Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/724429922166afe1b58ae3601be7e42b8d2d127b.roa
File: 724429922166afe1b58ae3601be7e42b8d2d127b.roa (raw, json)
Hash identifier: WYL9G4Ycb+VlFtmDF53mOA4RwgFEdizsgu/U30MwR+I=
Subject key identifier: 8A:FA:2D:52:D3:8E:BC:32:3D:F3:5A:6A:9D:BB:04:B3:FF:D2:38:3E
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 048D14
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/724429922166afe1b58ae3601be7e42b8d2d127b.roa
Signing time: Tue 18 Jul 2023 19:12:22 +0000
ROA not before: Mon 17 Jul 2023 19:12:22 +0000
ROA not after: Fri 18 Jul 2025 19:12:22 +0000
asID: 16629
IP address blocks: 200.10.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 298260 (0x48d14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 17 19:12:22 2023 GMT
Not After : Jul 18 19:12:22 2025 GMT
Subject: CN=724429922166afe1b58ae3601be7e42b8d2d127b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c1:e4:3a:f1:b7:5a:c3:d4:8b:54:46:ca:fa:
5a:de:7e:e5:98:ce:f0:b4:a3:64:ea:b2:ea:b6:7a:
8d:54:67:88:a5:eb:e1:5d:e2:20:e0:85:28:a9:cc:
07:96:ae:13:02:92:c7:94:7a:d8:b2:ce:a6:f8:85:
8e:4a:1a:f7:45:3c:6b:ab:bf:1b:0f:46:ee:b9:05:
f8:56:6a:ed:c4:ca:a7:e4:d6:45:46:8a:9f:7d:ba:
34:fd:23:c0:da:64:80:7c:8d:b0:9c:bd:d8:13:19:
c4:d8:f1:24:6c:73:d8:c4:c9:a6:e6:e3:48:f4:85:
9b:6f:ae:19:1f:81:bc:d9:7c:bb:d0:b4:77:6b:ec:
29:70:0c:f3:16:37:54:5f:a5:eb:4a:fe:65:2c:1a:
c2:c5:40:55:d5:fb:02:8c:2e:51:0e:c3:74:86:fc:
00:ef:cc:33:c0:7d:83:5e:55:8f:33:17:5c:e4:eb:
3a:85:6e:ce:3d:c8:cc:a0:35:01:bb:ef:8b:a2:a5:
99:06:95:c0:52:ec:e3:a0:d5:e3:68:af:df:3e:91:
ab:d2:36:2b:c4:40:69:c9:0c:6b:f7:21:51:c8:ff:
1c:50:26:10:a6:48:f8:4c:48:ed:3e:8b:6c:ae:5e:
a9:59:bf:77:8e:ef:92:c7:02:f0:b9:16:17:dd:f0:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FA:2D:52:D3:8E:BC:32:3D:F3:5A:6A:9D:BB:04:B3:FF:D2:38:3E
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/724429922166afe1b58ae3601be7e42b8d2d127b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.226.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a0:50:d9:47:be:71:9b:73:4e:b5:e2:02:1a:d6:79:fc:ee:
3d:cc:3b:87:a2:27:27:32:0f:61:66:7b:b9:5d:fb:2c:d9:68:
dd:b0:be:82:b7:51:15:78:5d:b9:39:bf:a9:f4:81:ba:6a:0d:
d3:5e:15:89:72:49:4d:f9:26:c4:a4:d9:63:ca:87:86:71:27:
4b:2b:17:f7:2b:8e:c6:79:02:49:f1:38:e2:43:ac:1a:12:55:
11:61:b8:24:70:a4:26:77:51:ce:8a:8e:11:2a:61:73:7a:d8:
25:71:b1:28:3f:8e:bf:17:e6:21:a9:0f:d4:44:46:37:88:ac:
45:c1:45:ed:83:d4:63:57:3d:da:51:2c:7c:84:32:a0:1c:e2:
a4:af:17:b6:03:5f:17:47:db:e5:f7:79:dd:ec:a1:62:01:03:
96:1e:c1:eb:84:a8:4f:3d:81:9d:7d:2c:22:52:46:70:e2:2e:
20:ed:86:58:c4:ee:e5:02:4e:a5:9f:02:c5:e7:a4:e0:0c:72:
d5:a6:e1:df:de:86:10:e2:46:00:2d:13:da:7b:23:3a:f6:ce:
ab:7f:57:ac:73:9a:d8:81:02:0c:06:22:dc:43:72:77:b5:72:
a2:89:65:a4:d2:6f:40:9d:40:9e:b5:c6:ca:e0:6b:0a:98:43:
10:dc:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org