Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/925ad84d86a80d2e1bb8b7a730a7a549bacc7de5.roa
File: 925ad84d86a80d2e1bb8b7a730a7a549bacc7de5.roa (raw, json)
Hash identifier: Jvqlnz9EtDY3ZxYbrkdzyno2+suFqKERemjCl0aThlE=
Subject key identifier: 0D:FF:6D:C9:87:68:70:F4:A7:20:BC:EB:EE:B7:EE:C6:F7:4C:20:E9
Certificate issuer: /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial: 298DBE
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/925ad84d86a80d2e1bb8b7a730a7a549bacc7de5.roa
Signing time: Tue 06 Feb 2024 15:36:56 +0000
ROA not before: Tue 06 Feb 2024 15:36:47 +0000
ROA not after: Tue 06 Feb 2029 15:36:47 +0000
asID: 19114
IP address blocks: 200.24.192.0/20 maxlen: 20
200.24.192.0/19 maxlen: 19
200.24.208.0/20 maxlen: 20
200.24.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2723262 (0x298dbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Validity
Not Before: Feb 6 15:36:47 2024 GMT
Not After : Feb 6 15:36:47 2029 GMT
Subject: CN=925ad84d86a80d2e1bb8b7a730a7a549bacc7de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:92:c9:83:00:15:33:33:5c:e2:e1:d2:f1:
f4:de:b2:bd:e4:9f:81:6b:08:b8:2a:3f:fb:8a:84:
3c:54:c5:14:7d:ed:03:4a:b0:9e:4d:53:6b:d5:f0:
b1:36:27:d2:e6:65:81:72:38:d1:28:9a:10:e2:cb:
b2:d1:c0:c9:26:5c:2c:63:53:f7:53:a9:f6:90:64:
24:57:f9:39:98:45:ac:e9:e3:d7:2b:ec:cf:5f:d7:
2c:88:49:58:5c:0b:78:04:99:8b:22:e7:d4:a4:0b:
ac:3d:de:24:0e:2e:e0:26:ea:95:90:90:5d:51:bf:
2d:cd:26:61:98:10:f6:fe:df:79:8e:cc:d6:96:e6:
5a:a9:1d:92:cb:c0:02:fd:14:58:ae:6b:6f:f4:c7:
f2:8e:aa:3b:fe:c5:88:c6:60:07:e4:60:f3:71:48:
ae:02:4c:94:4e:98:d8:bc:ea:4a:29:ec:8a:b9:cc:
27:5f:24:d5:ec:d7:44:b3:bb:43:9a:07:1a:a4:1f:
77:9f:e5:80:67:9d:c9:ef:37:10:ea:80:90:9f:91:
7e:fa:7f:58:db:6b:11:4e:94:82:0d:35:b3:45:a0:
9a:bb:57:96:47:52:3a:00:91:8d:11:6d:e2:25:32:
6f:50:87:77:0a:89:6b:69:f6:f0:29:95:f4:70:c8:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FF:6D:C9:87:68:70:F4:A7:20:BC:EB:EE:B7:EE:C6:F7:4C:20:E9
X509v3 Authority Key Identifier:
keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/925ad84d86a80d2e1bb8b7a730a7a549bacc7de5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.24.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:22:5d:58:db:f5:fc:41:03:2a:0f:ac:ea:09:23:88:f9:e5:
1c:94:44:e4:59:75:39:b8:41:10:61:2b:81:ee:75:3e:2c:eb:
03:ce:fc:48:b3:43:63:ad:d2:79:ca:f1:ac:84:cf:03:c2:d9:
c3:f7:d1:6d:84:b7:43:82:af:d0:00:f5:07:0a:6d:e3:68:11:
06:33:54:5c:2f:c3:d9:92:4f:d6:10:3b:a5:9d:85:7d:b2:9b:
c0:e7:7b:d0:bc:6d:6a:f1:b9:7c:67:6f:98:48:64:ec:eb:f2:
ed:50:6a:05:33:34:1b:3a:57:0d:12:0e:27:2a:fe:67:5b:b7:
fb:b4:0c:9d:21:57:d5:83:66:7a:7f:28:1f:bc:82:05:a4:45:
c7:a7:38:5a:73:26:ee:02:37:0b:8d:17:55:46:db:e5:5e:e3:
8e:09:3e:32:f7:eb:60:10:ee:b9:03:67:08:1a:36:70:44:98:
b1:8f:89:f2:86:4e:af:b2:f7:5f:f1:c7:2c:56:b9:78:ef:9f:
aa:a9:4c:69:c7:7f:a9:ce:56:7f:54:c5:1b:63:c5:cd:38:a6:
b4:b0:f5:a1:e2:4e:3d:8d:9c:dd:69:b8:8b:50:a9:c0:c9:af:
7d:b4:44:8f:cd:c6:f1:44:e0:ad:c9:e5:98:09:1d:52:35:05:
ad:21:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:20 2024 by rpki-client on console-fra.rpki-client.org