Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/23545ba9d53e48a4d01284ba882b9c48909b14bf.roa
File: 23545ba9d53e48a4d01284ba882b9c48909b14bf.roa (raw, json)
Hash identifier: XQ4O0jkMlIi3QQF/8lkhv7wV5Bh2eNzqoeMaJNl5TMU=
Subject key identifier: E0:D7:1F:4D:EF:94:AE:32:00:7A:8B:85:4C:CD:71:B2:BB:3F:B8:0F
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03EB45
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/23545ba9d53e48a4d01284ba882b9c48909b14bf.roa
Signing time: Tue 11 Jul 2023 17:29:18 +0000
ROA not before: Mon 10 Jul 2023 17:29:17 +0000
ROA not after: Fri 11 Jul 2025 17:29:17 +0000
asID: 7004
IP address blocks: 200.29.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 256837 (0x3eb45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 17:29:17 2023 GMT
Not After : Jul 11 17:29:17 2025 GMT
Subject: CN=23545ba9d53e48a4d01284ba882b9c48909b14bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:64:d4:fb:34:e9:74:94:83:77:a8:03:d9:26:
f1:8a:24:33:79:83:f0:5d:f6:f7:70:9b:81:cc:f7:
ad:63:eb:c7:96:27:53:78:9c:03:f3:77:a0:38:ad:
db:1d:90:63:eb:f6:09:f3:32:97:a9:35:b6:70:48:
c2:1e:5c:a5:5b:40:4f:56:1c:96:bb:62:c1:aa:1c:
6c:05:cf:ef:d5:1d:80:e4:31:75:be:8e:31:37:06:
3a:8e:63:eb:04:06:63:03:6e:6e:90:c9:72:50:cd:
95:8d:ac:75:a4:6e:b5:b2:bb:60:82:ce:5e:65:65:
28:a5:5b:89:73:ef:95:1c:0f:48:59:51:f3:02:4a:
93:c6:e5:9d:46:6d:68:c8:c5:22:d1:9c:f4:f6:0a:
90:01:d0:65:a3:d2:98:cf:5d:1c:2f:92:34:20:5c:
b9:0c:8a:60:3a:d9:63:47:6c:85:52:f0:58:a4:94:
f3:0f:1f:90:fe:ce:e6:17:4c:b0:68:53:22:78:4d:
1a:89:97:3b:da:54:09:cb:60:11:6d:9a:52:54:a0:
da:ee:15:15:72:36:28:a1:58:d0:89:f0:0e:f7:89:
2c:91:62:05:b8:94:fe:7d:46:1e:8d:04:60:42:25:
a3:a2:25:60:64:c0:78:ee:b7:f4:13:3c:23:5f:dc:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D7:1F:4D:EF:94:AE:32:00:7A:8B:85:4C:CD:71:B2:BB:3F:B8:0F
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/23545ba9d53e48a4d01284ba882b9c48909b14bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.29.34.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c6:bb:f4:b5:3c:fa:ab:63:5c:eb:dd:62:ab:2d:60:7e:fc:
b2:fb:04:62:bd:0c:a0:2f:ab:80:73:a5:77:e5:09:5a:b1:05:
34:fc:6e:51:b1:9c:95:ea:ca:bd:dd:71:70:0a:f8:3b:ed:69:
92:3d:07:f2:28:76:59:ae:7f:2e:56:8a:5d:c4:ff:ad:84:91:
ca:1a:45:47:6d:99:e8:74:be:b6:25:22:f4:95:0c:37:5b:0a:
87:cd:4d:c3:35:42:5a:98:93:5f:49:76:11:3f:ad:cc:6b:8b:
ba:c1:19:3c:b3:51:27:49:39:be:32:93:ba:d2:c2:8f:c9:81:
cc:da:e5:9b:6f:b4:21:7c:d7:44:52:76:1e:2a:f0:1f:9e:c4:
75:d2:c1:59:d2:2d:61:8c:a9:f1:51:a0:c1:ea:39:22:78:a4:
c0:5c:99:69:be:af:1e:6b:16:f4:2b:99:d7:48:27:92:28:09:
d0:8e:8c:78:5a:19:08:e3:7c:2a:97:b5:60:0d:f3:04:70:53:
95:a6:18:60:e7:94:24:57:73:dc:4c:24:09:65:0f:fe:d1:10:
56:bb:07:03:a4:cb:dc:94:ee:e0:e7:45:2e:d0:39:3d:f8:c8:
0e:e1:4f:87:55:1d:6c:b1:62:18:3a:3a:02:71:a6:74:32:dc:
ed:8f:b9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org