Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/15cef7de82491c101f03201023cd618a8256a12a.roa
File: 15cef7de82491c101f03201023cd618a8256a12a.roa (raw, json)
Hash identifier: 7Tfx7SkvBySH5PbObpOzKpAibzfJn1KtGge5Q7orl48=
Subject key identifier: 66:2C:E7:40:A8:70:57:05:68:22:4A:32:A1:31:2F:09:1E:4E:1A:12
Certificate issuer: /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial: 1428AC
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/15cef7de82491c101f03201023cd618a8256a12a.roa
Signing time: Tue 30 Jan 2024 18:32:34 +0000
ROA not before: Tue 30 Jan 2024 18:32:34 +0000
ROA not after: Fri 30 Jan 2026 18:32:34 +0000
asID: 10834
IP address blocks: 200.51.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1321132 (0x1428ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Validity
Not Before: Jan 30 18:32:34 2024 GMT
Not After : Jan 30 18:32:34 2026 GMT
Subject: CN=15cef7de82491c101f03201023cd618a8256a12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:61:cb:23:1c:66:65:bc:2c:20:7a:74:51:05:
ec:a4:9f:9d:fb:20:f0:97:6b:92:55:5b:0e:6f:56:
7d:c6:81:49:dc:89:5e:1b:02:19:b5:52:68:f7:a0:
94:ac:fb:6e:ab:36:e1:34:71:09:71:a8:58:16:56:
da:a7:81:84:65:a0:6b:41:04:23:f4:6b:41:0e:b1:
74:08:f2:2e:c8:16:fc:ac:de:a6:56:1f:af:19:f0:
ec:bc:99:57:cc:49:9a:60:9c:53:1d:02:fa:d5:c0:
8b:ff:93:ff:13:0c:4f:49:9a:48:22:14:ba:f3:84:
38:87:43:9d:fb:5c:29:73:a4:3d:25:41:9f:a3:11:
22:9d:6a:7d:9e:89:1a:01:cd:87:29:34:81:df:35:
26:ca:16:9e:9c:e4:fe:6f:6d:7f:23:bf:42:4e:16:
93:e4:55:68:71:bc:6a:d6:ee:94:e5:5c:e9:2c:1a:
f5:d2:6b:0b:57:28:07:bd:36:41:1b:e0:82:14:5a:
d0:6c:ed:a3:48:8d:c1:16:e3:bc:7b:f7:1c:63:d5:
c6:98:76:8e:40:28:8c:91:71:a4:dd:b8:44:94:07:
dc:35:81:ac:3b:4c:ad:a1:b7:f8:62:33:59:14:3b:
09:7f:3f:55:dc:a6:2c:c0:b6:bd:82:ff:d4:50:1a:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2C:E7:40:A8:70:57:05:68:22:4A:32:A1:31:2F:09:1E:4E:1A:12
X509v3 Authority Key Identifier:
keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/15cef7de82491c101f03201023cd618a8256a12a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.51.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:c6:38:d0:53:f8:5f:60:d4:6a:14:2a:f1:13:7e:41:b2:8d:
1c:bb:86:b4:75:8c:b0:9a:01:70:5f:03:82:4d:0d:93:28:24:
23:2d:57:a3:eb:61:89:6c:14:bd:cb:96:61:6d:db:8c:88:47:
d8:e1:9d:e8:18:14:c6:de:fa:58:70:23:3f:3a:10:21:84:39:
5f:13:8b:2d:4c:3b:c7:79:81:fd:4b:46:20:d8:f4:f4:05:a9:
90:c9:60:b5:ca:e7:98:19:7b:22:ea:1b:6e:bb:03:bf:c2:33:
f9:33:b6:a6:cd:19:5e:45:f3:c5:99:45:f7:51:c6:db:39:d7:
3e:bd:5b:7f:a3:d2:17:88:34:5d:74:39:d6:19:f8:7e:ef:66:
a9:e9:9d:b4:4b:c6:2a:5f:7e:2e:6d:ad:f9:76:be:3d:04:e6:
7b:ef:8a:59:5c:1d:74:b6:83:ea:d4:5b:22:8c:39:59:21:5b:
96:e1:b8:46:8f:3c:c1:c6:98:db:74:09:dc:b0:e1:cf:95:df:
66:50:75:2c:eb:2e:91:1d:4c:47:99:1b:e5:1b:78:3b:1c:4c:
b9:af:c7:f5:f6:c5:ed:1d:80:94:67:47:0b:22:01:03:51:93:
ed:20:fd:24:8e:27:e4:57:e0:2b:c2:90:1a:76:09:cb:41:3a:
6c:dd:4b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org