Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99b195d2-4b5c-4a9f-9798-4218af4719ae/dd44e0f0ecf8d2375b9f228f9b73e59cb38d0ad7.roa
File: dd44e0f0ecf8d2375b9f228f9b73e59cb38d0ad7.roa (raw, json)
Hash identifier: Y568PGN8iRtKOelw8eNiyREv3RsqTeNWVVdlRI5jGn8=
Subject key identifier: AB:26:EF:1F:4D:60:A1:9A:B9:B4:FE:ED:57:30:58:A0:AE:57:81:2A
Certificate issuer: /CN=ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4
Certificate serial: 20B3DA
Authority key identifier: E0:AD:97:2A:32:EC:3F:13:D6:08:8D:F0:11:88:38:BC:17:33:25:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/99b195d2-4b5c-4a9f-9798-4218af4719ae/dd44e0f0ecf8d2375b9f228f9b73e59cb38d0ad7.roa
Signing time: Fri 05 Jan 2024 19:48:52 +0000
ROA not before: Fri 05 Jan 2024 19:48:51 +0000
ROA not after: Mon 05 Jan 2026 19:48:51 +0000
asID: 61468
IP address blocks: 200.7.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2143194 (0x20b3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4
Validity
Not Before: Jan 5 19:48:51 2024 GMT
Not After : Jan 5 19:48:51 2026 GMT
Subject: CN=dd44e0f0ecf8d2375b9f228f9b73e59cb38d0ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ae:28:cf:9d:fc:6f:c6:29:14:5e:e3:85:be:
a0:db:1a:4c:c2:1f:66:ea:e8:d1:99:c6:22:38:8f:
80:4e:ad:ee:ad:3e:60:a8:bf:cf:1c:17:a8:40:5c:
64:fa:9d:3a:04:32:b5:86:69:5b:7c:92:e4:16:bd:
40:12:7a:bc:cd:fd:1c:fc:1d:f7:de:7a:fc:69:5d:
2a:5e:a0:12:15:03:f3:b2:88:5d:b1:bc:a6:5c:37:
3d:bd:4b:3e:80:ba:a4:89:24:f8:24:97:04:da:39:
91:db:55:84:87:4f:be:1c:54:a0:39:b0:1a:de:98:
b2:b6:79:2a:04:32:19:ff:d5:fa:9a:55:3d:2a:20:
87:ff:68:f4:e5:26:71:ba:6e:32:c8:69:39:54:a8:
ad:12:47:b6:0f:66:b1:b8:65:67:b9:6e:a5:5b:bb:
49:50:61:5f:29:e7:ce:1f:85:4d:05:76:45:c8:34:
c2:68:62:d5:96:96:c5:7e:12:20:15:0c:c4:ad:64:
f1:8a:f3:cd:0b:9a:58:f0:7f:18:f6:bf:31:79:f1:
3b:db:9a:6a:f0:9e:22:53:9b:c2:dd:7d:8a:0a:16:
7f:21:d3:36:8f:59:7e:08:05:8d:29:0e:46:0a:53:
ea:43:84:86:7d:77:d5:76:74:f1:75:0f:4e:1b:00:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:26:EF:1F:4D:60:A1:9A:B9:B4:FE:ED:57:30:58:A0:AE:57:81:2A
X509v3 Authority Key Identifier:
keyid:E0:AD:97:2A:32:EC:3F:13:D6:08:8D:F0:11:88:38:BC:17:33:25:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99b195d2-4b5c-4a9f-9798-4218af4719ae/dd44e0f0ecf8d2375b9f228f9b73e59cb38d0ad7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/99b195d2-4b5c-4a9f-9798-4218af4719ae/ef39354a5f38be4ee9b8d3bedf0268e6d321dbe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.7.82.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:8e:3c:67:36:c4:50:66:b0:36:a2:b1:fe:ed:b5:0a:9b:fe:
6f:38:26:7a:2e:48:14:ae:b0:a2:19:d2:0f:c0:a8:a0:c9:14:
4c:a6:64:1f:dc:25:bd:b3:66:a7:cd:21:7e:c1:44:8b:bc:c3:
66:08:d8:40:ee:68:7f:95:6c:f1:d3:89:78:1a:86:85:e4:2f:
66:d1:07:58:5c:93:23:16:76:41:58:a1:ab:6d:19:16:35:63:
a7:17:a8:f6:d0:fd:e8:f1:de:78:1b:12:ac:ae:40:9a:ce:46:
cb:8d:39:06:d6:e6:ac:47:c2:cd:1b:fb:d9:d3:07:99:8b:50:
01:60:10:5c:1b:0f:93:4b:2f:fe:93:0c:28:01:ba:2e:e5:58:
56:ac:81:bb:71:50:9d:e3:fd:0c:c1:1a:4f:20:58:06:d7:d5:
4a:b7:a2:dd:73:6e:f1:75:82:49:a8:e5:4e:a1:ba:63:cd:e0:
e7:57:41:1b:78:ff:c5:bb:01:93:05:c1:44:a1:5e:72:be:ff:
11:3b:b8:4d:90:ef:84:cf:f0:e2:d5:42:a4:dd:20:8c:18:a3:
8e:e3:8b:dc:9f:14:ad:4a:8b:a1:19:92:e8:6c:a2:43:3e:fe:
2a:03:ef:ce:79:73:81:be:33:2b:df:73:54:d9:c1:7e:17:46:
89:d4:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org