Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/474073560c9725aa2c885964df695a5ea4b96fce.roa
File: 474073560c9725aa2c885964df695a5ea4b96fce.roa (raw, json)
Hash identifier: sumdioFbnAt4UY24jVGbfnEQATQFCBks6kneEKLTaq4=
Subject key identifier: 2A:8B:B8:A0:05:4C:21:76:45:29:48:A3:A0:AD:4E:CF:87:40:A5:6F
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 040352
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/474073560c9725aa2c885964df695a5ea4b96fce.roa
Signing time: Wed 12 Jul 2023 15:01:14 +0000
ROA not before: Tue 11 Jul 2023 15:01:14 +0000
ROA not after: Sat 12 Jul 2025 15:01:14 +0000
asID: 7418
IP address blocks: 200.112.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262994 (0x40352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 11 15:01:14 2023 GMT
Not After : Jul 12 15:01:14 2025 GMT
Subject: CN=474073560c9725aa2c885964df695a5ea4b96fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:24:f1:32:02:01:0d:19:be:e1:2b:58:de:
03:1e:d2:3c:93:17:2e:ff:a7:15:34:8a:84:af:37:
1b:bf:6a:85:64:0f:63:b4:b1:3f:10:f9:50:7e:54:
b6:58:ba:91:a8:0a:ec:f7:83:09:d6:96:5f:76:e8:
f5:3f:59:8f:9a:f8:e0:d5:ae:a6:4f:c2:54:42:f1:
47:66:f7:18:ac:77:6b:54:8c:50:15:78:e0:ce:38:
ea:b7:f6:6a:16:b4:04:e4:71:d2:89:cc:1e:48:20:
f0:77:b1:3b:cb:8c:9e:6d:b2:e9:64:04:69:17:fb:
1c:f1:32:4c:ad:f5:55:4a:4c:55:be:1c:00:87:85:
11:ff:fd:37:de:dc:10:39:c8:b1:47:a9:89:e8:0f:
50:56:e5:cc:dd:ec:35:da:e4:03:70:ac:29:16:f0:
6f:2f:93:90:6c:3f:31:b9:ec:5c:4e:02:9f:d2:2e:
47:8a:26:21:4b:91:17:94:18:49:df:d5:4c:7f:de:
e8:f3:80:18:17:31:27:18:18:55:c2:fb:f4:46:7c:
32:92:9b:aa:03:b8:7e:78:ae:e7:75:4e:6e:d4:43:
ce:0a:e9:af:22:cc:23:83:3a:79:de:dd:c8:f4:10:
e1:4a:5d:0b:8a:90:0a:ff:ce:f4:cf:a7:2a:8e:43:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8B:B8:A0:05:4C:21:76:45:29:48:A3:A0:AD:4E:CF:87:40:A5:6F
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/474073560c9725aa2c885964df695a5ea4b96fce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.112.32.0/19
Signature Algorithm: sha256WithRSAEncryption
16:9c:c3:a7:1a:2d:ca:2a:b0:f3:fb:42:c4:b2:5d:ab:8e:82:
85:82:f7:7f:3b:e7:db:a9:73:2e:a8:88:3c:31:8a:75:91:f9:
6d:fa:a0:35:14:91:dd:14:35:59:44:56:01:2f:48:7f:93:c7:
b2:9f:d5:62:21:c7:a7:60:e8:f5:e1:d3:2b:8f:07:87:39:0e:
35:0b:4d:85:a9:88:cb:1d:89:f3:c8:31:6e:cf:e7:0d:8a:d0:
12:45:a9:7a:da:4d:cb:dc:86:14:3d:fe:07:30:fd:6d:ab:28:
2c:66:08:b7:a2:1b:19:83:4c:b4:47:a1:34:81:30:8b:dd:94:
97:83:04:0e:75:f5:59:db:0d:bb:ce:62:37:f9:fb:c2:7c:de:
48:ad:fe:bf:0e:95:a2:e5:54:72:e5:dd:47:1b:c6:97:70:6b:
b9:75:b4:c6:5b:be:d9:95:57:31:f5:b7:a0:86:3e:3a:3c:1a:
3f:1f:8c:72:f7:b2:2d:f6:9d:d7:f4:25:1c:0c:c3:50:de:9b:
9f:89:f4:58:51:12:af:af:49:ed:ff:0e:5c:be:7f:0a:37:3d:
79:ec:b7:4f:6f:b5:b5:79:52:f3:7b:62:e1:ec:75:b6:4d:d0:
3b:09:0a:10:2f:60:90:8d:d9:14:2e:a5:e8:14:82:7b:3b:c5:
55:d4:53:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org