Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ee94d00-2d79-4f28-a99a-c3ace8a3a9df/200baad2980ce662d775b75d596bbea383d62c6f.roa
File: 200baad2980ce662d775b75d596bbea383d62c6f.roa (raw, json)
Hash identifier: cclDvU91Wt0Ers/XclM2prLUSRPOimiGlVLJxW/zqk8=
Subject key identifier: F3:2C:CA:59:DE:50:65:FD:49:39:1B:33:33:7A:FA:BF:0A:0F:A1:A5
Certificate issuer: /CN=f74a176c683a5694ec7aebdd7fdc5ca1f49fae98
Certificate serial: 0CF994
Authority key identifier: F5:2A:C7:F2:09:F0:C0:52:E1:53:32:09:89:D5:37:12:89:7B:8B:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f74a176c683a5694ec7aebdd7fdc5ca1f49fae98.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7ee94d00-2d79-4f28-a99a-c3ace8a3a9df/200baad2980ce662d775b75d596bbea383d62c6f.roa
Signing time: Wed 24 Mar 2021 14:36:51 +0000
ROA not before: Wed 24 Mar 2021 14:36:51 +0000
ROA not after: Tue 24 Mar 2026 14:36:51 +0000
asID: 267893
IP address blocks: 45.65.200.0/24 maxlen: 24
2801:1e:3000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850324 (0xcf994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74a176c683a5694ec7aebdd7fdc5ca1f49fae98
Validity
Not Before: Mar 24 14:36:51 2021 GMT
Not After : Mar 24 14:36:51 2026 GMT
Subject: CN=200baad2980ce662d775b75d596bbea383d62c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:c5:80:1d:58:cb:31:65:7e:c8:e0:0b:89:
2e:72:ab:45:10:ca:77:a4:1d:e4:c5:20:fe:73:2f:
0d:2c:d5:06:28:75:b6:20:d6:97:19:24:43:b3:14:
bb:a4:fe:c4:af:16:b4:f4:d6:74:6f:e9:fb:a1:09:
d7:5c:66:82:38:64:98:ee:8d:58:38:40:36:41:bd:
f6:fa:04:bd:0d:57:b5:d9:d7:10:fb:cc:f9:cd:dd:
8e:bd:80:6b:55:8e:e2:e3:79:5a:3e:d9:e4:8d:88:
7e:3d:94:a2:86:93:ba:20:6d:cd:1e:cd:7b:14:94:
ee:03:92:cb:6e:71:09:11:19:a9:5e:e2:89:67:5c:
5d:02:b8:af:07:27:a4:90:28:25:a4:b6:8b:5f:23:
23:99:8f:4d:25:29:ce:46:a3:57:ee:3d:ce:42:91:
da:1a:b7:89:11:98:40:ab:18:46:94:d3:45:4c:5a:
9f:8d:9e:ca:c9:f9:8d:7a:a9:ee:06:30:fa:80:0a:
b7:18:10:01:39:c4:ec:05:51:24:35:3b:5c:d2:50:
72:81:ea:e9:86:bf:5b:98:a8:bd:cb:d8:7b:e7:cc:
d0:0b:8d:fc:e5:d6:56:e5:d9:78:45:0b:10:01:d9:
22:6e:ef:db:5f:87:e5:88:f6:8d:43:5d:64:d0:02:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2C:CA:59:DE:50:65:FD:49:39:1B:33:33:7A:FA:BF:0A:0F:A1:A5
X509v3 Authority Key Identifier:
keyid:F5:2A:C7:F2:09:F0:C0:52:E1:53:32:09:89:D5:37:12:89:7B:8B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f74a176c683a5694ec7aebdd7fdc5ca1f49fae98.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ee94d00-2d79-4f28-a99a-c3ace8a3a9df/200baad2980ce662d775b75d596bbea383d62c6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7ee94d00-2d79-4f28-a99a-c3ace8a3a9df/f74a176c683a5694ec7aebdd7fdc5ca1f49fae98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.200.0/24
IPv6:
2801:1e:3000::/48
Signature Algorithm: sha256WithRSAEncryption
23:ac:bc:3d:31:00:2d:69:07:a6:2a:52:b4:ad:ad:82:0a:ca:
65:0e:27:71:68:2a:c6:c9:d0:56:0b:c3:aa:11:f2:14:5c:bd:
5f:15:ca:5e:10:61:16:5f:9b:04:d5:61:65:77:e5:c5:92:dc:
b5:1e:21:5f:27:60:93:df:57:de:7e:16:5e:2e:3b:6d:d7:68:
c3:1d:33:b7:5c:fe:c7:37:07:02:41:a4:8f:c7:df:c7:91:f0:
4e:b5:37:c3:79:94:4c:ee:5e:7b:f7:37:da:91:07:0b:a8:15:
01:b2:5b:9d:0e:84:e0:16:f8:92:62:5c:bb:56:1e:18:88:85:
46:9d:b1:53:78:e3:14:85:b9:a5:b2:f5:f6:9d:6f:85:96:8b:
56:6d:20:35:bc:a7:94:ac:18:cb:53:21:7d:18:e4:9d:1e:de:
1f:d2:b8:e5:d2:91:a0:ec:7f:9e:0f:98:77:d3:7a:32:f9:9b:
83:1f:52:33:f7:e5:59:5e:05:a6:c5:7d:31:a9:5d:c7:70:c8:
b9:6b:43:2d:c0:5e:2f:a4:44:b5:eb:b2:dd:65:f6:f2:70:bf:
2c:52:1b:72:08:ea:64:4d:db:ec:26:e3:8e:d8:a8:7a:27:40:
e9:13:7c:d4:e6:65:8b:ca:04:3e:42:67:3d:23:b6:16:bc:ba:
4b:5b:c8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org