Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/ca6ef0d67696b48e17dcfeb980472783aef10124.roa
File: ca6ef0d67696b48e17dcfeb980472783aef10124.roa (raw, json)
Hash identifier: z1yWgr2+0+dgkmNi07GKi000gjqFUhhGqPfGM6I8cHw=
Subject key identifier: BE:1A:DE:7C:7F:C3:D1:D8:95:1E:6F:2F:CA:75:28:63:85:98:4C:EE
Certificate issuer: /CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Certificate serial: 23BFAD
Authority key identifier: E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/ca6ef0d67696b48e17dcfeb980472783aef10124.roa
Signing time: Wed 22 Nov 2023 12:46:14 +0000
ROA not before: Wed 22 Nov 2023 12:46:14 +0000
ROA not after: Sat 22 Nov 2025 12:46:14 +0000
asID: 7005
IP address blocks: 200.115.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2342829 (0x23bfad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c
Validity
Not Before: Nov 22 12:46:14 2023 GMT
Not After : Nov 22 12:46:14 2025 GMT
Subject: CN=ca6ef0d67696b48e17dcfeb980472783aef10124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:be:10:38:ef:e2:90:c0:d6:b1:1f:6c:2f:
92:28:23:a2:80:d8:21:d5:6a:e9:f7:2c:a3:60:4d:
60:87:50:29:e3:49:ee:99:60:99:39:5f:52:0e:3f:
fe:ea:7b:06:a6:c1:99:65:4f:e6:c5:49:0a:20:67:
e2:61:a4:98:76:90:ee:5f:ff:8f:97:e8:13:3e:a6:
4d:54:6e:e5:90:89:c1:65:25:41:90:40:f2:ea:cc:
1c:2a:7c:b3:68:66:ca:a6:11:61:7e:0c:fa:16:16:
12:40:dd:7b:b5:ee:11:07:41:d4:70:b2:29:a4:2f:
45:91:b0:68:8b:f6:c9:34:3b:a0:af:29:6e:08:9e:
e6:7c:13:90:20:cf:93:d4:55:3b:d9:c6:7e:6e:1a:
5e:84:05:f6:26:ab:ce:30:7b:7c:c2:db:da:71:4f:
98:6f:08:ba:4c:63:be:55:5d:57:32:9a:6b:67:08:
dd:e5:17:76:99:e0:9e:cd:e3:5a:82:0c:2e:02:65:
48:3a:30:79:f0:d2:70:18:bd:18:d8:55:1b:ef:a8:
ff:d7:16:40:45:3c:f0:9b:ec:ea:72:25:c3:8f:dc:
1b:0a:35:11:f6:a8:fe:00:c7:28:88:b1:33:73:8e:
6b:21:cc:00:9a:04:70:a3:1e:16:91:14:00:c2:92:
0e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1A:DE:7C:7F:C3:D1:D8:95:1E:6F:2F:CA:75:28:63:85:98:4C:EE
X509v3 Authority Key Identifier:
keyid:E2:B1:80:8C:7C:7A:FF:C0:8C:31:F3:E7:43:94:C5:AC:89:04:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/ca6ef0d67696b48e17dcfeb980472783aef10124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b2476a48-3dc9-4736-bf9f-d761baf437c2/2fffc1e0bb6d5fea8529c4fe65bda76f72d4c88c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.28.0/22
Signature Algorithm: sha256WithRSAEncryption
26:ac:85:df:f5:18:fb:3e:6f:2a:90:66:ed:3b:c9:39:33:95:
66:93:ff:3c:ff:9f:f6:d5:42:a7:27:64:47:34:fd:f7:09:b1:
35:2f:7a:cf:e0:10:8e:a4:69:c9:05:ae:4c:38:35:36:d4:66:
ff:49:84:53:83:cd:73:e4:a7:ab:3f:57:69:f6:22:b7:83:8e:
05:c3:31:e7:19:b7:dd:99:aa:13:f4:d4:a3:6a:2a:e3:4b:00:
b9:0c:ea:23:f7:93:e7:ef:0a:84:8f:14:35:e9:c3:fe:95:cc:
c4:ff:e9:37:0a:5f:dd:06:d4:04:e0:62:26:ab:18:9e:05:95:
fc:51:14:d4:65:dc:cd:96:5d:31:54:62:4e:d8:e8:1d:47:a3:
1e:b4:25:3a:fb:79:5e:ef:bc:93:bb:a3:d5:02:76:6c:f7:fe:
f0:84:3b:12:47:45:1d:9c:e9:64:7b:09:12:ec:86:3d:05:82:
fe:5e:94:d9:1e:13:cc:43:c9:18:0f:01:bf:b6:e6:5e:2d:96:
4c:a6:93:ea:a7:12:c8:5d:eb:ae:12:14:ab:9e:7a:ec:76:e4:
9c:9a:66:08:6a:9c:ad:05:b4:c9:f1:de:af:56:2d:58:8c:58:
54:69:90:da:06:d7:50:60:cf:3c:bd:4b:e3:9b:97:f6:b7:99:
36:36:e4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:45 2024 by rpki-client on console-ams.rpki-client.org