Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70a4a9b8-7017-40b6-a22d-a5223c70d930/251e0409857b4a72831849ccd52166497c2a2ca2.roa
File: 251e0409857b4a72831849ccd52166497c2a2ca2.roa (raw, json)
Hash identifier: JJyFg7bjJO//86agO0fs8WXzvMs0Dv8uyXap3Bz72Do=
Subject key identifier: 26:FC:08:12:8B:F8:60:20:FD:D8:70:78:71:39:42:25:F7:27:1C:43
Certificate issuer: /CN=47ebae47f2886f495e15653836c3a5aa754a4331
Certificate serial: 03A2
Authority key identifier: 1C:48:07:14:7B:8F:B2:EF:4E:60:A4:D2:91:FF:CE:3A:D0:0B:3A:06
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47ebae47f2886f495e15653836c3a5aa754a4331.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/70a4a9b8-7017-40b6-a22d-a5223c70d930/251e0409857b4a72831849ccd52166497c2a2ca2.roa
Signing time: Wed 29 Mar 2023 12:46:00 +0000
ROA not before: Tue 28 Mar 2023 12:45:30 +0000
ROA not after: Sat 29 Mar 2025 12:45:30 +0000
asID: 12684
IP address blocks: 200.89.17.0/24 maxlen: 24
200.89.18.0/24 maxlen: 24
200.89.19.0/24 maxlen: 24
200.89.20.0/24 maxlen: 24
200.89.21.0/24 maxlen: 24
200.89.22.0/24 maxlen: 24
200.89.23.0/24 maxlen: 24
200.89.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930 (0x3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ebae47f2886f495e15653836c3a5aa754a4331
Validity
Not Before: Mar 28 12:45:30 2023 GMT
Not After : Mar 29 12:45:30 2025 GMT
Subject: CN=251e0409857b4a72831849ccd52166497c2a2ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:8b:db:88:72:36:13:72:1f:65:58:23:76:
55:9e:c5:a0:a2:c3:13:b2:5d:da:e6:0f:03:f1:08:
77:0b:23:30:3b:94:58:8f:ea:74:24:24:4d:3f:b8:
db:ff:9a:ca:77:0e:fa:0f:c6:76:28:40:a1:3b:cd:
fd:62:f7:ef:26:89:58:ac:4a:1b:c7:a8:56:e2:8a:
20:8d:84:20:35:fe:c3:e9:f2:76:49:00:e8:c5:9f:
b1:1a:ed:9a:74:3b:e9:b5:40:95:10:e8:31:b2:e9:
aa:7f:bb:2b:61:1e:35:ed:05:b4:42:45:6b:3e:8e:
51:c3:8a:55:1e:0a:54:ac:9a:e0:4f:2c:ef:e5:e6:
0d:c3:4e:44:43:9d:57:45:9f:18:77:b7:ca:5b:6e:
47:3c:0a:7b:ed:67:c9:3a:6e:07:5d:45:83:26:d3:
09:e1:c7:cd:bc:d4:10:f3:97:b5:b4:e2:cc:c7:fc:
2c:37:e5:83:6a:2d:3a:b1:65:5a:13:ea:9e:84:cc:
1b:a5:a8:fc:4f:dc:08:3d:57:37:80:18:51:20:f1:
35:90:d4:ae:42:71:0d:cd:0e:dc:80:fc:04:4c:29:
36:eb:a8:04:68:ab:7e:58:96:ca:4a:c7:6c:2d:9a:
27:53:4a:d4:7d:e0:97:83:91:87:b1:9f:c4:e6:60:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FC:08:12:8B:F8:60:20:FD:D8:70:78:71:39:42:25:F7:27:1C:43
X509v3 Authority Key Identifier:
keyid:1C:48:07:14:7B:8F:B2:EF:4E:60:A4:D2:91:FF:CE:3A:D0:0B:3A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47ebae47f2886f495e15653836c3a5aa754a4331.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70a4a9b8-7017-40b6-a22d-a5223c70d930/251e0409857b4a72831849ccd52166497c2a2ca2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/70a4a9b8-7017-40b6-a22d-a5223c70d930/47ebae47f2886f495e15653836c3a5aa754a4331.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.89.17.0-200.89.24.255
Signature Algorithm: sha256WithRSAEncryption
a3:c6:95:f1:80:f3:88:d6:91:76:95:f7:65:ae:18:14:d1:7c:
70:f0:a7:cc:19:43:43:c2:37:fe:bd:01:8b:8f:b5:e1:1a:3c:
28:b5:5f:24:ff:af:23:86:c2:9e:f8:1f:7d:1a:d9:4d:1e:65:
d5:dd:9c:ed:7c:83:98:ec:b3:49:01:83:d4:23:eb:32:07:21:
07:84:04:a3:0a:27:81:3b:22:bb:4d:2d:43:56:86:7f:d1:3c:
92:7c:df:8a:6c:71:9b:df:9a:60:cf:64:3a:4d:38:46:da:0a:
33:98:a8:9d:7b:1c:6e:29:14:2d:95:55:97:5c:86:af:fd:2d:
0c:4f:15:79:92:b3:d1:ee:8c:63:b2:95:72:a2:7c:ff:5f:bf:
ca:65:9e:86:d9:43:0a:fd:17:1d:78:60:18:e4:db:35:92:4f:
64:71:40:62:17:cf:ff:7c:c8:1f:40:0d:6b:50:59:f5:28:aa:
cd:63:b2:a1:e8:a5:2f:63:3d:f0:97:63:ad:e6:bd:24:05:b3:
35:94:1f:70:b7:5e:d4:e6:ad:5b:72:13:7c:f0:ee:bb:93:4e:
36:80:03:23:d1:68:c9:b9:32:f6:af:bf:c9:5c:39:40:ad:fe:
c9:be:95:13:5d:a5:b2:0c:ab:e1:94:48:63:24:2c:7b:8c:41:
58:b2:64:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org