Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/492c32ee74b353ff0c5d430ed3347b9bf20482eb.roa
File: 492c32ee74b353ff0c5d430ed3347b9bf20482eb.roa (raw, json)
Hash identifier: 1rvMOxng42orwPNPh/KaqNcDybpCvLFvcNOqCr2lelM=
Subject key identifier: CA:40:FA:11:C2:90:64:AA:2D:D8:A2:8E:B6:84:B7:C4:DA:E9:05:93
Certificate issuer: /CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf
Certificate serial: 08FE87
Authority key identifier: 3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/492c32ee74b353ff0c5d430ed3347b9bf20482eb.roa
Signing time: Tue 19 Oct 2021 17:23:33 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 7049
IP address blocks: 128.201.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 589447 (0x8fe87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=492c32ee74b353ff0c5d430ed3347b9bf20482eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:37:10:df:94:44:4c:40:58:4f:5a:0c:cd:c3:
67:98:31:cd:79:88:27:72:a1:16:23:67:87:29:bf:
79:bf:e5:8b:5d:6e:69:dd:3a:1c:e0:a9:b1:71:fc:
ff:fb:f3:97:7d:3a:b3:14:df:65:ac:70:ab:87:0e:
11:1d:78:64:28:95:94:07:cc:07:69:79:1d:61:cc:
a7:88:a5:b4:55:75:ff:b6:b3:8e:eb:bd:8f:03:97:
d3:05:fa:c5:8e:4b:f3:8f:af:7f:68:0c:56:5f:56:
9b:37:2f:dc:bd:d6:a0:6d:0c:9e:cb:14:d3:dc:c3:
bb:4b:0a:cf:ce:14:15:e4:ff:56:68:2b:cf:65:af:
7e:b6:3e:aa:81:85:49:31:8d:0f:b6:58:1b:28:64:
4c:3b:99:08:cb:25:d7:38:72:c8:90:c1:a0:60:52:
e0:cb:ad:06:71:c1:88:3e:74:79:71:db:5c:51:32:
4a:99:b0:23:41:b4:9a:42:50:7e:2f:10:d5:7b:74:
88:c8:24:12:e6:fc:25:26:37:83:a8:f5:90:e7:f2:
0e:f9:af:8e:3d:d6:a5:89:82:37:b4:7d:47:55:98:
3d:1b:26:50:d5:f8:d3:36:d8:90:39:f8:3b:d9:28:
cd:bc:8a:a3:eb:20:58:b5:20:95:e3:06:d3:39:44:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:40:FA:11:C2:90:64:AA:2D:D8:A2:8E:B6:84:B7:C4:DA:E9:05:93
X509v3 Authority Key Identifier:
keyid:3D:15:9A:1B:F8:45:30:25:C9:F9:AF:1C:6C:1B:80:45:B5:55:52:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/492c32ee74b353ff0c5d430ed3347b9bf20482eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7ae23e18-d064-4323-bbc5-878ae16e18d3/d644dc4f03e4edb1c47800a7f22ba12fcb5be9bf.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.20.0/24
Signature Algorithm: sha256WithRSAEncryption
02:60:47:3f:38:09:05:75:8f:f2:89:f2:1b:57:c0:03:ac:e6:
ba:e3:87:a2:05:0f:b5:94:7c:4c:50:c4:11:36:0e:03:9a:3f:
76:96:24:a9:96:25:02:f2:32:1a:71:7a:a1:4b:9c:63:77:d8:
ee:1e:20:22:aa:0b:6c:70:3d:bc:e7:bc:61:11:19:19:d1:d5:
e8:ba:77:fd:ae:1f:ec:fc:bf:a1:ff:a9:96:d9:f0:a3:bc:93:
f8:1a:43:df:f0:d1:ed:e2:68:9d:be:78:92:a8:14:69:53:fc:
af:75:a6:34:77:ec:4e:ee:79:9e:e1:db:f5:4d:ba:98:ef:f7:
7b:8b:75:e6:c5:3c:c6:40:da:c7:63:2d:f8:08:f6:89:46:cc:
1e:54:61:48:d0:f6:2a:4b:60:fe:a9:f3:b1:59:2a:9c:8b:68:
24:4c:0c:c6:46:d9:ce:ec:23:8c:21:df:d1:5a:36:9f:cf:92:
93:e6:67:d8:c4:b2:28:1b:37:72:c0:6e:f4:4d:ac:91:8d:13:
d5:95:9d:53:a1:98:33:a7:fc:de:29:91:e9:64:8d:c7:ec:1a:
e7:63:ab:af:9c:6a:08:55:30:12:97:1c:d8:7d:c1:cf:13:c1:
a3:1f:3f:4e:11:7c:05:59:17:b6:3e:f0:b3:d4:2f:f3:8b:eb:
00:ac:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org