Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/834e03e5-16c3-4913-a394-c3877fcf600d/1dcbe6d8dcf4207a187ba76dea06308802ed039a.roa
File: 1dcbe6d8dcf4207a187ba76dea06308802ed039a.roa (raw, json)
Hash identifier: ShIlo21oyY8ou/GvD0UYLz9w6iyGDhD2f9ygUo9bVjY=
Subject key identifier: 9E:D2:D6:24:6C:87:61:F2:89:DB:55:23:2D:56:BA:6A:D0:02:AC:BC
Certificate issuer: /CN=d8386eb3d3b562f2b2011d72b49e14398471a201
Certificate serial: 0C9F7F
Authority key identifier: 9C:39:B1:50:DD:8C:40:99:10:1D:EC:FC:F5:D5:47:6D:1C:10:17:31
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8386eb3d3b562f2b2011d72b49e14398471a201.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/834e03e5-16c3-4913-a394-c3877fcf600d/1dcbe6d8dcf4207a187ba76dea06308802ed039a.roa
Signing time: Wed 24 Mar 2021 14:30:07 +0000
ROA not before: Wed 24 Mar 2021 14:30:07 +0000
ROA not after: Tue 24 Mar 2026 14:30:07 +0000
asID: 27935
IP address blocks: 200.3.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827263 (0xc9f7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8386eb3d3b562f2b2011d72b49e14398471a201
Validity
Not Before: Mar 24 14:30:07 2021 GMT
Not After : Mar 24 14:30:07 2026 GMT
Subject: CN=1dcbe6d8dcf4207a187ba76dea06308802ed039a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:c4:06:5a:17:c1:24:8d:89:22:c6:e3:30:
13:d7:94:1a:e6:4a:e8:1c:87:3a:eb:e3:55:b5:18:
cd:74:b0:91:72:41:65:e6:34:b7:ab:48:8c:f2:9c:
30:fb:31:65:04:71:2f:01:c1:44:0e:a8:8d:58:fa:
fa:b9:0a:58:ad:4a:24:f0:0c:cd:e8:df:96:18:d8:
cf:4f:2b:75:64:ed:3d:24:d8:ef:15:55:33:6e:70:
93:d9:07:8f:4a:71:51:ef:7c:85:5b:f9:b7:be:18:
d5:c1:83:ea:22:f1:7e:30:9a:5b:42:9b:e5:fb:cf:
24:a2:7d:49:42:09:32:85:8e:93:ee:ac:1f:70:0a:
dc:72:a0:9a:36:d7:ed:04:73:5a:85:4e:02:69:00:
12:2d:ab:26:66:4e:54:b5:50:9e:1e:98:70:81:d9:
b7:01:a0:5d:29:65:78:df:7f:f1:b6:e5:4c:d0:93:
1e:e7:50:0d:14:d2:80:4e:96:7e:6c:d4:7f:e3:cb:
50:d0:45:16:fd:4b:fb:fc:03:54:b9:3e:6c:5e:70:
b8:7d:5a:41:c7:7b:0b:5b:43:c7:cc:c5:15:5f:5b:
57:c2:c3:d0:4e:65:19:b4:b3:1b:6f:42:89:89:fd:
cd:84:76:88:a1:a1:a9:71:72:30:6a:8d:e7:64:09:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D2:D6:24:6C:87:61:F2:89:DB:55:23:2D:56:BA:6A:D0:02:AC:BC
X509v3 Authority Key Identifier:
keyid:9C:39:B1:50:DD:8C:40:99:10:1D:EC:FC:F5:D5:47:6D:1C:10:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8386eb3d3b562f2b2011d72b49e14398471a201.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/834e03e5-16c3-4913-a394-c3877fcf600d/1dcbe6d8dcf4207a187ba76dea06308802ed039a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/834e03e5-16c3-4913-a394-c3877fcf600d/d8386eb3d3b562f2b2011d72b49e14398471a201.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.184.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:4d:8a:ef:bf:d0:84:3a:e1:7b:73:ab:df:bf:a7:f0:ac:4f:
26:b3:6f:05:48:4f:4c:e3:f1:01:e6:6d:e3:7d:0d:7c:19:d5:
44:38:14:fa:64:a8:7b:e1:8f:d9:01:fb:38:b4:32:10:7f:da:
0c:99:3c:24:74:5c:a1:0a:ec:ac:b1:2d:3a:b0:e6:1c:85:a1:
fe:83:26:94:9f:48:c7:fe:99:df:6d:58:6d:97:e1:05:c7:4e:
00:14:57:66:42:a7:36:fe:f3:fe:e3:ee:be:70:6d:35:d3:4d:
29:23:28:25:57:01:43:f1:3f:13:13:a5:7c:e7:c3:24:1c:ca:
3e:da:1e:7d:03:f4:c0:a8:66:e0:d9:6a:56:1e:4a:ea:d3:de:
1b:b0:86:00:ff:93:8d:ed:fb:dc:1e:df:1f:5e:27:f0:18:60:
3a:3d:90:e6:5a:72:0e:27:4c:23:38:87:ee:5b:1e:63:df:ad:
86:ca:d7:84:3f:75:fd:3a:5d:49:3c:66:3a:98:9a:94:d9:cb:
4e:61:a5:58:1a:da:94:67:b6:49:b8:95:73:52:fe:4a:47:4e:
28:22:1b:d0:bf:4f:2b:19:69:4c:5d:eb:69:42:76:94:45:a5:
0f:e4:8f:fe:3b:b7:96:b1:e3:f5:42:37:25:9c:27:7a:fd:03:
2a:19:84:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org