Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/bb298aa85fa56daec434d7c59ddb999baf7f0b92.roa
File: bb298aa85fa56daec434d7c59ddb999baf7f0b92.roa (raw, json)
Hash identifier: YsWIaIvCz8XvCCUfFHzxOzofmWKrWXsII8QDlODI6xo=
Subject key identifier: 01:43:52:7D:7B:53:04:F2:F1:44:4B:04:78:5E:E8:6E:FE:9A:37:92
Certificate issuer: /CN=36904f0e1d851da537ad771f7dc44fa5a2018601
Certificate serial: 18FD1C
Authority key identifier: 77:CD:C0:A6:15:29:B3:A8:FC:C8:12:18:34:7E:0E:C1:AE:93:01:9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36904f0e1d851da537ad771f7dc44fa5a2018601.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/bb298aa85fa56daec434d7c59ddb999baf7f0b92.roa
Signing time: Wed 03 Jan 2024 07:30:00 +0000
ROA not before: Wed 03 Jan 2024 07:30:00 +0000
ROA not after: Fri 02 Jan 2026 07:30:00 +0000
asID: 52283
IP address blocks: 200.108.112.0/24 maxlen: 24
200.108.113.0/24 maxlen: 24
200.108.114.0/24 maxlen: 24
200.108.115.0/24 maxlen: 24
200.108.116.0/24 maxlen: 24
200.108.117.0/24 maxlen: 24
200.108.118.0/24 maxlen: 24
200.108.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1637660 (0x18fd1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36904f0e1d851da537ad771f7dc44fa5a2018601
Validity
Not Before: Jan 3 07:30:00 2024 GMT
Not After : Jan 2 07:30:00 2026 GMT
Subject: CN=bb298aa85fa56daec434d7c59ddb999baf7f0b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:66:a8:48:67:23:96:81:89:9d:96:fd:e1:
68:2c:95:7d:12:b3:32:7e:05:25:f0:42:63:7a:a2:
99:e3:7f:47:69:cb:56:8c:ca:ab:6e:30:2d:01:5f:
0d:f5:9f:30:79:18:a4:e0:e5:00:48:40:35:9a:e1:
fc:d1:90:15:ff:eb:61:13:bb:c6:18:a2:dd:2e:81:
1c:db:99:51:11:ae:00:82:12:38:b7:b8:a2:65:b7:
26:2e:46:1b:cf:b0:da:d4:f1:14:11:69:c6:34:2f:
fe:e9:7d:df:7c:6b:4a:f1:96:3f:09:d8:e0:16:20:
02:74:8f:96:54:69:53:38:db:fc:ab:56:9c:0d:f5:
99:0d:86:d3:05:6c:05:00:45:3a:78:54:d7:cc:f2:
68:eb:6e:89:d0:19:b5:57:b8:41:6f:e9:a3:04:c7:
c8:a8:fb:2c:ee:34:a9:c2:d3:51:b5:c6:bc:d4:f2:
aa:af:c5:39:62:99:6a:1d:27:f9:aa:08:8c:9a:24:
df:bf:63:41:bb:06:a3:69:44:34:68:1e:c1:ca:89:
65:d5:4b:13:03:10:25:1d:e7:d1:a4:af:40:03:6f:
5a:53:96:14:85:42:70:a4:f6:20:3f:61:28:8f:75:
d7:0e:4d:ea:1b:e4:da:0b:bb:0a:0c:e1:99:14:28:
3e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:43:52:7D:7B:53:04:F2:F1:44:4B:04:78:5E:E8:6E:FE:9A:37:92
X509v3 Authority Key Identifier:
keyid:77:CD:C0:A6:15:29:B3:A8:FC:C8:12:18:34:7E:0E:C1:AE:93:01:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36904f0e1d851da537ad771f7dc44fa5a2018601.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/bb298aa85fa56daec434d7c59ddb999baf7f0b92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9238e1ce-9159-4f85-a792-c5d15c7bdc4b/36904f0e1d851da537ad771f7dc44fa5a2018601.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.112.0/21
Signature Algorithm: sha256WithRSAEncryption
94:58:ab:57:8a:ca:ff:54:eb:5c:1c:de:6f:37:46:57:f3:0e:
3a:91:38:8b:53:23:bd:5a:2b:67:7d:0a:eb:00:99:6e:67:ef:
ff:09:fa:77:7f:26:af:6e:f8:4b:59:02:f1:78:a6:4b:96:61:
7f:35:75:f2:8f:11:84:59:a0:24:2d:e0:14:f3:11:54:60:8d:
f1:21:9c:03:29:09:e5:bd:10:ad:b4:fd:cc:89:a2:82:4e:e0:
c4:e1:63:3f:5b:60:5c:70:a9:2d:b1:2e:de:af:ca:67:27:88:
2c:05:b8:8d:b9:9f:a4:a8:6f:82:f8:90:19:3b:06:37:dc:77:
eb:0c:4e:b7:72:25:13:e9:8d:af:c6:42:fe:9b:aa:09:12:fd:
44:f6:8a:75:c2:cb:49:2c:15:41:5c:de:c6:02:38:93:a6:b1:
a8:20:a4:81:7f:c2:13:7d:52:fa:35:39:4d:9f:c2:09:56:d6:
c7:e6:34:3c:f7:53:98:ba:d4:66:9c:30:92:cd:a7:f1:20:58:
81:7d:72:5c:cf:d0:5b:ac:20:b9:8a:9f:e7:ed:6c:5c:13:d1:
69:1d:b1:79:31:5f:47:64:d5:d6:7c:c5:28:b3:5d:9a:f1:58:
6f:a3:26:a2:c8:bd:fd:11:2e:68:b6:7c:43:27:a5:01:ce:1f:
f2:d3:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:08 2024 by rpki-client on console-ams.rpki-client.org