Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/af19846d99e54414d5cb6eb4655673ab5553efd8.roa
File: af19846d99e54414d5cb6eb4655673ab5553efd8.roa (raw, json)
Hash identifier: +/PIB0GGLdQbadLDDmBdXg2A1cAuqun9oB1DTkAEIjw=
Subject key identifier: 29:77:32:34:E1:A1:DD:7B:2D:36:A9:9C:1C:AA:A5:7A:37:D4:E3:94
Certificate issuer: /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial: 0DB58B
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/af19846d99e54414d5cb6eb4655673ab5553efd8.roa
Signing time: Wed 24 Mar 2021 14:40:24 +0000
ROA not before: Wed 24 Mar 2021 14:40:23 +0000
ROA not after: Tue 24 Mar 2026 14:40:23 +0000
asID: 27947
IP address blocks: 200.7.211.0/24 maxlen: 24
200.7.212.0/24 maxlen: 24
200.7.209.0/24 maxlen: 24
200.7.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898443 (0xdb58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Validity
Not Before: Mar 24 14:40:23 2021 GMT
Not After : Mar 24 14:40:23 2026 GMT
Subject: CN=af19846d99e54414d5cb6eb4655673ab5553efd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:71:7a:d0:21:53:02:4c:06:8f:53:d4:9e:88:
2a:b6:2a:52:98:c5:a8:39:4a:9a:9c:44:a4:21:08:
30:4f:d4:b8:88:58:d3:8a:f9:35:74:19:ad:d0:42:
fc:6d:ff:b1:f7:54:3d:73:fb:8e:51:31:c3:c6:49:
5a:59:9f:8c:d2:08:ed:42:0f:51:e8:07:ae:1a:cf:
f3:dd:0a:25:d4:99:03:e0:9c:33:6c:29:70:27:a3:
6f:73:cf:77:5d:c9:9d:3b:63:5b:35:3d:ca:0c:a8:
99:4a:f5:9d:22:18:f4:8b:f4:1c:32:a0:8b:33:3b:
23:0a:40:71:6e:e1:54:9b:58:43:2d:17:5b:87:3b:
9a:2d:32:29:7c:21:6d:e0:ef:2e:56:9b:b0:17:b3:
37:08:c0:32:b5:36:e2:5c:f3:b6:46:87:7a:47:d1:
26:37:73:f9:91:fe:75:dc:56:b3:4c:f4:1f:db:d7:
95:43:33:4c:cd:e2:f6:01:c3:f6:32:42:9a:5d:d2:
1b:66:da:25:01:be:78:41:e2:0f:f1:79:4e:a1:a3:
39:28:c9:7c:d3:96:d5:2c:e9:ca:97:1e:44:f1:f7:
87:33:44:c2:24:02:70:b2:8f:a5:b1:a7:c1:6a:42:
fe:d5:83:ba:9e:f0:71:0a:73:e4:d8:7d:62:3d:9e:
26:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:77:32:34:E1:A1:DD:7B:2D:36:A9:9C:1C:AA:A5:7A:37:D4:E3:94
X509v3 Authority Key Identifier:
keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/af19846d99e54414d5cb6eb4655673ab5553efd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.209.0/24
200.7.211.0-200.7.212.255
200.7.221.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e2:ba:64:be:2a:e0:a7:61:87:c3:72:8f:13:c9:1e:ea:ad:
1b:d8:38:87:14:34:2a:f6:07:cc:61:26:0e:64:bf:3f:99:3d:
07:c3:66:05:89:4d:d1:4a:21:73:4f:96:d0:e4:62:0c:91:81:
4a:d9:65:f2:9c:df:d4:e3:e6:f9:71:06:fd:38:63:21:c2:df:
3e:32:86:63:bf:0f:69:f8:43:ca:1a:94:fe:3b:20:61:c1:8a:
51:7c:02:f2:2a:03:aa:41:fc:4e:d2:f0:6f:d1:0b:ed:3b:f1:
c9:2f:64:3e:bf:54:1c:e8:27:07:4a:57:dc:d4:48:9b:dc:f6:
b7:23:a9:2b:ae:cc:72:0f:e8:d5:ae:03:5f:58:4d:78:38:d3:
91:c7:8e:ca:25:77:82:1e:20:4e:42:f0:3e:36:c4:52:ee:04:
4f:2d:a8:0a:d2:a2:1c:40:d7:45:44:74:e6:6b:33:64:6e:97:
ae:3b:9b:d5:79:e1:77:f8:89:65:24:42:7c:07:47:e4:2b:c9:
d4:7b:36:df:a6:c3:f0:2f:ba:0a:5e:9e:84:09:93:35:7a:76:
78:ea:10:da:67:48:b6:22:6e:14:03:c5:be:bd:8e:af:d5:20:
3b:9d:a8:c5:0f:99:af:f2:35:37:b7:c4:f7:0b:e0:2a:74:a4:
7e:8d:1c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org