4:34:30:19:eb:92:ad:fb:f6:e8:
da:1f:13:ee:5f:41:07:46:24:45:74:a0:15:05:31:
49:f0:dd:fc:4a:66:5d:3e:89:f2:ad:2a:4e:da:2b:
1d:6c:a2:89:37:f0:4e:5d:71:b8:6c:e8:dd:35:fc:
71:a5:21:66:e6:7d:0b:fd:08:bb:9f:6f:5b:ef:07:
26:c4:06:f4:77:7f:d6:b8:73:44:1f:f9:21:cd:83:
65:ed:83:0b:0f:91:48:28:4c:5d:ea:76:78:22:65:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:36:14:21:4E:E5:82:8A:81:04:90:79:0B:FD:C0:49:7D:38:7D:03
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e03be6af6042e3934a5ae2bdcadb61a8181c4a21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.43.105.0-200.43.107.255
200.45.120.0/24
Signature Algorithm: sha256WithRSAEncryption
33:53:dc:ca:22:80:e8:1a:b9:ef:f4:aa:0e:44:ea:5e:80:a3:
ba:08:6c:58:b6:9b:4b:b1:28:19:cc:d7:62:e5:98:29:ae:63:
4d:f1:20:87:6d:be:a0:97:6c:8a:af:0d:e3:4c:1d:44:22:83:
f5:86:db:a5:68:e0:29:d2:6d:2a:f2:51:fa:df:6a:18:d1:8e:
61:86:c9:a7:1e:83:4a:a7:87:23:dc:83:e6:65:74:05:f1:09:
2f:d2:0e:08:e9:9c:9a:04:f5:e3:c5:cd:ee:44:f8:61:d5:59:
bf:5a:c0:e8:03:87:bf:a9:e5:a1:1d:d2:40:5b:4c:1a:bf:a4:
cb:52:94:17:ec:d8:df:98:4b:d0:09:9a:be:b0:4d:f1:79:da:
e5:81:4b:6e:a1:82:ba:8c:50:7c:31:5d:f9:74:d7:b3:09:84:
40:61:4f:b8:57:7a:9d:22:e8:80:cd:60:d5:a0:59:18:9f:27:
c8:d7:54:73:e8:27:2c:4e:a9:49:04:70:3c:a4:7a:1d:74:cf:
bc:12:29:fd:eb:db:06:d1:5f:83:30:64:00:0e:aa:7e:fc:dc:
f2:2c:fe:53:12:60:db:6b:6b:be:6b:16:3a:06:50:46:a1:3b:
af:8b:c0:b1:fa:ae:29:22:c3:88:83:a3:8a:a2:8e:d0:4e:88:
fc:ce:df:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org