Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c345b5d7e41ba13116a6387c881e8622581ed8b1.roa
File: c345b5d7e41ba13116a6387c881e8622581ed8b1.roa (raw, json)
Hash identifier: DyV/B9aYaHpyYHZQ4B9kK6WvwLF+MiN3TBbWbUPVFF0=
Subject key identifier: C9:C8:EE:AC:17:44:5B:7A:29:86:19:30:1C:14:3D:FD:D6:9F:62:49
Certificate issuer: /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial: 216A17
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c345b5d7e41ba13116a6387c881e8622581ed8b1.roa
Signing time: Tue 18 Apr 2023 00:48:29 +0000
ROA not before: Mon 17 Apr 2023 00:48:29 +0000
ROA not after: Fri 18 Apr 2025 00:48:29 +0000
asID: 19114
IP address blocks: 200.24.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2189847 (0x216a17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Validity
Not Before: Apr 17 00:48:29 2023 GMT
Not After : Apr 18 00:48:29 2025 GMT
Subject: CN=c345b5d7e41ba13116a6387c881e8622581ed8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:af:47:b8:bc:6e:fb:f3:69:ab:41:d9:3f:73:
26:36:77:0f:e8:5c:ba:a4:14:8f:c3:e4:9c:69:4e:
fb:32:4b:b6:0d:db:a5:88:14:a5:8a:78:c3:29:04:
4a:94:5f:5e:15:b3:69:64:df:81:a1:82:6a:ae:00:
7b:61:64:b1:e5:a0:46:7c:d2:c2:82:a4:df:36:82:
1a:a3:fd:32:79:0f:79:eb:f4:33:41:87:91:4b:18:
3e:12:eb:8e:ba:89:a3:22:c6:bb:94:99:a6:8c:ac:
b0:f3:6a:c2:67:14:51:4a:74:61:f7:2e:1e:6f:be:
88:12:75:29:22:a5:8f:3b:6e:30:74:ca:91:80:47:
5a:c3:f0:a0:0e:32:6a:9b:7f:65:9c:45:41:84:95:
d0:3d:ff:f9:21:fe:90:56:65:12:7e:2a:86:12:f1:
24:0a:1d:e5:b3:d7:e4:56:ad:59:7d:c9:17:4c:59:
bb:07:a4:2f:0d:b7:c8:4f:2e:b6:00:23:ec:5e:f9:
bb:9c:9c:04:ea:58:1d:5a:51:af:c6:4f:87:06:b5:
1f:2a:c4:ad:da:44:77:78:4a:3f:55:36:86:31:e2:
24:7b:15:24:11:b2:df:5e:9b:fb:59:ea:de:c1:57:
b3:a5:64:39:b6:2c:76:29:96:f4:33:7f:e5:e7:64:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C8:EE:AC:17:44:5B:7A:29:86:19:30:1C:14:3D:FD:D6:9F:62:49
X509v3 Authority Key Identifier:
keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/c345b5d7e41ba13116a6387c881e8622581ed8b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.24.204.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:14:04:e9:a6:fe:a6:9d:74:e5:d7:88:47:b9:ea:d7:df:d9:
a3:21:3f:2a:9f:de:6d:1e:03:e7:f1:a8:d5:6f:be:26:01:38:
b6:50:c1:f0:9f:d2:e8:c4:9b:bc:e1:2b:24:a1:d6:c5:bd:84:
4d:b6:22:9f:cb:4b:a5:eb:ab:97:8e:75:c2:33:13:ac:9b:79:
cf:3d:93:5e:ec:d5:dd:31:c9:86:03:b8:05:37:b6:a1:0b:a5:
10:11:a1:a6:9d:43:89:2e:83:64:c0:60:a4:52:de:b8:f8:62:
73:57:e9:49:74:97:a8:36:4c:f8:b5:37:e1:b8:1f:c5:1b:e0:
7a:60:24:7e:80:25:88:8f:ed:13:38:c4:df:1f:c1:8f:2c:e8:
8f:09:fa:01:68:ad:df:52:bc:8b:b7:65:3e:74:0b:0c:0d:d9:
25:a7:b6:45:e6:db:c1:ef:d9:7b:e4:e0:78:bb:08:78:f9:66:
e5:2d:8c:37:4e:dd:66:ee:83:38:93:a7:45:26:25:4a:0b:1f:
50:7c:7a:4a:38:1c:a4:bd:cf:f0:78:38:bf:05:aa:52:0b:ce:
2d:ee:81:5c:78:a5:33:1e:1b:6c:a7:8d:65:95:83:ff:83:d9:
2c:4d:78:17:b7:e1:29:c9:65:f4:0c:1f:c5:3a:fd:46:86:11:
7b:07:ae:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:12:49 2023 by rpki-client on console-ams.rpki-client.org