Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/146cd1793df5b93548d99039aa9579dc287e2984.roa
File: 146cd1793df5b93548d99039aa9579dc287e2984.roa (raw, json)
Hash identifier: vcsrhVGZpsnlRRLBJvOgEqoY9yAqSfeio6KulXKZA0g=
Subject key identifier: 71:25:F0:E8:95:0C:71:4A:36:C7:A7:AB:F5:B1:75:0A:1D:7E:7A:CB
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03FDBB
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/146cd1793df5b93548d99039aa9579dc287e2984.roa
Signing time: Wed 12 Jul 2023 15:00:24 +0000
ROA not before: Tue 11 Jul 2023 15:00:24 +0000
ROA not after: Sat 12 Jul 2025 15:00:24 +0000
asID: 7418
IP address blocks: 200.112.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261563 (0x3fdbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 11 15:00:24 2023 GMT
Not After : Jul 12 15:00:24 2025 GMT
Subject: CN=146cd1793df5b93548d99039aa9579dc287e2984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a8:e6:87:38:56:cc:8e:e2:7f:a6:d7:7b:b8:
6d:df:62:6b:d1:e1:d2:22:06:ce:1b:d2:24:ef:d6:
64:4f:60:9d:4d:ec:8b:01:97:f7:8a:6d:d8:e4:9b:
9a:91:8e:4b:9a:4b:b8:fc:8c:82:5d:e0:e1:6d:e3:
af:57:5b:e8:32:cb:75:9e:fd:bb:ad:f0:ff:d4:03:
96:44:29:91:88:ad:d7:8e:fd:3a:be:32:bb:42:fd:
35:68:89:11:b6:3e:f3:74:9c:f2:29:30:e4:d9:b9:
8f:fb:96:0e:72:d5:d6:97:1c:f5:43:c0:23:d9:76:
3b:fd:28:fc:2b:0e:a0:ce:b3:a2:b8:fb:9a:0c:0f:
4a:3a:46:5b:9b:22:d9:38:f6:c6:df:f3:1d:20:f6:
5a:f3:17:33:ef:6d:ba:ba:86:93:9a:c2:a7:e4:4a:
38:a5:fd:45:72:9c:e1:a1:9f:6f:87:e3:0c:79:7d:
aa:e2:d3:a0:eb:67:8b:d8:fe:95:e3:69:99:3d:76:
e1:c0:26:e5:a5:cd:8d:0d:2c:48:80:94:73:21:1d:
47:a0:69:1a:a8:c5:52:38:67:58:8b:72:37:42:9a:
39:7c:06:df:b9:e0:ef:07:45:9f:fd:37:e6:77:0a:
a4:75:4b:07:f4:1c:37:e3:67:96:2d:9a:4f:2c:95:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:25:F0:E8:95:0C:71:4A:36:C7:A7:AB:F5:B1:75:0A:1D:7E:7A:CB
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/146cd1793df5b93548d99039aa9579dc287e2984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.112.0.0/19
Signature Algorithm: sha256WithRSAEncryption
83:f2:5b:6d:9b:ab:c8:44:f0:e1:2c:a3:af:73:8e:bb:d9:5e:
5c:93:20:ac:d4:7d:86:6d:6e:23:ce:61:f0:3d:ac:a1:b1:dc:
03:7e:42:ab:f7:b5:48:db:af:5c:c4:cb:69:88:d9:e7:c4:0a:
56:bc:f7:fa:04:4a:73:f9:35:38:28:a7:03:07:ec:ee:d0:43:
4c:c4:69:46:4c:f3:3b:aa:bf:3f:e3:8e:88:52:12:5d:ac:00:
85:dc:95:92:23:18:7d:16:3a:84:08:07:ff:84:b1:39:66:ff:
61:d4:e1:d9:55:5a:4e:b5:c7:74:c7:48:f4:ad:30:2d:f6:a1:
a8:fc:81:da:f0:45:0c:d6:ea:ff:76:de:37:ee:5f:80:46:4f:
22:71:17:a6:28:a0:72:16:91:0c:24:da:f8:81:7c:ef:39:80:
f9:cf:b6:56:3e:71:8b:3b:d5:6d:73:13:83:9e:39:68:b7:00:
83:ce:c0:ac:1e:62:21:44:c6:b3:6b:a9:59:9b:36:43:dc:8d:
be:23:af:8b:45:3d:83:0d:50:cf:47:97:68:1c:be:ad:74:3d:
19:62:53:15:49:55:2b:c9:72:3d:5b:ee:26:f4:7b:4e:13:0b:
ea:fd:3c:3d:9a:70:ce:d9:fb:0d:7c:ad:16:77:72:5b:a7:8b:
8b:d9:3c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org