Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/8abfe1f1da71666f0cc2b99287b30cd03482e372.roa
File: 8abfe1f1da71666f0cc2b99287b30cd03482e372.roa (raw, json)
Hash identifier: 4SRI1cqKV3YMpKfboPK/7RCnu0l3WW4UWjXeaBuIgbU=
Subject key identifier: 73:BE:64:ED:57:E8:F1:98:FA:A7:2F:BB:E9:81:BD:AD:8D:16:E8:89
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 0492B1
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/8abfe1f1da71666f0cc2b99287b30cd03482e372.roa
Signing time: Tue 18 Jul 2023 19:41:19 +0000
ROA not before: Mon 17 Jul 2023 19:41:19 +0000
ROA not after: Fri 18 Jul 2025 19:41:19 +0000
asID: 7004
IP address blocks: 200.28.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299697 (0x492b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 17 19:41:19 2023 GMT
Not After : Jul 18 19:41:19 2025 GMT
Subject: CN=8abfe1f1da71666f0cc2b99287b30cd03482e372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:89:0f:48:b7:26:8a:40:89:1c:2c:4f:9b:f9:
f3:e5:75:1d:97:5b:bb:53:d9:30:68:96:97:b4:f4:
95:ff:9c:a5:34:26:f3:40:52:f1:de:11:db:2b:42:
db:bc:2f:a8:dc:3e:fc:ee:8b:2d:ba:1a:39:90:96:
b8:82:8d:52:90:8c:d2:24:fa:ab:8d:4d:a0:df:98:
9e:2b:28:33:3e:e0:f5:7d:c9:7f:72:37:17:91:a1:
b7:63:fe:5e:e4:5e:2a:4a:65:79:c5:9a:fa:94:46:
96:3c:1d:ea:2b:7c:60:78:a2:0d:11:8e:e2:80:59:
48:f9:a6:99:b4:c1:11:a3:a5:4d:fe:54:e2:09:a5:
05:73:67:23:26:6a:e1:4c:d4:32:38:d5:19:f0:e0:
e6:ca:b9:8d:0b:90:cf:90:90:c4:43:ef:51:1b:6a:
e5:68:60:07:e1:86:a7:5b:d6:d5:04:9b:e9:05:ca:
0d:89:da:b3:e3:1d:c5:8f:ee:b8:19:68:09:dd:41:
f4:46:f2:e7:83:2f:47:66:6b:77:53:99:3e:b3:cb:
0b:20:73:8d:bc:d5:94:8a:a3:d5:39:af:5e:55:9f:
12:20:fa:45:1d:2a:74:84:ac:ff:b5:a4:d9:df:27:
82:c2:0d:7d:b9:39:d8:8c:c9:6c:b4:a1:ca:36:30:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BE:64:ED:57:E8:F1:98:FA:A7:2F:BB:E9:81:BD:AD:8D:16:E8:89
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/8abfe1f1da71666f0cc2b99287b30cd03482e372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.28.0.0/20
Signature Algorithm: sha256WithRSAEncryption
25:0a:d5:34:6d:e9:58:c0:b5:06:8c:bb:79:47:e7:7c:a8:bd:
94:44:62:a0:b7:fc:39:f2:e9:71:e5:26:1e:b0:33:e9:02:be:
e7:43:76:51:ca:e9:49:2b:d0:dc:c5:67:42:59:e9:3d:78:d3:
17:b2:7a:88:43:59:43:3e:36:0f:cb:17:26:de:c9:6e:0f:ae:
05:57:6e:cf:d2:35:f2:ad:5b:23:72:1d:f0:ad:df:94:d7:89:
86:b8:8d:6f:e8:44:7e:38:66:76:a9:11:92:33:92:84:fc:02:
70:6e:27:7c:1b:e1:50:5d:cc:be:4f:88:19:20:6e:74:dc:86:
aa:c5:d7:95:43:e4:58:5c:58:8e:13:c8:1e:35:d3:89:77:4e:
e0:57:d8:94:8b:00:38:41:0b:8c:b2:42:d1:96:1c:58:a0:97:
8f:75:2b:92:59:16:67:a6:cf:f9:ff:80:26:e9:9b:28:6f:71:
21:ee:e3:f2:7d:ee:05:7e:f3:64:4a:23:04:9c:57:2e:ac:12:
33:79:66:fb:ed:f9:e4:93:f7:86:a8:06:93:0a:da:c8:15:51:
4c:5c:df:df:f8:35:93:c2:2c:b2:d5:f2:3e:0c:bb:74:5a:c6:
50:d0:94:29:02:42:64:bd:07:31:19:73:2b:a4:60:69:9c:08:
f3:11:ea:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org