Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/d50d38fdc28e1deee02f6d12891d3ce844df9180.roa
File: d50d38fdc28e1deee02f6d12891d3ce844df9180.roa (raw, json)
Hash identifier: skqwLZWtiemetQMP/CQ5Q09wrQaZtq7bnd0akEwO51M=
Subject key identifier: 6B:76:6B:DE:6B:F4:51:11:3C:ED:71:2C:11:62:4E:82:0D:8A:61:68
Certificate issuer: /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial: 03A96C
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/d50d38fdc28e1deee02f6d12891d3ce844df9180.roa
Signing time: Tue 11 Jul 2023 13:11:38 +0000
ROA not before: Mon 10 Jul 2023 13:11:38 +0000
ROA not after: Fri 11 Jul 2025 13:11:38 +0000
asID: 7004
IP address blocks: 200.10.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239980 (0x3a96c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Validity
Not Before: Jul 10 13:11:38 2023 GMT
Not After : Jul 11 13:11:38 2025 GMT
Subject: CN=d50d38fdc28e1deee02f6d12891d3ce844df9180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:98:f4:82:67:9e:fd:1b:92:50:c7:fb:26:
c1:ad:14:2c:f7:4b:1a:81:56:91:74:7d:43:05:66:
31:42:2d:54:9c:21:0e:3a:a1:aa:77:3a:55:bb:5b:
8a:18:5d:74:be:9f:d9:93:56:34:7e:4a:f7:92:0c:
61:00:0f:83:d5:aa:db:7a:9f:1c:7d:11:f6:a3:38:
21:7b:77:cc:b3:89:95:d4:54:a6:88:90:3c:50:ea:
fd:34:94:a5:d0:c3:1b:fe:5a:82:d1:de:c3:4b:06:
4e:f7:c0:e1:b9:c3:cd:c1:60:16:1a:fb:01:e2:76:
71:67:cc:99:8d:79:0f:e1:27:75:43:3f:63:a2:e2:
11:5a:c0:a2:a1:7b:21:ce:70:04:7f:88:82:26:e2:
ad:54:d9:2c:4b:42:4b:fd:3c:13:90:10:4d:2a:60:
9e:e4:45:98:f0:16:a5:03:7c:13:20:dd:65:70:60:
59:a4:eb:f0:74:01:71:32:37:93:d5:a3:bf:7b:9b:
44:93:63:75:9a:27:2b:a7:a4:6b:b4:16:6c:b3:76:
ae:46:c1:4a:b9:70:05:c7:b6:ca:d7:58:14:65:eb:
18:62:d7:51:17:b4:2e:1f:61:0e:e1:7c:ae:eb:31:
7a:61:01:50:a3:f1:73:b9:e1:ef:31:2f:b8:c2:25:
6a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:6B:DE:6B:F4:51:11:3C:ED:71:2C:11:62:4E:82:0D:8A:61:68
X509v3 Authority Key Identifier:
keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/d50d38fdc28e1deee02f6d12891d3ce844df9180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.224.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1d:19:3c:d0:68:22:ed:2b:ff:a0:21:45:43:d9:c9:22:e9:
ea:64:bc:1e:a1:ea:05:ba:67:bc:97:cc:5a:b2:ea:05:cb:86:
db:67:04:23:ae:72:c0:23:b5:6f:b0:35:a8:03:d7:ef:60:a1:
6d:a3:88:c5:40:77:35:ba:ce:ef:70:b1:8e:58:f9:b7:5c:ba:
f5:ef:b9:94:0e:f3:78:ec:36:02:d6:cb:d0:f4:c1:bd:db:1f:
ab:bc:d4:27:08:57:28:fe:a0:fb:db:ba:e4:75:bf:13:62:3e:
80:1d:3e:5d:c0:08:a4:e6:b4:83:31:0e:e5:50:95:2a:81:4e:
04:24:6c:df:fe:21:c2:69:e7:ed:a3:4a:38:69:4b:83:65:4a:
db:da:77:74:64:64:ab:9e:b4:46:3b:d4:eb:96:b3:26:24:43:
9d:37:19:ec:d7:b9:dd:80:14:dc:1d:b6:34:70:ae:63:4a:cc:
aa:b9:f7:ae:00:ca:40:57:6a:6a:72:18:58:e4:42:f8:0c:66:
a0:1a:d6:63:3c:d4:3e:6a:51:bb:ec:60:0e:f0:86:2c:e6:84:
00:27:fb:76:60:13:f1:42:ae:ff:10:bb:16:49:09:40:e1:e8:
ef:e6:67:c7:c1:9b:cf:96:2d:e8:34:c8:77:5d:9b:e1:4f:a3:
a5:5b:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org