Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/3a3e775133d5c173f81e795c5fdeaf9a6ddbbd41.roa
File: 3a3e775133d5c173f81e795c5fdeaf9a6ddbbd41.roa (raw, json)
Hash identifier: NgaK2ikkFeJ20oF3pEkTPF4gC2qddTY5XqzlFUXyCrY=
Subject key identifier: 29:A7:F9:DA:3D:81:AC:F3:16:BE:44:F6:D3:E5:EA:D2:85:C1:2F:2F
Certificate issuer: /CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Certificate serial: 0DADDA
Authority key identifier: 1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/3a3e775133d5c173f81e795c5fdeaf9a6ddbbd41.roa
Signing time: Wed 24 Mar 2021 22:51:46 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 52314
IP address blocks: 200.124.176.0/24 maxlen: 24
200.124.177.0/24 maxlen: 24
200.124.178.0/24 maxlen: 24
200.124.179.0/24 maxlen: 24
200.124.180.0/24 maxlen: 24
200.124.181.0/24 maxlen: 24
200.124.182.0/24 maxlen: 24
200.124.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896474 (0xdadda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbdd559af6aac3348d7a10caf850960a448f10d
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=3a3e775133d5c173f81e795c5fdeaf9a6ddbbd41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8c:76:96:f0:9a:c8:dc:25:14:3b:59:44:94:
e7:f1:49:6d:16:c8:d2:25:f9:a6:79:3a:d5:ac:9e:
10:9d:63:0c:37:23:dc:50:37:bc:fb:e6:31:09:25:
f1:73:29:9a:77:bf:74:92:c4:eb:c9:8a:3e:76:f1:
4b:86:b2:00:97:8f:58:fe:f3:4f:8c:1d:7a:c3:95:
ef:1c:40:91:7b:37:7f:e7:c9:f8:ac:08:d8:72:c2:
60:43:56:1a:2e:0e:41:06:7c:f6:f2:55:ea:2a:a5:
92:5f:cd:04:3b:9e:fd:ee:63:3b:e0:9b:67:b0:99:
da:42:8b:d0:8f:0c:1a:c0:b2:8b:37:a7:59:9f:0d:
ef:6f:22:34:fd:93:7f:af:1e:1d:a7:15:4a:b5:a1:
c2:b4:56:2a:7c:df:5f:c6:63:f5:1d:fd:24:56:37:
d8:6d:ae:1f:1f:21:69:7f:44:e5:2c:a0:ec:1a:9a:
0c:31:51:c4:04:b7:85:4a:59:2c:56:bc:69:d2:cf:
40:6a:31:e0:c4:9b:0a:44:1b:a0:4e:40:7c:04:78:
db:f7:b2:20:dc:0d:00:4a:84:89:b7:10:d3:fe:a0:
a4:df:4b:f4:75:9c:bb:90:13:b4:00:b5:0b:44:53:
35:3f:f0:45:41:51:8b:f7:92:b4:13:08:07:fd:2f:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A7:F9:DA:3D:81:AC:F3:16:BE:44:F6:D3:E5:EA:D2:85:C1:2F:2F
X509v3 Authority Key Identifier:
keyid:1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/3a3e775133d5c173f81e795c5fdeaf9a6ddbbd41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.124.176.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:1e:b7:91:63:4a:97:2b:29:a7:e4:c0:24:7c:f2:da:fc:62:
2f:b3:3f:92:83:02:c1:b9:16:ea:ad:44:eb:9c:53:a5:8e:68:
89:72:49:43:64:08:98:da:22:07:ca:b0:a8:e7:c0:57:ee:25:
d9:f0:a6:5f:8b:79:61:d2:de:7b:08:f1:a4:da:f8:43:76:40:
fb:ed:ce:5e:49:b8:21:35:f4:a8:cb:88:eb:e5:c2:eb:c1:eb:
35:14:d9:5e:df:19:57:b5:83:87:d3:63:4c:b2:34:61:53:ef:
5c:cc:49:97:9c:1d:1f:a8:ad:eb:2f:70:28:0c:5a:51:51:d0:
1a:e1:23:e7:3b:60:bb:87:72:81:57:27:12:a3:3a:57:50:76:
f0:16:e7:2d:6d:ef:87:00:c2:0f:2c:71:93:d0:c0:4e:6f:52:
eb:0a:58:d9:7b:c5:d2:59:8c:24:58:48:53:0c:85:88:4c:71:
93:d7:4c:07:79:5d:1d:44:11:9b:dc:2c:37:af:4e:c7:e9:5a:
68:c8:05:d4:eb:07:75:b8:cf:ec:2c:6b:fd:f0:63:6c:1b:85:
c2:10:45:b0:51:70:c0:31:e9:6c:0e:2e:54:c8:b0:70:dc:60:
0f:d0:df:fe:81:a3:ad:4c:ce:2c:c9:5e:63:4f:32:bc:79:df:
c9:37:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:17 2024 by rpki-client on console-ams.rpki-client.org