Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/ffc2e5d7644db5d693ab5af935c612008e344e02.roa
File: ffc2e5d7644db5d693ab5af935c612008e344e02.roa (raw, json)
Hash identifier: emG1O96oqx6SpZkqMjKNkTYuMFHo1dcYALf5rAlreJk=
Subject key identifier: 22:AE:5E:54:F4:55:31:DD:D5:8F:E3:5E:90:D8:39:2A:34:59:1D:5E
Certificate issuer: /CN=bff7b3f674f44a97ef26d385f1f6cb77da502739
Certificate serial: 191E69
Authority key identifier: 4F:AC:50:32:15:04:B2:B9:69:5D:DF:F5:43:01:D3:D4:EE:29:D4:40
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bff7b3f674f44a97ef26d385f1f6cb77da502739.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/ffc2e5d7644db5d693ab5af935c612008e344e02.roa
Signing time: Thu 29 Jun 2023 23:10:32 +0000
ROA not before: Wed 28 Jun 2023 23:10:32 +0000
ROA not after: Sun 29 Jun 2025 23:10:32 +0000
asID: 262191
IP address blocks: 200.3.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1646185 (0x191e69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff7b3f674f44a97ef26d385f1f6cb77da502739
Validity
Not Before: Jun 28 23:10:32 2023 GMT
Not After : Jun 29 23:10:32 2025 GMT
Subject: CN=ffc2e5d7644db5d693ab5af935c612008e344e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8d:96:bf:cd:76:22:5a:4c:08:1f:a6:65:06:
62:bf:90:08:df:ba:45:0c:62:eb:a1:fc:24:df:41:
60:45:ce:ad:a4:25:75:a1:52:b7:ef:a3:0a:7f:89:
b3:81:21:1c:b6:71:3c:78:b2:ac:ca:7b:12:15:6d:
9e:87:ec:76:99:f0:f1:df:2a:8b:4d:94:c3:86:c9:
70:f3:6d:e1:9c:7a:3c:17:78:a8:53:dd:fe:02:e2:
af:0c:08:c7:53:bc:f9:7f:6d:87:21:58:7c:9f:5c:
13:96:9f:ed:bf:ee:14:95:51:a3:a4:71:be:6c:e8:
d6:71:04:11:f9:68:80:42:6f:66:fb:a5:53:6f:49:
e7:5f:d8:28:1e:01:06:9b:77:5f:63:5e:de:5e:2d:
98:57:12:2b:d7:f8:0d:38:89:49:bd:e4:66:56:c0:
fe:4e:37:27:00:ec:82:8c:e2:81:6d:96:cd:83:3e:
04:82:e7:52:4b:5d:b0:eb:fa:c6:2a:e3:d6:a3:5c:
54:13:f5:2e:f4:cc:25:94:c0:78:61:1e:ac:6e:1b:
f7:fa:3b:e4:16:08:7f:e3:e8:9b:96:90:69:76:0d:
ca:32:23:77:6c:be:50:d7:85:c0:b0:f7:e1:18:ea:
1a:e1:3a:a3:1a:35:81:c0:da:81:71:be:90:58:ce:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AE:5E:54:F4:55:31:DD:D5:8F:E3:5E:90:D8:39:2A:34:59:1D:5E
X509v3 Authority Key Identifier:
keyid:4F:AC:50:32:15:04:B2:B9:69:5D:DF:F5:43:01:D3:D4:EE:29:D4:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bff7b3f674f44a97ef26d385f1f6cb77da502739.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/ffc2e5d7644db5d693ab5af935c612008e344e02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bc9e6b04-9b7a-46b6-b81b-7abe9daac98f/bff7b3f674f44a97ef26d385f1f6cb77da502739.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.193.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d2:df:ff:df:a2:72:57:e2:81:b5:e3:bf:a4:ce:88:f3:5d:
0b:b3:34:5f:0f:de:dc:a3:05:68:cd:dd:fc:fc:ce:89:8e:84:
b2:6e:87:34:94:b7:6b:cb:a4:cf:54:31:46:0c:d7:7c:97:32:
43:f5:a7:d9:cb:6a:47:fa:69:50:62:02:1e:a6:3d:95:41:84:
68:73:88:40:aa:a1:64:ae:38:52:86:f3:7a:19:9b:a2:f1:27:
9d:4d:b4:05:50:08:c3:18:ae:54:8e:56:6d:84:41:da:b7:2d:
3e:c0:a9:11:1c:2b:dd:f7:e2:52:7d:b3:53:60:03:2e:51:e0:
2b:5f:1c:b2:1d:98:92:80:89:12:62:11:2e:bc:d8:f7:58:cb:
d0:72:bc:af:96:03:a2:0b:98:a5:50:bc:a4:3b:db:c7:fc:b6:
85:86:4f:36:95:13:9d:4d:ba:35:3b:67:05:be:87:c1:f1:4f:
8c:f0:31:56:b7:c2:4e:de:72:51:a5:9b:dd:49:c3:4a:ad:43:
19:ce:05:97:eb:45:1b:0e:22:fc:ad:70:87:31:d9:99:55:16:
2b:16:32:a4:16:3c:ef:b1:eb:8b:a3:61:03:aa:2d:1f:31:59:
80:82:d6:d9:8e:9c:43:07:f6:df:6b:a2:48:11:e7:e5:ea:cd:
9d:5b:74:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org