Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/429a2cb14686f0439b0d07f4809f611ce62cadfc.roa
File: 429a2cb14686f0439b0d07f4809f611ce62cadfc.roa (raw, json)
Hash identifier: v1Gk/gYb1HpRKT2TfTesrzQBgI8GIDYtpTuMyPQYj7w=
Subject key identifier: 99:97:FB:D5:02:BF:FB:96:6C:E1:AD:04:66:03:7B:31:76:39:C6:ED
Certificate issuer: /CN=d46ebd602e50b2947122f994202d0ade1474b0a2
Certificate serial: 10C036
Authority key identifier: 20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46ebd602e50b2947122f994202d0ade1474b0a2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/429a2cb14686f0439b0d07f4809f611ce62cadfc.roa
Signing time: Tue 12 Apr 2022 15:34:21 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 270018
IP address blocks: 200.23.75.0/24 maxlen: 24
2801:1da::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1097782 (0x10c036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46ebd602e50b2947122f994202d0ade1474b0a2
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=429a2cb14686f0439b0d07f4809f611ce62cadfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:96:22:79:7e:29:9d:93:b2:cb:cd:11:48:
72:0e:39:45:ef:e3:e2:77:0d:b4:f7:0b:d0:cc:3e:
0c:42:c7:28:f2:e7:9f:d8:99:87:89:bb:ed:1e:5f:
fa:41:c6:55:d8:7b:b1:0f:a2:5f:33:a5:5c:8e:82:
7b:11:af:00:c4:ea:60:a0:82:f5:71:a5:8d:66:ea:
e5:1c:6b:92:4b:ee:0e:21:1b:13:87:a9:a9:fc:1d:
64:69:db:67:e0:09:3d:0d:e0:cb:43:0e:d8:ea:c4:
f3:cf:2e:23:4d:df:12:04:21:2d:42:e7:8a:c1:d1:
5f:be:ba:d1:89:4f:60:d0:b9:10:c2:b9:07:a9:0b:
39:6a:9d:65:8a:e6:7f:9b:78:1f:76:0f:aa:66:ce:
f5:94:a9:ca:6f:80:67:fa:63:58:5f:9a:d1:2d:eb:
81:69:e5:ce:4e:83:2a:60:d4:57:b0:20:ae:94:93:
67:ac:df:dc:d9:7c:ed:0e:f0:1f:da:e9:c7:7f:e0:
82:88:cc:37:22:92:55:0a:7d:aa:4d:2f:39:e1:55:
d1:26:1c:ad:84:00:fa:37:d2:f3:0b:4a:0d:73:87:
96:9b:01:f1:57:54:72:39:8f:17:ac:36:52:1e:24:
c9:a3:c0:21:4a:4d:53:f8:48:87:25:db:7f:15:97:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:97:FB:D5:02:BF:FB:96:6C:E1:AD:04:66:03:7B:31:76:39:C6:ED
X509v3 Authority Key Identifier:
keyid:20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46ebd602e50b2947122f994202d0ade1474b0a2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/429a2cb14686f0439b0d07f4809f611ce62cadfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/d46ebd602e50b2947122f994202d0ade1474b0a2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.23.75.0/24
IPv6:
2801:1da::/44
Signature Algorithm: sha256WithRSAEncryption
79:23:06:80:63:65:17:e4:e9:b9:66:fb:3b:f1:43:b2:4b:0a:
1c:dd:a8:32:c4:07:6d:3d:96:46:a3:b4:8b:02:e6:d7:b6:4d:
10:20:6e:a9:d6:69:7e:62:cc:3c:d4:4a:d5:35:17:e2:35:81:
11:b0:bf:1f:6d:d7:8a:cf:f7:9b:49:4d:b4:5a:9b:73:a9:81:
d0:22:c9:9d:24:ad:98:c8:8a:62:a5:33:26:82:47:26:3a:dd:
26:7e:84:7c:7b:18:44:a6:7e:d3:4d:2c:21:d2:c4:81:e4:ec:
74:81:f5:e5:fd:77:b9:2f:13:84:7e:b8:b3:1a:48:35:72:cb:
28:7a:7f:57:f5:78:1b:dd:af:2a:a6:94:3a:9a:6f:94:ba:3e:
b1:a0:27:c8:08:9f:fd:9c:a1:91:1f:43:6a:74:94:e8:95:33:
39:d7:0c:2c:28:06:23:6e:5f:07:d2:7d:33:55:d0:6a:2f:66:
13:fe:7e:82:ba:15:ac:ad:25:68:c2:24:91:4d:e2:5d:12:95:
67:39:84:27:26:0f:c7:6d:e2:4b:c4:01:70:00:ac:94:e9:65:
56:97:ca:97:6f:cd:27:2b:d3:3c:66:87:15:ea:e0:18:fb:c3:
98:57:e4:66:02:de:71:c5:14:10:06:7c:ea:ec:9b:0e:7e:ec:
25:c2:6d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:50 2024 by rpki-client on console-fra.rpki-client.org