Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb7655fd-7964-449b-bbdd-a3fb5bba6266/7f7505b58891188775021a4135079719856413fa.roa
File: 7f7505b58891188775021a4135079719856413fa.roa (raw, json)
Hash identifier: 3ruvfdVMGeGoKQ0YhljL0GU/KQicdb9F647vubaetDg=
Subject key identifier: F0:0B:B2:4B:93:F3:E7:11:36:4C:E6:18:2B:6E:8B:59:E7:70:ED:19
Certificate issuer: /CN=be397152a75956fca76ee04ce9c8bda3b156244d
Certificate serial: 237648
Authority key identifier: 9D:6B:B7:07:44:26:0A:61:E0:4E:52:9C:A4:B3:E2:6C:A3:86:46:1A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be397152a75956fca76ee04ce9c8bda3b156244d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cb7655fd-7964-449b-bbdd-a3fb5bba6266/7f7505b58891188775021a4135079719856413fa.roa
Signing time: Thu 24 Aug 2023 04:54:45 +0000
ROA not before: Wed 23 Aug 2023 04:54:44 +0000
ROA not after: Sun 24 Aug 2025 04:54:44 +0000
asID: 27810
IP address blocks: 200.14.40.0/24 maxlen: 24
200.14.41.0/24 maxlen: 24
200.14.42.0/24 maxlen: 24
200.14.43.0/24 maxlen: 24
200.14.44.0/24 maxlen: 24
200.14.45.0/24 maxlen: 24
200.14.46.0/24 maxlen: 24
200.14.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2324040 (0x237648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be397152a75956fca76ee04ce9c8bda3b156244d
Validity
Not Before: Aug 23 04:54:44 2023 GMT
Not After : Aug 24 04:54:44 2025 GMT
Subject: CN=7f7505b58891188775021a4135079719856413fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8c:dc:d4:88:3a:22:8e:64:e9:14:7a:ac:01:
d4:93:c8:cf:75:d2:96:94:cb:98:73:fb:72:95:0c:
eb:a2:05:3b:5a:99:9d:45:71:aa:2b:d6:b9:4c:35:
cb:09:33:7a:f7:94:10:a3:33:d3:99:0f:28:c2:2a:
3a:3a:0d:f6:60:5d:d6:5c:10:98:71:cb:4a:66:d5:
f6:43:a8:28:cd:07:ce:71:86:11:5f:e7:6a:4f:b5:
e5:1f:02:0e:64:66:c8:c8:52:44:33:cb:b1:63:cc:
70:2a:ee:c1:f7:da:f1:ca:85:50:65:f1:aa:fc:df:
2f:e8:93:96:6f:7a:17:e0:48:35:b6:96:4d:fc:09:
a1:b5:b3:52:bf:3e:ab:d3:43:ba:1d:14:33:96:3a:
cc:ac:ad:08:7d:13:38:2e:65:5a:53:0b:5b:93:ac:
1d:14:d4:5d:3d:66:ca:f1:ac:1b:a5:f9:83:91:cf:
ff:aa:b8:cf:53:04:fb:f3:ea:a4:75:33:ce:72:a8:
b8:79:58:c9:90:79:6b:7f:be:ed:f1:cd:05:b9:af:
75:72:d6:d2:17:be:c9:17:a4:d1:44:c9:71:f0:ec:
56:4c:a2:f5:a5:e8:d2:d5:70:e4:ea:37:98:1e:1a:
4b:12:91:bf:6d:d2:0c:7d:a4:a5:7a:4d:d3:b6:38:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0B:B2:4B:93:F3:E7:11:36:4C:E6:18:2B:6E:8B:59:E7:70:ED:19
X509v3 Authority Key Identifier:
keyid:9D:6B:B7:07:44:26:0A:61:E0:4E:52:9C:A4:B3:E2:6C:A3:86:46:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be397152a75956fca76ee04ce9c8bda3b156244d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb7655fd-7964-449b-bbdd-a3fb5bba6266/7f7505b58891188775021a4135079719856413fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cb7655fd-7964-449b-bbdd-a3fb5bba6266/be397152a75956fca76ee04ce9c8bda3b156244d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.40.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:63:e5:a0:6c:18:96:cc:47:cf:8a:1a:5b:47:04:79:c4:ec:
4b:46:0b:54:df:92:55:ed:96:d8:4e:08:41:3a:70:ba:72:22:
89:f2:41:04:cd:01:08:ef:02:d9:42:81:ed:1f:86:45:83:51:
1e:14:3e:94:69:a3:b7:c5:12:31:95:ed:cc:18:df:d6:26:4c:
ab:82:76:95:62:bf:c1:33:b0:85:c0:11:b6:43:ce:d0:4d:cb:
37:52:9e:61:e5:57:4e:5b:0d:59:3d:94:0a:25:20:dc:12:bb:
dc:e4:c1:c2:c0:2b:42:cc:a0:9e:31:ed:2b:6f:86:02:5c:41:
bd:66:a4:ad:2a:14:98:2f:37:1d:fe:1f:31:58:de:41:3b:cf:
a4:04:68:a7:0d:ce:ae:a6:cc:c5:62:bc:9f:52:d9:2d:0a:0d:
1e:ac:2e:48:62:56:ca:aa:5d:44:e3:9c:78:98:45:5e:d2:ef:
b9:48:3c:67:01:14:c4:d9:90:44:d9:6a:8c:99:84:58:5a:d4:
9e:77:9a:6c:b5:bc:32:4a:d8:20:66:35:69:e5:72:32:a9:cc:
e7:67:0c:09:a1:4c:eb:bb:ba:07:91:e4:ef:ae:4a:f6:03:50:
0d:4a:dd:80:8d:e0:55:d0:08:e3:b2:5c:dd:9c:83:ff:68:a6:
80:1d:7a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org