Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6349d436-8332-4d4a-8c2f-083a6a8e7437/09b8f69b0c81e47814d980a166a044bba2d4af23.roa
File: 09b8f69b0c81e47814d980a166a044bba2d4af23.roa (raw, json)
Hash identifier: ckiz9M3gVeBHJoa7QY6N2yiPtzH1/K11JFE3ZECs5R8=
Subject key identifier: 58:D7:C5:EA:4F:5E:BC:5D:C2:89:69:B7:83:2B:E8:91:53:71:44:61
Certificate issuer: /CN=d56b861287ddd751d1b0d7fc292f051d35dc78e0
Certificate serial: 03EBE6
Authority key identifier: 3C:ED:4E:51:F8:48:F3:B7:39:7C:6D:30:54:8F:6A:0B:00:5B:A9:04
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d56b861287ddd751d1b0d7fc292f051d35dc78e0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6349d436-8332-4d4a-8c2f-083a6a8e7437/09b8f69b0c81e47814d980a166a044bba2d4af23.roa
Signing time: Wed 08 Nov 2023 12:55:21 +0000
ROA not before: Wed 08 Nov 2023 12:55:21 +0000
ROA not after: Sat 08 Nov 2025 12:55:21 +0000
asID: 15208
IP address blocks: 200.10.251.0/24 maxlen: 24
200.10.252.0/24 maxlen: 24
200.10.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256998 (0x3ebe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56b861287ddd751d1b0d7fc292f051d35dc78e0
Validity
Not Before: Nov 8 12:55:21 2023 GMT
Not After : Nov 8 12:55:21 2025 GMT
Subject: CN=09b8f69b0c81e47814d980a166a044bba2d4af23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:55:f8:6a:9a:56:1e:1f:2c:5f:80:62:f5:35:
00:06:1a:ca:4a:3e:8c:ed:7f:9d:cb:bb:d3:88:ce:
90:5e:db:b4:de:e5:cd:58:d1:9d:ca:79:59:81:b0:
be:05:9c:00:68:4b:0c:c6:28:08:24:14:8b:8e:a3:
5f:a1:67:12:23:cb:1b:dc:f1:38:a5:10:54:e6:0a:
8b:e1:44:36:8a:92:40:53:16:36:c3:8a:a7:d6:1f:
cf:9e:e4:67:95:3a:70:b5:6d:df:0a:19:1a:60:1f:
48:aa:7c:40:7b:30:ac:c6:08:50:a4:29:9f:75:05:
53:6b:47:09:1c:8e:51:9f:3d:d6:46:36:e8:a6:2c:
a8:94:67:79:bd:68:08:b2:9c:40:6e:d5:d5:d4:b0:
e7:91:35:eb:6e:0d:2e:8a:40:a7:2a:41:74:04:0f:
29:7c:09:ab:33:b7:d8:ef:47:2f:7a:49:c0:c6:a2:
28:bf:af:4c:70:2d:42:87:e5:ac:8f:8e:c7:ed:fb:
a3:4c:39:1e:4a:2d:8e:63:ac:b8:dd:2d:ca:04:ab:
06:3d:3b:1f:77:2c:cd:6a:8c:1d:74:59:83:f0:f3:
87:41:46:c5:f4:13:00:87:ec:15:ef:83:12:f9:8a:
9c:98:44:d8:21:08:59:cc:81:9f:94:a8:4f:ef:9b:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D7:C5:EA:4F:5E:BC:5D:C2:89:69:B7:83:2B:E8:91:53:71:44:61
X509v3 Authority Key Identifier:
keyid:3C:ED:4E:51:F8:48:F3:B7:39:7C:6D:30:54:8F:6A:0B:00:5B:A9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d56b861287ddd751d1b0d7fc292f051d35dc78e0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6349d436-8332-4d4a-8c2f-083a6a8e7437/09b8f69b0c81e47814d980a166a044bba2d4af23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6349d436-8332-4d4a-8c2f-083a6a8e7437/d56b861287ddd751d1b0d7fc292f051d35dc78e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.251.0-200.10.253.255
Signature Algorithm: sha256WithRSAEncryption
51:33:46:8e:25:1a:ea:d5:33:cb:b0:89:29:3c:e7:74:0c:4c:
57:a5:ea:89:b3:cf:64:bd:59:0c:25:a5:47:01:3e:28:82:74:
d1:65:49:fb:43:8d:7b:e7:34:f9:8c:19:fd:45:4a:f9:ed:95:
b9:29:1f:14:fa:08:85:1f:b3:1c:95:a3:d5:c1:da:4a:8b:e3:
04:e0:b2:9b:5f:0d:6b:4d:6e:b0:e0:34:3c:78:0f:48:eb:5f:
07:bc:30:33:54:98:5e:23:d3:31:7f:99:06:27:8e:d3:2c:38:
8a:bd:ca:0b:c7:8b:43:4b:7a:52:da:9e:d8:b6:95:75:0c:61:
8b:72:72:ee:f0:2c:83:b4:f8:a1:63:5b:6b:eb:b9:f6:3f:a6:
2c:c5:0a:ca:50:8d:df:99:5c:3b:51:8f:07:55:18:ee:db:d2:
91:c0:a7:f0:44:c3:5a:6d:bd:75:fa:88:44:82:23:44:d9:e2:
2d:0b:be:8e:53:27:28:b7:ae:b4:d8:b6:de:33:2d:79:5d:9e:
05:66:b6:1a:7e:02:85:0c:56:d2:68:7b:6e:50:e4:19:68:8b:
77:33:16:99:d8:85:0c:c6:dc:45:87:dc:4e:23:81:9b:00:48:
9f:49:54:11:44:92:88:34:7a:f5:c8:67:07:ed:eb:f9:0f:20:
3e:52:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org