Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/39f7e6d5894d3a8ff4610b99946212095e156da4.roa
File: 39f7e6d5894d3a8ff4610b99946212095e156da4.roa (raw, json)
Hash identifier: sme1xZoxisIJztKukeM7Yq/WZRKXavW5rCylyVYbegE=
Subject key identifier: 87:03:9B:BE:35:98:D0:59:E1:36:59:DB:9B:3A:D5:B0:FD:16:B4:A7
Certificate issuer: /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial: 29C204
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/39f7e6d5894d3a8ff4610b99946212095e156da4.roa
Signing time: Tue 06 Feb 2024 15:37:14 +0000
ROA not before: Tue 06 Feb 2024 15:36:47 +0000
ROA not after: Tue 06 Feb 2029 15:36:47 +0000
asID: 19114
IP address blocks: 200.24.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2736644 (0x29c204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Validity
Not Before: Feb 6 15:36:47 2024 GMT
Not After : Feb 6 15:36:47 2029 GMT
Subject: CN=39f7e6d5894d3a8ff4610b99946212095e156da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:02:5f:fe:40:97:62:be:d7:85:ed:65:02:
88:ec:19:10:6a:ea:5a:b3:2b:5f:07:56:14:78:eb:
85:ac:1d:6e:15:d1:33:78:24:3c:7e:48:9c:fb:13:
e8:ca:bf:f8:3e:c9:42:1f:6b:58:2e:82:5e:4d:cb:
5c:c6:1d:46:82:a1:a3:82:03:8b:db:b1:0b:f6:79:
e5:5f:3b:aa:ad:63:4a:99:d9:cc:4b:ac:6e:ac:6c:
17:32:e2:be:d1:94:0c:73:e7:09:83:69:46:b6:b2:
60:fb:9b:78:39:43:68:ea:02:86:33:80:3f:39:70:
89:be:6a:c8:4f:5b:a1:b7:fd:43:e8:bb:6b:b8:68:
30:74:ad:1f:fd:64:fb:74:eb:5e:28:08:6e:c1:40:
a3:73:1d:bf:10:70:ca:ed:01:a1:01:2f:90:2f:86:
61:46:78:55:c1:c1:e7:20:80:57:4c:a4:ea:49:6c:
bb:91:f6:60:67:9b:e5:b6:1d:f8:6c:f4:41:a2:5e:
f3:de:38:75:18:41:5d:02:1b:c1:d7:43:3b:59:d6:
2f:4e:7e:4b:04:37:6e:de:17:66:a0:1f:ed:8f:ea:
22:61:81:9e:b1:9e:c0:09:66:7a:7f:9c:5e:0f:59:
78:f3:17:ea:61:f1:02:b0:49:b5:e9:54:9d:cc:d3:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:03:9B:BE:35:98:D0:59:E1:36:59:DB:9B:3A:D5:B0:FD:16:B4:A7
X509v3 Authority Key Identifier:
keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/39f7e6d5894d3a8ff4610b99946212095e156da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.24.220.0/24
Signature Algorithm: sha256WithRSAEncryption
18:cb:c9:e9:6a:64:82:b1:3e:cd:21:8a:62:2e:49:6a:59:93:
36:cd:70:1f:a2:5b:0e:5e:4d:b2:60:e8:f3:e1:b2:f5:31:9f:
67:90:87:54:67:f2:c2:26:d9:3c:3f:e4:2f:c5:a0:d7:98:4c:
d4:89:ed:e4:37:dd:72:87:15:72:c4:69:bb:46:73:28:9d:e8:
bf:3c:ab:71:56:01:65:69:47:e3:69:a8:0e:77:55:50:48:34:
8c:6c:d1:a0:d0:a5:cd:c6:19:2f:7a:26:a2:9c:4b:78:2d:a5:
0d:db:3c:c5:80:86:07:ef:4e:aa:6c:d7:39:98:08:d1:e4:59:
29:f9:09:d0:f7:83:83:a7:ee:c9:b1:b1:5d:7b:b8:f0:e1:bc:
41:43:0b:c9:4c:33:87:9a:db:ff:11:a3:78:09:46:4c:cf:79:
c3:06:88:0e:82:f8:ce:9e:ae:b3:d5:a4:c1:e7:0b:0e:9d:5f:
1b:41:f3:f5:a3:42:2b:20:3e:e5:a0:a2:01:ef:cd:d1:be:ba:
e8:9c:3d:5c:b1:4b:c6:8f:64:43:ec:10:8b:34:1c:05:16:e8:
3f:0b:3f:9f:e8:9d:a4:3c:21:c3:ac:d8:08:7c:0f:6c:a8:46:
e0:37:88:d6:0e:51:30:ff:78:bc:d6:7a:b6:fc:f9:f0:ed:f2:
84:81:4f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org