Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/e42f1ed275d95c5bffbfe0b048c103d523299faa.roa
File: e42f1ed275d95c5bffbfe0b048c103d523299faa.roa (raw, json)
Hash identifier: 9sQDDOpyzi58AzbO81vIbZ9E1RUu3p+JJ6t0l6y5u08=
Subject key identifier: CB:21:6F:CB:23:11:C6:70:6B:5A:D1:57:0E:95:B8:FB:53:92:CC:AF
Certificate issuer: /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial: 24D97F
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/e42f1ed275d95c5bffbfe0b048c103d523299faa.roa
Signing time: Mon 30 Oct 2023 12:07:14 +0000
ROA not before: Mon 30 Oct 2023 12:06:35 +0000
ROA not after: Thu 30 Oct 2025 12:06:35 +0000
asID: 11058
IP address blocks: 200.0.17.0/24 maxlen: 24
2001:13c7:6001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414975 (0x24d97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Validity
Not Before: Oct 30 12:06:35 2023 GMT
Not After : Oct 30 12:06:35 2025 GMT
Subject: CN=e42f1ed275d95c5bffbfe0b048c103d523299faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:dd:71:8b:04:85:90:41:2d:d4:10:47:9f:
de:5e:66:e2:7c:d5:a8:0e:4e:61:3a:b1:f9:bb:14:
76:dc:1b:90:1a:2c:3d:87:af:75:d9:bc:2a:c0:db:
53:62:ac:fb:13:90:b1:50:89:f8:2f:2d:50:e1:43:
28:fa:32:16:ba:45:47:cf:8a:e8:c4:78:19:e7:7a:
fb:d6:64:3f:a3:47:f9:bb:f7:16:45:ba:0c:80:1b:
3f:e7:7f:cb:17:9d:c4:06:3f:64:64:d6:28:da:01:
ea:0e:19:ca:dd:39:b3:a4:7b:cd:cb:d7:b2:66:2e:
25:c4:9a:f1:98:63:34:a3:be:bb:b6:d1:f7:ae:94:
36:c2:46:78:1c:9d:91:0e:34:77:7b:9c:7e:53:19:
fe:82:63:37:22:fd:be:d2:22:b9:64:99:31:80:54:
3e:c3:64:9a:52:d6:2c:ed:e2:75:17:88:84:96:6f:
6c:87:bb:28:39:bd:34:fb:7d:32:6d:d3:be:90:0a:
56:20:a1:f3:f2:41:54:87:66:f9:84:99:9e:09:d5:
5d:18:79:eb:24:1a:51:c3:9f:e4:f7:bf:b9:14:68:
fe:ed:24:dd:cf:d3:6c:dd:6b:15:91:67:00:22:08:
18:b1:f2:7f:21:c3:09:c6:38:cc:fa:7a:c2:be:c6:
11:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:21:6F:CB:23:11:C6:70:6B:5A:D1:57:0E:95:B8:FB:53:92:CC:AF
X509v3 Authority Key Identifier:
keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/e42f1ed275d95c5bffbfe0b048c103d523299faa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.17.0/24
IPv6:
2001:13c7:6001::/48
Signature Algorithm: sha256WithRSAEncryption
75:06:ea:4e:3b:c2:ef:7a:d2:b8:87:56:55:6a:87:d8:99:04:
db:f8:9b:c8:6e:3a:aa:9b:e3:df:48:c7:b5:15:e2:45:2d:ba:
ec:78:c6:11:80:e7:1a:5b:04:5a:b4:df:c3:d4:4b:9e:e3:bb:
a9:62:96:54:8d:e1:bc:f7:bf:ad:5f:aa:98:6d:a3:9b:16:f5:
b9:d4:62:79:4f:ba:2d:a0:3b:9b:22:5e:6a:5c:e5:c6:fc:0b:
7b:a8:a4:08:bb:64:05:7a:44:07:b6:42:0b:98:78:3f:da:01:
7d:03:02:79:6c:44:99:8e:3b:4e:e1:78:0c:ca:33:d0:70:6c:
8d:25:f5:43:9b:34:0d:f5:9c:ab:6e:3f:ca:2e:2d:7d:e4:51:
36:72:5b:5f:63:76:4a:c4:f4:98:35:22:fe:89:e9:8a:5e:af:
20:df:28:59:8f:2e:70:77:b6:31:a0:7b:48:eb:a7:4d:c5:da:
f7:3e:ee:6e:0b:f8:fa:87:4e:23:08:39:d1:8e:f4:80:a4:5f:
a3:08:e5:8d:c7:61:91:37:27:40:ef:5c:22:8e:cb:2a:ad:25:
af:46:45:a3:d2:ad:f7:b5:74:2c:8e:31:bb:10:df:76:ee:07:
0d:a4:37:69:79:2f:0c:13:07:1e:ef:90:53:40:97:89:00:25:
68:8e:c3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:46 2024 by rpki-client on console-fra.rpki-client.org