Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/bd406781ebb8b622342e065333d8a6a8546cde22.roa
File: bd406781ebb8b622342e065333d8a6a8546cde22.roa (raw, json)
Hash identifier: vWA4Yd4N8F3ln8MD9/EkZvy8qKsEzAZ4BReFVkP0cGo=
Subject key identifier: 2B:63:5D:57:BC:67:02:B0:B6:C2:41:20:72:B4:07:D7:A0:2B:FE:40
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 0CF00B
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/bd406781ebb8b622342e065333d8a6a8546cde22.roa
Signing time: Wed 24 Mar 2021 14:29:19 +0000
ROA not before: Wed 24 Mar 2021 14:29:18 +0000
ROA not after: Tue 24 Mar 2026 14:29:18 +0000
asID: 11058
IP address blocks: 200.0.17.0/24 maxlen: 24
2001:13c7:6001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847883 (0xcf00b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Mar 24 14:29:18 2021 GMT
Not After : Mar 24 14:29:18 2026 GMT
Subject: CN=bd406781ebb8b622342e065333d8a6a8546cde22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:69:91:90:fb:e0:b9:96:08:61:14:aa:07:06:
9d:9f:bd:a2:e7:aa:07:56:09:b4:1c:20:be:84:96:
01:ba:99:3e:a8:d3:a1:59:e5:9f:df:fa:47:ec:de:
de:4d:1d:06:aa:23:53:b0:c1:41:94:0f:c7:cb:d3:
8b:37:5d:6a:60:55:12:46:52:60:d4:ef:3e:7c:aa:
57:2c:4e:ef:a5:1f:10:05:c5:b7:4b:de:bb:70:9c:
63:a4:a3:09:68:47:3a:c4:96:1b:43:97:a2:67:c8:
d4:2a:6b:cf:35:84:e4:92:7a:0d:0b:47:a9:02:96:
62:55:39:10:89:e5:10:4e:d4:a0:9f:e6:b4:6f:20:
fc:38:f1:7f:2c:bb:3d:bb:28:0c:d3:ab:a1:0b:b4:
d6:41:df:06:db:40:af:b3:96:8a:d8:d2:6e:7f:c0:
bc:bc:9b:81:4e:f2:f6:0f:41:3e:43:0d:f1:f0:af:
eb:5f:1f:5b:a2:c3:cf:36:b1:94:bc:9c:30:20:9d:
05:58:58:02:2a:52:18:a6:73:23:bd:1b:3a:0c:78:
fb:83:e2:4f:3b:58:a7:0e:c8:1f:39:c2:15:06:95:
0c:f7:db:49:e2:02:8f:64:e0:40:00:dd:bd:fb:9a:
22:02:21:80:84:20:9d:aa:55:ba:a2:e3:16:59:81:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:63:5D:57:BC:67:02:B0:B6:C2:41:20:72:B4:07:D7:A0:2B:FE:40
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/bd406781ebb8b622342e065333d8a6a8546cde22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.17.0/24
IPv6:
2001:13c7:6001::/48
Signature Algorithm: sha256WithRSAEncryption
31:5b:23:2b:d1:22:56:9b:d7:ff:7f:81:8b:e7:b7:c3:60:17:
ed:07:88:22:ea:5d:19:b1:4b:4d:11:89:ae:ca:e2:ca:ba:25:
07:d8:3f:eb:26:7e:ec:98:2d:09:e3:8e:8d:d0:7a:29:3c:03:
9a:b0:3c:c1:15:4f:ec:59:de:2e:7b:0c:e2:3a:3f:b5:00:91:
96:a5:35:00:1b:b7:e4:58:f9:ed:6d:9d:69:5a:df:5e:81:f7:
fe:46:88:7f:e7:13:03:02:5c:11:36:75:aa:5a:38:91:fe:fe:
2f:2c:a7:8d:87:39:6d:11:99:f9:76:e2:b0:72:ed:6b:c4:5f:
9b:16:c2:4c:a2:fe:3c:7e:b6:de:1a:86:53:8a:8c:55:49:1e:
ee:26:dc:2e:4b:53:da:54:ad:ee:b1:63:ff:92:34:e1:ab:ef:
22:cb:62:be:a3:2f:67:71:da:fd:bd:08:0c:b0:34:a5:82:80:
2a:45:ff:51:c7:20:05:74:29:3b:2d:f2:a9:45:14:c7:fe:9c:
ba:d1:45:a1:2a:32:94:ba:8b:9d:98:95:83:23:c8:dd:62:e0:
b6:1e:5a:3e:55:6f:76:24:34:74:1d:65:6c:e4:2c:29:29:5c:
c6:a1:17:b6:1b:99:d0:59:62:a3:5f:3e:be:24:5d:f3:c7:8e:
c0:e0:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:49 2024 by rpki-client on console-ams.rpki-client.org