Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2ba5c4b3770dca3d43a0db812bf768c667bf6a7b.roa
File: 2ba5c4b3770dca3d43a0db812bf768c667bf6a7b.roa (raw, json)
Hash identifier: XM8Dcs6EImEZVUJB5rMdb7czHTLpRE2YHFtHpy6fuGY=
Subject key identifier: EA:5B:5E:D2:AF:12:A1:F8:8F:A1:40:A2:4F:F5:D7:5C:E3:32:E2:03
Certificate issuer: /CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Certificate serial: 258B2F
Authority key identifier: E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2ba5c4b3770dca3d43a0db812bf768c667bf6a7b.roa
Signing time: Mon 05 Feb 2024 18:13:03 +0000
ROA not before: Mon 05 Feb 2024 18:13:03 +0000
ROA not after: Thu 05 Feb 2026 18:13:03 +0000
asID: 263684
IP address blocks: 200.115.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2460463 (0x258b2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Validity
Not Before: Feb 5 18:13:03 2024 GMT
Not After : Feb 5 18:13:03 2026 GMT
Subject: CN=2ba5c4b3770dca3d43a0db812bf768c667bf6a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:c5:6d:c5:f1:4a:d1:98:0d:0d:2c:a1:90:
f4:2a:05:49:22:8a:8f:e7:fb:f8:b8:f5:95:5b:a6:
d6:91:a6:2e:fb:d1:53:37:d8:75:b8:47:84:09:bb:
8f:12:16:96:8f:01:ba:2c:f0:ea:f8:1f:2f:1c:d2:
20:a7:2e:35:b4:c2:4e:41:33:95:0d:aa:34:a8:2b:
09:be:77:f4:dd:d7:cc:26:6d:9f:f1:5c:24:ca:79:
2f:94:29:86:a0:85:00:84:83:b4:ef:88:cc:f7:96:
3b:a5:bc:bf:11:25:68:43:b7:a8:8e:a9:f6:9b:4b:
16:78:61:a6:8a:67:73:8a:49:5b:2e:09:02:b4:87:
a4:3b:72:a6:96:26:4b:8c:14:ec:46:16:6a:1d:6d:
f5:44:d9:1b:78:d4:18:3d:a4:a8:36:ec:f9:a2:95:
eb:ea:fc:68:e3:04:7e:b8:61:a0:a3:40:60:d0:ef:
7c:d1:bf:53:91:09:ea:4d:fe:69:e4:45:c8:44:b4:
b7:c2:f9:63:53:81:c2:fe:c9:b5:e1:40:eb:e3:1d:
60:f0:ff:5d:88:f6:89:61:48:da:21:4e:ce:20:90:
34:93:d8:25:27:fc:cb:f4:c5:02:2e:7f:85:5c:ae:
be:5b:a7:d5:c9:6d:2c:fb:3d:f6:e9:ac:dd:58:fc:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5B:5E:D2:AF:12:A1:F8:8F:A1:40:A2:4F:F5:D7:5C:E3:32:E2:03
X509v3 Authority Key Identifier:
keyid:E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2ba5c4b3770dca3d43a0db812bf768c667bf6a7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.24.0/21
Signature Algorithm: sha256WithRSAEncryption
50:08:b4:2a:73:70:8b:f4:97:cb:73:a9:eb:23:30:de:58:75:
25:6d:6b:43:4e:f4:8a:49:89:93:c2:86:67:bd:a5:42:91:45:
bb:57:74:f1:a4:02:e9:41:0d:1c:9a:fd:53:d6:05:11:ef:93:
f4:70:a6:52:d8:53:f1:9b:d3:ae:1c:5d:0b:de:59:af:7c:81:
25:88:ae:79:24:1c:d0:92:7c:c6:c4:3d:8c:29:39:06:de:e6:
cd:7f:16:96:c6:ad:99:06:c5:8b:a5:3a:24:57:93:e6:bd:05:
86:94:1e:d5:f0:51:74:19:5f:e5:c9:84:d9:17:f4:f7:20:ce:
47:66:95:c3:e5:85:67:1b:bc:e5:32:38:f8:7b:b2:2b:58:e7:
62:64:bd:2f:0b:91:9f:4c:94:4e:0b:22:fb:38:4e:f4:1f:af:
5c:15:dc:87:f2:55:8b:aa:82:fe:90:b8:3c:a1:e6:2b:c5:a8:
78:95:cd:d9:56:64:85:8d:95:cd:39:a5:1b:8a:45:67:55:e9:
7a:80:10:1b:0e:97:ba:a8:71:5e:15:5f:d1:9c:5c:2a:c4:f3:
dd:53:0c:48:83:69:95:5b:09:d6:f0:10:21:49:f8:2e:cc:11:
ac:cd:db:e3:77:86:ec:c5:78:2b:d1:a7:9d:6b:84:a2:cb:27:
74:03:b9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org