Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/1ef86e8a2086e65915c8dbf56a1665783d689d12.roa
File: 1ef86e8a2086e65915c8dbf56a1665783d689d12.roa (raw, json)
Hash identifier: HyBZxiEnGWKIu//zxdMWIYlmVIlC4OFBqlI3Q1zBA4Y=
Subject key identifier: 62:98:4F:16:AB:44:E5:1A:5D:42:2F:32:D7:01:3E:3F:6B:F6:43:89
Certificate issuer: /CN=5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6
Certificate serial: 1AD658
Authority key identifier: C7:2D:2C:D5:1B:CD:5C:88:93:F0:A0:DD:4C:63:E7:86:FC:CF:41:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/1ef86e8a2086e65915c8dbf56a1665783d689d12.roa
Signing time: Fri 03 Mar 2023 21:04:28 +0000
ROA not before: Tue 01 Feb 2022 03:00:00 +0000
ROA not after: Fri 02 Feb 2024 03:00:00 +0000
asID: 269923
IP address blocks: 200.115.121.0/24 maxlen: 24
200.115.122.0/24 maxlen: 24
200.115.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758808 (0x1ad658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6
Validity
Not Before: Feb 1 03:00:00 2022 GMT
Not After : Feb 2 03:00:00 2024 GMT
Subject: CN=1ef86e8a2086e65915c8dbf56a1665783d689d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:0a:7b:de:31:94:d8:63:65:00:c3:dd:b5:
85:07:04:c1:b6:b4:53:53:4b:4e:8c:b9:b2:8e:fb:
c8:8d:2a:99:48:2f:a9:9e:53:14:75:b2:41:59:d1:
7a:b1:89:68:97:ab:fc:68:de:94:6b:24:a4:48:bc:
16:b3:c8:b9:8f:5b:40:9e:cc:dd:02:05:5b:8f:80:
29:74:32:4a:26:a7:8f:d0:b4:2f:da:2a:73:53:37:
13:a1:91:a4:f4:82:7d:70:89:22:41:7c:23:32:65:
fa:3c:2a:a6:aa:59:1d:72:0e:d1:c4:a7:a0:68:b0:
4e:9f:8a:50:cb:b9:67:d8:bc:25:4f:8b:cc:ce:40:
ee:e1:63:35:91:e6:eb:d6:4a:eb:87:e6:a9:d3:fb:
26:10:8f:9d:74:2a:2a:06:c5:0c:50:f2:e5:b1:d2:
98:92:89:40:da:4b:20:aa:c7:a0:75:08:7a:20:49:
29:d4:f6:77:dc:ab:2e:3e:bd:bf:b9:92:f6:75:bd:
c6:10:bd:18:a1:36:63:3e:1f:1b:30:d8:70:23:83:
7a:c5:69:de:e1:64:02:b3:f7:60:9e:10:86:58:6e:
0a:0a:23:3d:cb:7e:d6:0d:95:92:34:ac:4c:1a:91:
7b:38:40:2b:1d:62:4d:37:27:43:18:bd:fa:1b:52:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:98:4F:16:AB:44:E5:1A:5D:42:2F:32:D7:01:3E:3F:6B:F6:43:89
X509v3 Authority Key Identifier:
keyid:C7:2D:2C:D5:1B:CD:5C:88:93:F0:A0:DD:4C:63:E7:86:FC:CF:41:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/1ef86e8a2086e65915c8dbf56a1665783d689d12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6668eaf4-34a8-4c5e-bf8b-0b762be40e9c/5e1aa7ff64f9b3021bb0e3c60ada25a5aab048d6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.121.0-200.115.123.255
Signature Algorithm: sha256WithRSAEncryption
11:c8:c8:2b:c3:3c:e7:26:12:ff:b7:4c:e9:44:bc:90:99:22:
52:61:3c:7a:40:97:da:8a:14:57:24:fa:76:c7:e9:de:d8:d9:
21:a4:f0:92:27:bb:c4:21:9e:91:4d:cd:ea:3f:63:c4:b8:c5:
2b:a8:5b:c2:5a:8b:a4:bf:15:cc:aa:5d:a8:7b:09:f6:ea:f7:
69:83:8f:65:49:ff:6d:3a:98:c6:6d:f2:fd:6c:8b:4c:46:cf:
69:56:e5:15:9c:68:56:ef:18:62:f1:22:cc:75:59:8f:b6:e2:
2b:e9:8c:ad:e4:73:45:d8:95:53:1b:82:5b:2d:13:ce:45:cf:
af:88:e7:e3:9f:5d:d1:dd:44:93:86:79:af:c5:92:39:1e:c0:
6d:ec:64:11:8e:c4:fb:69:8f:57:ed:c6:44:4b:f6:8a:e6:5b:
89:99:8e:78:04:b9:6b:5a:2f:35:69:b8:1d:90:d4:95:a8:ac:
8c:58:da:03:8a:d7:2c:e7:75:ab:5f:40:ea:fd:48:1b:fb:7b:
9e:5c:20:fc:b2:5b:fc:3b:be:0e:ca:e1:70:17:7f:6b:26:1f:
90:de:62:e1:fa:b8:ff:63:4f:6c:c8:be:31:ad:05:00:76:23:
20:7d:3c:32:e3:66:f9:e2:78:b3:7c:a1:35:4c:0b:10:62:c1:
28:cd:4c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:59 2024 by rpki-client on console-ams.rpki-client.org