Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ca60df94d35c8f454f08a8db214f00584401c561.roa
File: ca60df94d35c8f454f08a8db214f00584401c561.roa (raw, json)
Hash identifier: Nq5qTJITJEzYPw/kxBR33B9/v8hcFpHAQUarA2mHieM=
Subject key identifier: 0A:0A:94:A4:43:31:03:00:71:0C:12:C7:A5:5F:AD:8C:F2:1A:98:CE
Certificate issuer: /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial: 1C7B76
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ca60df94d35c8f454f08a8db214f00584401c561.roa
Signing time: Fri 14 Oct 2022 13:00:46 +0000
ROA not before: Tue 23 Mar 2021 14:40:23 +0000
ROA not after: Tue 24 Mar 2026 14:40:23 +0000
asID: 263792
IP address blocks: 200.7.201.0/24 maxlen: 24
200.7.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1866614 (0x1c7b76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Validity
Not Before: Mar 23 14:40:23 2021 GMT
Not After : Mar 24 14:40:23 2026 GMT
Subject: CN=ca60df94d35c8f454f08a8db214f00584401c561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:91:01:ed:9f:11:57:72:b5:bb:b4:08:27:
94:7b:c8:aa:04:2c:5a:25:b7:0a:ae:fe:48:ed:40:
c1:e1:75:21:7c:c1:db:e1:b4:ae:b3:0d:e2:81:ae:
fe:c7:9c:f4:e3:61:d2:a0:d6:29:aa:62:93:05:1e:
e6:f3:ca:13:5d:ff:c5:8f:d9:b4:15:c7:75:bc:4b:
73:8f:64:62:bf:a6:38:f1:56:10:0d:ff:dd:6f:f5:
82:78:03:ff:de:b6:eb:12:62:29:af:d1:d6:53:c3:
ec:c2:0f:54:9a:f7:8a:72:12:31:55:d2:36:8e:a4:
23:02:5a:54:1a:10:64:4e:3f:cc:db:b5:36:0c:82:
03:c8:47:ac:ea:0f:b4:f7:dc:a0:fa:30:2c:b4:63:
37:3b:11:ff:f4:5c:b2:f4:19:df:7d:7f:67:27:8a:
fe:04:f9:54:18:0b:0a:81:1f:dc:66:11:29:e4:41:
e3:f2:85:d3:15:3b:95:0e:24:d3:49:64:d2:37:f7:
89:c3:3a:5c:80:94:e0:57:06:92:61:08:71:5f:b3:
7e:04:44:81:40:d1:6e:e5:c7:a0:02:c9:b6:6e:e2:
e0:5f:e2:3d:31:1d:83:9f:24:8e:d0:b6:ed:c1:28:
e9:c4:ed:09:62:7b:7a:56:18:4e:ea:24:43:e9:12:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0A:94:A4:43:31:03:00:71:0C:12:C7:A5:5F:AD:8C:F2:1A:98:CE
X509v3 Authority Key Identifier:
keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ca60df94d35c8f454f08a8db214f00584401c561.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.201.0-200.7.202.255
Signature Algorithm: sha256WithRSAEncryption
58:9e:9a:a8:c6:d3:37:a5:02:8c:0f:49:d2:a8:ef:42:8a:12:
db:0c:41:bb:7b:fa:88:ed:33:fc:61:2d:50:07:9c:90:42:58:
da:7b:d3:27:d4:c7:d6:3a:3b:a0:9c:ad:60:16:ba:75:00:41:
81:21:fb:26:36:62:71:8f:bc:41:61:59:f4:ff:ce:90:a4:c0:
5a:15:e1:6e:f0:ee:87:f3:58:44:ce:5b:b8:95:4c:8e:b5:3a:
41:4b:49:4b:cd:30:87:f3:c9:ea:5d:d8:cd:48:e1:1a:4c:aa:
a2:84:a8:4c:72:5f:69:c1:9e:a4:ce:01:bc:8d:9d:a9:2e:56:
ea:75:d3:c4:d3:b4:c9:fb:4b:7b:8f:00:2f:af:f3:cf:04:67:
a8:39:fa:35:c8:04:1d:c6:c1:0b:58:c8:51:cf:90:cc:2b:27:
84:c3:43:65:71:fe:74:f3:9d:1c:b3:d4:8c:82:f8:b2:b8:ea:
48:4e:9d:05:7d:8d:91:c1:70:1a:a9:65:38:e7:b8:9b:e0:16:
c9:35:52:de:b7:fa:7c:e4:79:08:e4:7a:3d:62:71:3f:b7:07:
87:60:d2:2f:f5:94:b2:0f:42:f5:99:a8:6e:68:98:f6:bc:2e:
01:74:00:2b:8c:b9:b9:bc:52:4d:0d:8a:c5:8b:22:f3:9d:92:
2a:bf:fc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 17:12:49 2023 by rpki-client on console-ams.rpki-client.org