Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/13694652c5605c249b28e79805a115471bb9d38d.roa
File: 13694652c5605c249b28e79805a115471bb9d38d.roa (raw, json)
Hash identifier: R5wlmnrLqMNRl7zYe2sRnuj3BlDUZHFYymi6N7D7aNU=
Subject key identifier: 89:E7:8B:99:0E:4C:2D:E7:E6:A5:46:59:64:43:82:78:39:5A:72:B5
Certificate issuer: /CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
Certificate serial: 0DB1F1
Authority key identifier: 41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/13694652c5605c249b28e79805a115471bb9d38d.roa
Signing time: Wed 24 Mar 2021 14:46:16 +0000
ROA not before: Wed 24 Mar 2021 14:46:16 +0000
ROA not after: Tue 24 Mar 2026 14:46:16 +0000
asID: 27669
IP address blocks: 200.108.130.0/23 maxlen: 24
200.108.133.0/24 maxlen: 24
200.108.134.0/23 maxlen: 24
200.108.136.0/22 maxlen: 24
200.108.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 897521 (0xdb1f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a
Validity
Not Before: Mar 24 14:46:16 2021 GMT
Not After : Mar 24 14:46:16 2026 GMT
Subject: CN=13694652c5605c249b28e79805a115471bb9d38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dd:f2:3a:40:f4:b1:34:45:47:04:cd:e0:96:
43:eb:50:6d:30:6f:c7:59:a4:d2:6f:3a:11:24:d5:
00:16:43:10:30:41:41:fd:c4:5e:9a:33:c4:44:c0:
8e:04:29:05:f5:1e:5e:01:13:95:6d:53:8c:3d:be:
98:c6:73:4e:a2:09:0a:98:4f:70:49:35:da:13:f4:
62:aa:3a:9f:1d:f1:84:51:a9:fb:18:26:4c:5d:15:
39:a5:6c:d1:48:7c:80:83:ad:9d:e3:64:89:95:a1:
e9:fb:ac:55:b5:32:81:84:26:6a:12:ed:60:1d:31:
68:25:7b:8d:40:de:f4:3a:1f:fd:a5:87:2e:a9:36:
09:e4:c7:51:3f:de:c3:ea:f0:00:94:b4:47:37:c7:
5c:d6:e1:44:f4:fe:3b:b1:6d:d9:bd:56:0a:17:5f:
79:76:53:b0:cf:18:07:90:5e:06:99:a4:33:e1:e7:
ca:cd:07:26:0f:12:6e:8d:30:dd:f8:72:96:e0:c4:
6a:04:4c:fd:39:ed:1d:d4:8f:55:a8:59:d4:26:88:
46:a5:71:5d:49:af:e5:75:2e:05:8e:cf:56:1a:76:
82:8c:1e:13:2b:f4:6d:67:3a:27:c8:b1:85:33:6e:
9e:94:48:7e:75:84:57:f4:2e:d8:58:07:28:b6:35:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E7:8B:99:0E:4C:2D:E7:E6:A5:46:59:64:43:82:78:39:5A:72:B5
X509v3 Authority Key Identifier:
keyid:41:61:06:95:EF:0C:3C:AD:D8:A2:16:37:1C:60:AB:51:07:E1:CE:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/13694652c5605c249b28e79805a115471bb9d38d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a1babe5e-bc96-4033-b507-e5b1a8c8bf6f/41d4c994eb6ac572b5779b1bd1a8b5b37b20e91a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.130.0/23
200.108.133.0-200.108.141.255
Signature Algorithm: sha256WithRSAEncryption
a3:5e:c5:47:f6:80:53:de:d5:e5:fd:f4:2b:31:ff:88:ba:6a:
8e:94:21:11:a4:a7:17:ad:00:e3:80:8a:e7:2c:57:83:e7:f7:
17:86:61:2a:14:07:01:2d:77:ca:76:1f:b6:53:37:65:39:96:
db:7a:7c:a4:12:ca:c9:48:e0:f0:56:34:60:1a:ca:7e:44:bd:
ae:be:3c:5c:4e:5a:a7:c0:25:03:1b:8b:3b:7d:74:fe:0d:52:
4e:c2:29:aa:fb:ff:1a:fe:f3:c1:25:77:34:37:51:e5:0e:d8:
36:c7:14:47:ff:d0:50:c3:dc:de:66:52:9b:8a:c6:b6:1a:f4:
30:e6:00:de:fe:6a:f7:24:9c:7a:cf:c8:9c:41:d6:f7:66:17:
62:86:34:19:14:e3:3a:86:dc:03:ae:de:1b:27:de:42:a6:19:
7d:f3:f2:64:23:41:b6:3e:95:ef:68:2d:b8:d9:37:6c:dd:0c:
cd:82:cd:e2:d1:9a:df:cb:ae:7d:10:5d:89:8d:4d:1c:5b:8e:
0b:bc:34:20:cc:b5:9a:cf:70:0d:1a:77:d3:87:f4:32:df:85:
bf:b2:82:ab:45:99:70:f0:73:1b:a6:c8:3b:8b:54:36:ff:60:
c5:f1:71:49:57:24:4f:f3:0d:57:9c:4b:5d:ee:8f:75:2e:05:
76:0e:16:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org