Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/3fd06691ebf76dfd4120dc28406783b8ea42495f.roa
File: 3fd06691ebf76dfd4120dc28406783b8ea42495f.roa (raw, json)
Hash identifier: iDIa5Okzf02Y7JwoIkRBz0B1X0vEICcGxbUUPv7sUYc=
Subject key identifier: 2C:02:93:13:01:B9:B8:9E:63:FD:AE:B3:48:A7:35:05:8A:2E:75:36
Certificate issuer: /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial: 028062
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/3fd06691ebf76dfd4120dc28406783b8ea42495f.roa
Signing time: Tue 18 Jul 2023 19:52:48 +0000
ROA not before: Mon 17 Jul 2023 19:52:48 +0000
ROA not after: Fri 18 Jul 2025 19:52:48 +0000
asID: 16629
IP address blocks: 200.54.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163938 (0x28062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
Validity
Not Before: Jul 17 19:52:48 2023 GMT
Not After : Jul 18 19:52:48 2025 GMT
Subject: CN=3fd06691ebf76dfd4120dc28406783b8ea42495f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:93:1c:53:5f:4e:35:e9:6f:9f:db:09:f1:
0b:1d:e0:cd:18:e1:b9:eb:3c:75:fc:f9:d4:53:a6:
54:9d:27:d6:eb:80:69:95:64:0f:08:b5:8e:bf:8b:
92:15:a1:50:69:17:53:fc:55:d9:50:2f:19:a3:66:
5a:cf:06:4d:a3:7c:8f:94:93:75:b3:63:8d:f9:a6:
0a:ed:b8:ca:6d:64:f9:a6:11:5e:62:b3:81:e0:d9:
37:c2:8e:4b:27:0a:c1:fe:7d:35:58:84:1e:56:4a:
9a:67:b7:43:2a:ae:dc:0a:89:94:97:dc:0c:e3:a0:
46:06:73:d0:3a:51:d1:92:05:a3:af:c5:2c:29:9f:
59:68:d2:78:dc:ef:24:c5:09:52:e2:4d:e7:5d:c8:
b8:20:7c:27:a0:65:60:83:0e:c4:27:21:9c:25:6a:
03:a6:03:66:50:99:6e:91:71:18:22:22:c7:ca:36:
7a:7c:ce:65:63:0d:f2:80:95:8b:a0:72:04:66:52:
99:76:ee:92:c3:da:31:52:53:ed:9b:7a:ed:df:2f:
d2:7d:8c:17:52:9a:41:3c:08:3c:83:22:1e:6f:85:
e5:68:76:b8:e3:1c:5a:aa:8d:5e:85:e2:a7:99:8b:
31:c4:27:e1:68:c5:53:87:10:28:cc:dc:e6:51:02:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:02:93:13:01:B9:B8:9E:63:FD:AE:B3:48:A7:35:05:8A:2E:75:36
X509v3 Authority Key Identifier:
keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/3fd06691ebf76dfd4120dc28406783b8ea42495f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.54.128.0/20
Signature Algorithm: sha256WithRSAEncryption
48:bc:e4:ba:a3:b0:10:55:b8:6e:47:27:5e:c2:8e:43:80:db:
ef:25:1e:2d:f0:ce:5c:6e:ad:c9:9d:b4:be:04:1e:06:a2:5d:
f7:d4:a1:06:63:8e:16:94:c7:03:df:62:bf:ec:3c:e9:35:7b:
c4:b4:c3:6e:00:6e:c0:95:ab:84:22:6d:bf:5a:59:68:ec:38:
c3:73:ba:36:8b:9a:81:b4:18:d2:34:27:0f:1b:a3:78:cb:d8:
f1:b1:ed:a5:d4:e9:45:3e:47:af:fe:1d:be:29:21:8b:36:72:
8d:54:77:57:b7:35:f7:05:98:a6:2c:f0:6b:dd:30:13:54:e5:
e7:b1:08:60:e3:08:bc:18:7a:5c:8c:0c:d2:d5:cb:0a:25:db:
54:5a:04:f5:a2:19:71:80:fc:05:ef:df:f6:d6:48:b0:c7:d3:
2c:1a:24:94:18:23:66:19:0b:67:d1:79:23:cb:a0:a3:13:b5:
80:d7:e6:79:f3:91:6a:32:c0:83:23:61:c9:8b:3c:f8:dd:91:
45:08:f6:fd:b6:24:6c:01:20:d9:d3:29:4f:19:3a:e0:3f:5d:
73:b4:48:66:b7:09:d7:cf:24:5a:e3:35:8e:30:45:c9:98:fa:
71:4f:97:75:9b:33:d7:95:e0:6f:7f:7b:41:23:69:44:e3:aa:
55:e6:9b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:57 2024 by rpki-client on console-fra.rpki-client.org