Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/901b6359f54db17c161c52d915195b69fa211604.roa
File: 901b6359f54db17c161c52d915195b69fa211604.roa (raw, json)
Hash identifier: aN/RmnRojm5Ureuv1LP2QLRYMbK4GEfCc5XMUpQT0BI=
Subject key identifier: D9:25:EA:04:A3:1A:9F:22:66:AC:33:5F:A4:41:52:94:49:4D:DE:1D
Certificate issuer: /CN=4cba7f8bd719e527c075d1975618d1234b50de72
Certificate serial: 0DB559
Authority key identifier: CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cba7f8bd719e527c075d1975618d1234b50de72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/901b6359f54db17c161c52d915195b69fa211604.roa
Signing time: Wed 24 Mar 2021 14:31:38 +0000
ROA not before: Wed 24 Mar 2021 14:31:38 +0000
ROA not after: Tue 24 Mar 2026 14:31:38 +0000
asID: 27826
IP address blocks: 200.16.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898393 (0xdb559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cba7f8bd719e527c075d1975618d1234b50de72
Validity
Not Before: Mar 24 14:31:38 2021 GMT
Not After : Mar 24 14:31:38 2026 GMT
Subject: CN=901b6359f54db17c161c52d915195b69fa211604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:ff:23:2e:88:5e:5f:bb:5b:71:90:36:09:
44:54:d1:8c:01:0a:6f:d5:42:54:b1:4d:54:e1:41:
e1:70:54:c7:c2:b5:85:f3:21:4a:a3:3c:8a:32:11:
03:60:48:9f:aa:9a:55:86:14:94:9d:e8:f8:44:6b:
60:c6:00:ee:e7:fa:a0:1c:b5:59:ca:98:b4:2f:ae:
ea:69:2e:f1:5d:28:6d:58:41:a6:52:12:a1:1d:88:
b8:19:1f:bf:e5:33:7f:aa:9f:77:07:7d:78:2f:e9:
b6:52:99:7b:b7:4d:20:72:78:2e:1b:dc:0b:af:49:
f5:a2:c2:a3:66:14:b5:44:b9:e6:14:bb:aa:aa:61:
d5:03:9e:93:39:e6:5e:e5:19:4a:ef:af:ec:63:e9:
d0:90:45:46:61:17:65:5f:51:6b:0e:51:01:49:c8:
cd:44:2b:62:8e:36:66:c2:bc:41:2a:78:28:96:7b:
c8:19:c2:e0:9b:75:a4:0a:ee:4b:a9:0b:8c:9a:4e:
b0:17:03:d1:91:1b:9a:26:42:df:75:bc:83:d0:9c:
19:d2:68:4d:79:7a:3e:c1:7a:2a:f5:d5:2c:3b:50:
2b:04:c6:cc:a6:9d:3e:a1:6b:04:6e:17:58:fa:b6:
4d:97:c2:32:27:c5:7e:ab:81:30:0d:3d:71:09:76:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:25:EA:04:A3:1A:9F:22:66:AC:33:5F:A4:41:52:94:49:4D:DE:1D
X509v3 Authority Key Identifier:
keyid:CF:2F:EB:06:A4:55:CC:73:B6:0F:06:05:AC:36:CA:9D:CA:65:6F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cba7f8bd719e527c075d1975618d1234b50de72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/901b6359f54db17c161c52d915195b69fa211604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bd110941-bdba-4d04-ad38-d85fb1aeaab3/4cba7f8bd719e527c075d1975618d1234b50de72.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.16.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:68:5c:45:30:ad:ec:20:bc:6f:6e:94:54:c6:6f:50:cd:6d:
d0:45:35:b4:e6:33:c6:a7:cf:78:8c:62:ba:c1:ce:16:37:23:
64:61:52:2d:0b:d3:e8:c9:48:84:5a:46:45:68:54:84:80:89:
4b:c2:e4:b9:10:24:6f:2f:6f:a3:8d:6c:87:bb:05:8d:04:f0:
57:ab:1b:16:a8:b4:7e:2f:c6:16:87:93:d2:e1:fc:19:25:e1:
c0:95:b4:23:fe:01:c3:be:b7:d0:26:f6:63:ab:ee:65:d6:45:
e5:8b:12:2a:58:18:6d:b6:3c:49:2c:88:05:6b:93:35:a2:e4:
84:19:5f:33:c0:c5:75:af:48:e6:8d:9c:32:3a:91:79:43:72:
23:8d:54:40:57:73:67:14:1d:5c:a0:de:65:97:d9:b6:7c:e0:
f7:50:7f:31:9d:fa:b2:7c:74:83:c7:dd:26:6e:cd:18:32:1d:
c4:fb:a2:7b:22:5c:9c:99:80:d0:f0:bf:70:33:e1:42:86:0d:
09:2f:1f:90:75:84:0f:24:73:af:a6:5f:c2:87:18:3e:e6:04:
47:e3:74:2f:b7:7b:96:e2:bb:4b:a5:d7:2a:d6:9b:7b:d9:10:
94:a5:15:3d:c5:f9:55:60:6f:b4:76:88:1c:7e:99:ce:33:08:
49:fb:f5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:03 2024 by rpki-client on console-fra.rpki-client.org