Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/ab0944280d15be942db002ce3bbc5381367b8118.roa
File: ab0944280d15be942db002ce3bbc5381367b8118.roa (raw, json)
Hash identifier: qISgDqg/smqvQKrjcZOi7Tav50WGWFP+Cnv7NERKpZg=
Subject key identifier: C5:D3:BE:51:07:A6:81:6C:B0:DC:F8:DB:5A:A5:0E:85:CB:AA:E7:58
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 288BC5
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/ab0944280d15be942db002ce3bbc5381367b8118.roa
Signing time: Fri 03 Nov 2023 14:20:10 +0000
ROA not before: Fri 03 Nov 2023 14:20:10 +0000
ROA not after: Mon 03 Nov 2025 14:20:10 +0000
asID: 3816
IP address blocks: 152.200.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2657221 (0x288bc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Nov 3 14:20:10 2023 GMT
Not After : Nov 3 14:20:10 2025 GMT
Subject: CN=ab0944280d15be942db002ce3bbc5381367b8118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:85:76:be:2f:af:f8:60:d0:c7:1e:47:d2:
9f:d4:fb:42:99:df:7b:57:67:e6:c0:b6:3a:a9:df:
5c:bb:bd:dd:32:f0:5d:c0:c9:54:a0:e5:9d:1d:fa:
20:93:f0:53:92:92:45:4a:8a:91:25:6a:d0:8d:50:
d7:3a:fd:9d:dd:ea:c1:02:d5:7e:8e:7e:2d:69:0f:
4d:bc:44:6c:4b:3e:10:7a:24:7f:95:b1:95:31:f5:
61:85:fa:c3:68:07:ff:48:0b:72:be:f2:57:a6:2b:
8b:f0:af:16:08:c3:88:47:b0:d5:fa:9a:02:bb:15:
24:bd:9c:ce:3a:bc:88:1b:e4:3a:98:2b:1f:77:3a:
c9:c7:01:e9:f6:fa:56:9d:8f:02:05:6a:0e:06:3a:
cc:0b:d1:bd:d2:fd:2e:21:cc:dc:27:12:d5:4c:c8:
31:80:26:b7:80:42:fa:9d:ab:d4:ea:d4:d9:b8:cb:
9a:fa:64:1e:a4:93:23:59:90:7b:ca:1c:5f:13:e5:
73:37:6a:79:4a:53:94:ce:1c:fc:9d:5a:a8:ca:ca:
69:75:03:cb:8d:fa:26:8a:bf:e0:a2:60:0e:cb:39:
ef:49:d1:94:62:80:ac:b0:c1:ac:76:1d:6e:3e:4f:
19:80:2d:6a:fd:af:8c:a1:df:53:a5:c4:3d:9f:69:
ad:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D3:BE:51:07:A6:81:6C:B0:DC:F8:DB:5A:A5:0E:85:CB:AA:E7:58
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/ab0944280d15be942db002ce3bbc5381367b8118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.200.208.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:7d:5a:d2:6d:ad:81:14:fd:44:12:ae:54:0d:8a:91:61:13:
91:4c:a6:04:d0:7c:32:6a:e1:10:18:75:c0:ad:af:3e:6f:7a:
7f:04:24:c4:d3:b9:9a:86:6e:8f:7f:ca:ed:74:53:ea:c9:3f:
41:45:4c:eb:10:f3:6a:0b:39:d0:be:28:4b:e1:c3:64:0a:3c:
b2:fb:22:35:e0:6c:a4:8b:c5:f4:b7:c0:44:31:00:2d:b9:75:
ca:87:f3:02:77:d9:4f:d1:ef:e0:4a:b2:21:53:b8:a0:4d:7d:
50:98:ce:96:2d:a5:a5:d7:11:2e:6c:ba:4a:86:06:14:57:52:
21:bd:50:47:de:0b:46:f4:80:63:a9:6d:e5:65:40:d9:e3:17:
ce:90:f6:b9:d5:04:de:26:ce:90:7b:dd:0f:79:91:73:cd:93:
27:f7:64:b0:b8:c3:92:f5:82:fb:46:fc:93:ed:e4:9a:95:69:
da:d3:53:fb:79:fa:55:f8:ae:8c:11:22:e8:3f:4a:38:ac:7f:
74:18:9b:9a:9b:de:f3:24:17:02:27:51:bb:9a:7e:2b:60:a5:
62:5a:cc:6e:b1:e1:0a:54:bb:9f:8a:30:92:89:d6:50:f0:fd:
87:1e:3f:58:90:59:d8:4c:a6:41:b3:2f:1d:f3:87:90:4c:0c:
e7:3a:d8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org