Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/be5a56e9cdbe4542b1976c5f0ee354f0793fed2c.roa
File: be5a56e9cdbe4542b1976c5f0ee354f0793fed2c.roa (raw, json)
Hash identifier: 4pSZg2+lYptP3hDZRPMvNkpblOaUPLPXbTVKAJn6tfE=
Subject key identifier: 0B:59:B8:B2:BC:EB:49:FA:76:A7:18:B6:35:0E:63:BD:BF:E6:72:F9
Certificate issuer: /CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Certificate serial: 0582D3
Authority key identifier: 5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/be5a56e9cdbe4542b1976c5f0ee354f0793fed2c.roa
Signing time: Fri 23 Feb 2024 06:10:47 +0000
ROA not before: Fri 23 Feb 2024 06:10:47 +0000
ROA not after: Mon 23 Feb 2026 06:10:47 +0000
asID: 13999
IP address blocks: 201.159.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361171 (0x582d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
Validity
Not Before: Feb 23 06:10:47 2024 GMT
Not After : Feb 23 06:10:47 2026 GMT
Subject: CN=be5a56e9cdbe4542b1976c5f0ee354f0793fed2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:0c:2d:13:4d:a1:da:55:38:e1:a2:d4:ad:
72:62:04:7c:96:5e:2b:48:9e:49:2a:46:2b:ef:d7:
18:5f:02:39:ce:25:cf:6d:f3:5f:01:7c:77:ef:14:
2e:7c:2d:a0:b0:bf:a7:f9:e1:20:de:ef:f7:ea:50:
df:a1:fe:c1:4c:35:ce:a1:27:38:a1:1c:2e:ca:90:
45:76:ee:60:2e:ca:b2:8e:91:38:d9:ee:34:e6:8c:
de:59:c4:1d:cd:c9:12:b9:c2:2d:87:b3:19:63:98:
16:56:62:35:89:fb:ac:42:c4:89:b1:d2:18:3c:87:
b9:a9:46:75:7d:ec:1a:93:90:32:bb:28:27:9b:95:
c0:0e:3a:7a:a6:59:83:41:af:d8:09:f8:2c:12:83:
3c:b9:9f:52:af:7d:41:87:80:f4:86:c4:1f:c6:46:
0a:26:f3:75:da:ed:50:f2:4f:83:fe:e1:3e:a9:7b:
53:a5:53:9f:7c:2f:f3:c6:f5:9a:97:fa:47:33:31:
29:fe:09:96:05:73:e2:15:b8:27:fd:5c:d4:c4:c1:
85:72:8c:d3:4c:26:fd:9c:a9:6f:6b:2a:5b:b2:3b:
1d:82:f2:8c:22:6b:cf:56:76:0e:54:0f:78:90:11:
c7:eb:e1:2d:84:f9:51:1f:cf:77:ad:67:65:49:b5:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:59:B8:B2:BC:EB:49:FA:76:A7:18:B6:35:0E:63:BD:BF:E6:72:F9
X509v3 Authority Key Identifier:
keyid:5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/be5a56e9cdbe4542b1976c5f0ee354f0793fed2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.200.0/24
Signature Algorithm: sha256WithRSAEncryption
08:83:01:b7:58:e1:53:56:b4:0c:67:e6:a4:b6:d7:bf:dc:e6:
71:3b:d2:db:cd:3a:0f:c6:36:3b:54:dd:10:b7:66:2d:04:6f:
84:47:96:de:67:f7:72:1e:ee:3d:f5:ac:86:e0:e0:81:00:6c:
93:2c:62:8a:c3:0a:dc:b4:e7:11:47:4a:31:17:4d:ef:86:ac:
14:66:bf:35:1b:0a:c7:d7:b7:74:11:e8:db:4c:b1:7f:77:b4:
e7:85:ac:85:30:15:66:e0:33:10:79:89:b7:e2:16:b1:e7:4e:
24:4b:26:be:2f:0a:d5:36:ad:2a:97:f2:d8:5e:35:41:6b:68:
a4:81:29:82:b0:8c:8a:9b:7c:67:b2:c1:be:68:90:54:58:ad:
df:1c:d7:6c:e6:48:76:11:1c:64:ef:d8:2d:02:65:13:d7:12:
db:3e:51:02:b1:32:43:86:7a:50:70:11:ee:8f:1a:17:f4:3f:
a4:41:7a:a5:25:a5:ab:aa:7f:d5:00:46:13:ef:22:ff:df:6e:
29:83:94:aa:00:86:c7:d4:80:5a:fe:67:8b:bc:98:22:f5:8b:
00:15:90:42:69:a6:27:f7:6c:78:e6:7d:0e:ad:ee:07:9b:25:
28:62:12:7b:f6:21:77:24:43:18:73:8f:94:34:d4:e9:26:06:
93:e7:6c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:52 2024 by rpki-client on console-fra.rpki-client.org