Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/cbf7ac5d921ef3e3b892fe8ca96b0fa5c8aed7b2.roa
File: cbf7ac5d921ef3e3b892fe8ca96b0fa5c8aed7b2.roa (raw, json)
Hash identifier: H+oI4WQkcOBRqsxdpMRbhgbsONmYpmgd0VqekIdAjSg=
Subject key identifier: 4D:E7:5E:7D:79:0F:2F:15:70:05:21:57:06:AA:53:63:67:C0:8C:46
Certificate issuer: /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial: 21A606
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/cbf7ac5d921ef3e3b892fe8ca96b0fa5c8aed7b2.roa
Signing time: Fri 24 Mar 2023 08:30:18 +0000
ROA not before: Thu 23 Mar 2023 08:30:18 +0000
ROA not after: Sat 22 Mar 2025 08:30:18 +0000
asID: 27968
IP address blocks: 200.125.192.0/24 maxlen: 24
200.125.224.0/24 maxlen: 24
200.125.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2205190 (0x21a606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Validity
Not Before: Mar 23 08:30:18 2023 GMT
Not After : Mar 22 08:30:18 2025 GMT
Subject: CN=cbf7ac5d921ef3e3b892fe8ca96b0fa5c8aed7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:40:65:45:df:3e:92:40:3f:9d:19:ec:e2:
d4:ff:16:03:eb:57:26:ba:a5:f3:fa:e7:45:86:1e:
ca:bf:3e:16:d1:4c:08:e1:ff:69:0e:6f:dc:c2:09:
d0:d0:8d:80:3d:f2:7f:c1:a3:51:62:04:5d:90:7a:
62:b8:13:57:c8:f0:62:fa:c0:cf:d6:39:f5:4e:61:
c5:1c:f3:6e:2a:cd:7a:6d:1d:8e:25:05:74:f7:78:
03:b5:93:dd:8a:ca:1e:f7:41:92:a8:80:16:9f:35:
f1:b4:30:8e:52:8e:20:14:a9:08:f6:ed:b1:d9:75:
13:53:66:00:25:f7:0d:bc:71:ef:77:d7:4a:4a:bc:
4e:ab:dc:3d:c2:a1:f5:61:33:ba:93:e1:ed:b4:fb:
85:89:5a:e5:35:87:6e:b5:da:55:11:4a:a3:b6:bd:
74:d7:12:3e:9e:78:fa:75:49:e3:09:54:72:70:b6:
cb:77:38:83:70:18:30:f6:0d:96:2e:10:28:dd:57:
aa:c6:24:35:e1:4e:d5:49:0c:56:2f:ae:48:f9:af:
10:a7:33:42:50:60:d2:53:92:99:b0:2c:36:89:f2:
52:f3:61:37:4a:90:b2:d0:47:b7:98:9e:81:e3:5f:
c3:d3:10:5d:88:82:c3:a5:a5:d1:77:49:7d:5f:d9:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E7:5E:7D:79:0F:2F:15:70:05:21:57:06:AA:53:63:67:C0:8C:46
X509v3 Authority Key Identifier:
keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/cbf7ac5d921ef3e3b892fe8ca96b0fa5c8aed7b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.125.192.0/24
200.125.224.0/24
200.125.255.0/24
Signature Algorithm: sha256WithRSAEncryption
75:18:8d:36:f0:70:55:c6:e6:c5:29:76:59:af:00:5c:7b:02:
51:9c:2c:f5:13:db:45:57:bc:6c:75:e8:0b:c4:c2:5b:46:b1:
b9:56:2a:b0:85:13:b7:df:59:73:59:8a:ad:d6:bc:4b:de:37:
fe:d3:93:04:a5:31:04:96:5b:21:64:ec:c1:b0:6b:e3:55:f7:
f1:32:fc:59:09:1e:67:56:27:1e:bc:45:db:c2:ce:34:e8:ef:
11:8f:24:20:8f:d9:19:a6:c8:12:50:6e:f5:4b:82:28:9c:78:
82:4b:c3:cd:5d:68:db:ee:c8:1a:f0:44:2d:a3:3e:06:7b:f2:
30:54:53:c7:7f:7c:5a:82:b0:84:60:a3:df:de:66:8e:78:b9:
24:5d:cc:ad:9f:2f:36:12:a8:8f:4b:8f:d7:e6:af:02:f2:3d:
ca:e4:7b:5b:9e:74:e4:96:f8:61:3d:af:4f:54:64:4a:b7:03:
8d:d9:d0:24:49:e5:45:25:e4:e4:48:b7:59:ab:ef:32:db:04:
50:a4:2e:e4:26:67:25:a3:1d:39:0a:c4:c7:34:23:bb:88:90:
9e:ca:1f:ae:a9:82:df:1f:33:53:33:66:ab:af:73:25:fe:43:
94:ab:e7:e7:d3:ab:1a:bf:43:c8:10:6f:8e:86:14:2c:ad:93:
e6:13:51:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org