Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79997c08-b037-4667-9c12-c6e0a0f3de54/3984631b186c4134ab08d6f67596054711255a42.roa
File: 3984631b186c4134ab08d6f67596054711255a42.roa (raw, json)
Hash identifier: ReS5LoqrjnO+ESuvLqtsoVOQ12E3jQeqUU+jn92MG1w=
Subject key identifier: 20:A3:7D:F2:15:E2:71:4C:7C:D9:3B:CC:2E:C2:AD:7C:FA:66:4D:3A
Certificate issuer: /CN=dde8c4431eccff427c82795998c2e957725b89e9
Certificate serial: 04160B
Authority key identifier: AB:32:C4:DE:BA:62:CB:C0:9C:67:63:48:19:D4:44:1B:B4:C3:8C:01
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dde8c4431eccff427c82795998c2e957725b89e9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/79997c08-b037-4667-9c12-c6e0a0f3de54/3984631b186c4134ab08d6f67596054711255a42.roa
Signing time: Thu 05 Oct 2023 19:39:56 +0000
ROA not before: Wed 04 Oct 2023 19:39:56 +0000
ROA not after: Sun 05 Oct 2025 19:39:56 +0000
asID: 10452
IP address blocks: 200.10.140.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267787 (0x4160b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde8c4431eccff427c82795998c2e957725b89e9
Validity
Not Before: Oct 4 19:39:56 2023 GMT
Not After : Oct 5 19:39:56 2025 GMT
Subject: CN=3984631b186c4134ab08d6f67596054711255a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:85:0a:4f:98:a4:90:6a:cf:4d:e2:63:f4:
d8:79:0f:bd:a7:09:66:0d:5d:56:8d:56:e7:84:4c:
e2:06:8f:22:36:ab:5d:fd:49:15:6e:cb:83:e5:7f:
5f:ef:fa:d7:09:6f:01:e6:33:09:51:93:d2:24:03:
c3:dc:8b:00:d0:9b:26:b3:fe:f6:f5:fa:ff:93:1b:
8f:1f:57:7b:66:83:6b:f8:09:a4:11:25:72:c0:94:
c3:26:d7:c2:71:ad:d4:7e:39:2f:38:ab:41:22:8e:
4a:ce:40:7e:c2:1c:bd:76:9b:ed:a5:cd:95:c6:11:
25:c1:21:6a:dd:2c:2f:7d:ee:ff:5e:58:f8:2d:fc:
7c:dd:e4:f1:b7:d7:4e:ac:ad:9d:aa:1b:44:ed:50:
e0:73:c9:c3:80:47:83:ed:0c:ca:90:57:75:de:51:
f1:68:3f:6f:2a:5b:1d:b0:9d:d7:51:97:a1:e8:a2:
5b:21:73:3f:6d:3a:f2:0d:64:3f:5f:be:8c:64:27:
0e:0e:76:b0:48:5d:9a:02:ee:a3:4c:34:8f:04:44:
a2:42:fb:47:f4:c3:0f:fd:cc:66:52:91:5c:5e:89:
bb:d7:da:6b:0e:2c:57:bd:5b:cf:5d:f5:40:a9:cf:
f3:f0:ad:00:36:2d:b5:67:bf:c7:d8:ae:e5:5a:f7:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A3:7D:F2:15:E2:71:4C:7C:D9:3B:CC:2E:C2:AD:7C:FA:66:4D:3A
X509v3 Authority Key Identifier:
keyid:AB:32:C4:DE:BA:62:CB:C0:9C:67:63:48:19:D4:44:1B:B4:C3:8C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dde8c4431eccff427c82795998c2e957725b89e9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79997c08-b037-4667-9c12-c6e0a0f3de54/3984631b186c4134ab08d6f67596054711255a42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/79997c08-b037-4667-9c12-c6e0a0f3de54/dde8c4431eccff427c82795998c2e957725b89e9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.140.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c0:1a:3e:77:c9:65:22:fa:2c:2d:da:60:04:86:73:4f:b8:
3b:ff:f5:78:b9:5e:26:0c:dd:f3:03:bd:6a:c9:9a:ee:a3:5c:
f2:9d:4d:62:66:3c:86:bf:83:29:38:76:e8:54:12:03:dd:f2:
00:c9:7c:a7:25:3e:e7:13:98:47:b3:3b:a7:8c:81:2e:81:93:
82:d9:66:99:d8:5c:e4:1e:48:aa:6f:1c:aa:9a:ea:5f:c8:29:
d6:00:03:d7:aa:1e:d7:a9:f0:26:17:e1:a4:c6:33:07:af:1c:
81:db:50:02:84:f3:13:3f:73:f4:03:15:57:f7:d4:87:ec:97:
14:79:51:cc:cd:59:0d:4a:47:e7:47:4d:f2:9b:7b:54:d5:23:
e7:1b:28:16:e2:16:37:e3:55:32:5e:39:c3:f5:1c:e8:3b:3a:
77:7c:15:92:87:ec:53:6e:a5:df:01:a7:3d:d6:ea:55:6e:14:
54:8d:dc:a2:83:0f:61:8b:c8:25:f7:1b:9b:10:4f:e0:69:5b:
e6:34:d7:fd:fc:58:ea:8f:b8:2b:7c:f9:47:ce:ac:3f:8f:09:
5a:45:07:4d:86:b5:61:73:44:5d:cb:a5:02:85:ac:71:ae:07:
fe:c5:ba:fc:05:ca:39:37:12:c7:a6:7a:11:99:5d:c2:10:15:
b9:0f:cf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:02 2024 by rpki-client on console-ams.rpki-client.org