Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bf5d1ea4-01f4-494f-b3e2-d1d699ba80f1/5be81d6671eddbbfae9b88f93397dd0853872404.roa
File: 5be81d6671eddbbfae9b88f93397dd0853872404.roa (raw, json)
Hash identifier: U+6v4hDStd8QfdCUP6veH1E6TKj6GRIqHdxeMkHeysk=
Subject key identifier: A5:62:8F:20:09:53:BC:E2:05:6E:6B:BD:90:A8:DB:5B:3E:1A:B4:BA
Certificate issuer: /CN=a1d28f003bf3d4549fc8d703d5766ee22681fdb4
Certificate serial: 0DA089
Authority key identifier: 09:BD:30:26:1F:B0:3B:3C:61:C5:20:F5:9C:F3:1B:A3:57:D4:5D:83
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1d28f003bf3d4549fc8d703d5766ee22681fdb4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bf5d1ea4-01f4-494f-b3e2-d1d699ba80f1/5be81d6671eddbbfae9b88f93397dd0853872404.roa
Signing time: Wed 24 Mar 2021 14:30:25 +0000
ROA not before: Wed 24 Mar 2021 14:30:25 +0000
ROA not after: Tue 24 Mar 2026 14:30:25 +0000
asID: 52406
IP address blocks: 200.115.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 893065 (0xda089)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d28f003bf3d4549fc8d703d5766ee22681fdb4
Validity
Not Before: Mar 24 14:30:25 2021 GMT
Not After : Mar 24 14:30:25 2026 GMT
Subject: CN=5be81d6671eddbbfae9b88f93397dd0853872404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:05:1d:61:75:4a:37:83:07:a4:b2:4e:f7:61:
fa:ab:83:e0:04:65:e3:69:79:6f:59:1f:27:34:cb:
3b:c5:ef:53:2e:ba:a5:b3:39:72:8f:46:59:9f:0a:
09:76:41:ac:88:c7:08:09:1d:31:ee:94:b5:55:8e:
c2:bc:43:b5:49:62:a8:97:95:2c:e6:90:00:42:79:
68:4d:82:69:68:d9:02:98:ab:79:22:a8:ff:40:46:
89:58:8b:34:3b:6c:bc:3d:17:c6:97:e0:50:c3:15:
51:c9:05:a0:91:77:2e:df:77:43:2c:02:34:97:93:
a8:19:a4:9f:6c:25:15:a4:65:7b:60:ff:f9:cb:77:
30:da:1f:09:9e:a8:77:c1:39:7b:67:5f:72:e9:3d:
68:b4:af:f4:11:1f:f7:76:ba:3b:98:f9:35:08:e3:
24:4b:87:2e:6d:5e:1b:e0:7c:28:9d:6f:59:4f:c9:
85:b7:18:03:83:30:e0:d6:dd:49:c1:c4:9e:5c:b4:
0f:53:3f:48:44:e7:4a:11:7e:c6:99:9b:5d:7a:7a:
28:c0:8b:a5:4c:b8:74:1c:92:61:05:61:bf:6a:98:
67:a4:8b:ae:39:3e:5b:46:6a:a5:69:c7:84:66:d9:
97:03:92:aa:15:40:a6:c4:ad:d3:ee:30:2d:2c:ec:
5e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:62:8F:20:09:53:BC:E2:05:6E:6B:BD:90:A8:DB:5B:3E:1A:B4:BA
X509v3 Authority Key Identifier:
keyid:09:BD:30:26:1F:B0:3B:3C:61:C5:20:F5:9C:F3:1B:A3:57:D4:5D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1d28f003bf3d4549fc8d703d5766ee22681fdb4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bf5d1ea4-01f4-494f-b3e2-d1d699ba80f1/5be81d6671eddbbfae9b88f93397dd0853872404.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bf5d1ea4-01f4-494f-b3e2-d1d699ba80f1/a1d28f003bf3d4549fc8d703d5766ee22681fdb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.185.0/24
Signature Algorithm: sha256WithRSAEncryption
74:eb:c4:ba:a8:7d:73:7c:65:20:8e:6a:a4:4b:18:f1:16:c6:
74:59:cd:5a:8b:ae:40:53:6b:a9:27:42:f0:15:9a:ca:af:5a:
ed:a0:80:bd:dd:b3:5c:94:09:cd:2a:a3:cf:96:75:33:51:19:
99:ae:ae:79:94:0f:0d:98:b6:83:46:41:88:dc:d2:9f:38:b4:
60:c1:1b:3d:ca:e6:a8:3e:ef:0e:d6:dc:81:72:07:81:19:10:
3e:4d:12:36:d5:f5:e1:1c:91:72:41:52:9d:34:7b:27:ea:0d:
86:4e:8a:cf:c4:56:f4:ab:c9:4d:03:a1:63:12:4f:be:b6:c4:
17:3d:12:2f:3e:66:01:76:6e:3e:43:ca:a2:6b:ca:01:39:0e:
0f:bd:e0:01:d3:ce:be:81:04:f0:e2:39:41:15:ac:52:ab:be:
e6:05:38:19:54:39:66:76:e0:7b:b9:5b:29:54:e5:7f:4e:7a:
16:5e:11:06:d2:a6:4a:78:23:86:69:64:4e:7c:f1:13:dc:4e:
ee:cd:f6:67:4c:94:c8:09:7b:08:4d:00:28:d6:a9:31:5c:25:
1a:7d:5a:a9:bd:cd:43:ef:a1:c6:c9:d1:64:8b:8a:1a:a4:9c:
44:6d:d1:71:5a:89:37:31:b4:8d:e1:85:bd:bd:d5:5c:bf:c6:
59:6e:7e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org