Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/94d95d2f5240bfc348e82d7d56e97b7dd936c1d5.roa
File: 94d95d2f5240bfc348e82d7d56e97b7dd936c1d5.roa (raw, json)
Hash identifier: 47jGp2Oe23EY9xQaYEGUKOTksDyTD7uwJ06zYFrvFnU=
Subject key identifier: 56:8D:E2:4E:09:C0:67:AD:24:13:07:AF:C8:0E:51:A5:6B:DA:25:0A
Certificate issuer: /CN=4d6514d89948e6d41988b60c1228765a24fd7536
Certificate serial: 233219
Authority key identifier: BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/94d95d2f5240bfc348e82d7d56e97b7dd936c1d5.roa
Signing time: Thu 31 Aug 2023 13:56:14 +0000
ROA not before: Wed 30 Aug 2023 13:56:14 +0000
ROA not after: Sun 31 Aug 2025 13:56:14 +0000
asID: 263242
IP address blocks: 200.12.251.0/24 maxlen: 24
200.12.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2306585 (0x233219)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6514d89948e6d41988b60c1228765a24fd7536
Validity
Not Before: Aug 30 13:56:14 2023 GMT
Not After : Aug 31 13:56:14 2025 GMT
Subject: CN=94d95d2f5240bfc348e82d7d56e97b7dd936c1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:10:57:8d:12:5e:3e:ed:3a:95:6c:d1:3e:88:
69:81:91:dc:55:1a:9f:f6:b1:5e:39:45:bb:38:cb:
79:bd:e1:90:34:07:dc:40:7d:30:9e:87:48:f5:b9:
04:63:03:ec:57:ca:db:f3:24:be:04:0c:78:3e:91:
ad:30:6f:8c:c2:9c:8a:bb:8e:59:84:dc:ed:68:bc:
ed:98:46:9f:f9:53:86:42:2a:f4:1d:79:7b:85:d2:
aa:e2:78:b3:9f:eb:66:6d:c3:91:cc:e0:52:0a:ff:
5e:27:92:7d:ae:a1:b4:52:3a:ac:a5:75:92:69:37:
5f:72:31:4d:c9:75:1b:b7:3a:66:c9:40:db:f0:da:
ea:69:9b:59:0c:1d:eb:fe:1c:17:b9:2f:81:60:2c:
fc:b2:18:02:a0:cf:3f:bb:85:08:67:c2:e7:f4:e2:
f2:ad:46:b1:a9:21:e8:98:c8:d6:fc:30:66:b6:6a:
83:3d:0f:7e:a7:9b:24:cf:95:60:09:e0:c3:1c:af:
4c:0b:fe:01:43:42:0c:c7:bc:71:96:97:bf:9e:e2:
9b:71:f2:8e:15:7d:1b:42:17:c9:5e:71:b5:06:9f:
4c:ff:c7:5a:33:ca:a0:dd:6c:7d:ac:46:4d:b6:df:
30:43:84:4e:35:c9:ef:fc:13:6f:23:0b:84:f2:67:
a7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8D:E2:4E:09:C0:67:AD:24:13:07:AF:C8:0E:51:A5:6B:DA:25:0A
X509v3 Authority Key Identifier:
keyid:BB:CC:4E:12:80:1C:0A:59:B3:BF:A3:EE:9A:B2:28:AB:F3:33:D0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d6514d89948e6d41988b60c1228765a24fd7536.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/94d95d2f5240bfc348e82d7d56e97b7dd936c1d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d18ba138-fea9-49a1-b4cf-2f9988ace1c8/4d6514d89948e6d41988b60c1228765a24fd7536.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.12.251.0/24
200.12.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c6:5c:54:e0:4f:d3:84:e0:29:4e:df:a4:a9:04:ee:8a:fd:
bc:69:3f:eb:b5:6e:35:ea:4c:ae:a4:e3:74:aa:df:f6:02:5d:
1d:ec:bc:e3:71:9b:2d:9a:12:c1:0c:d9:c0:cc:84:e4:f4:e2:
00:22:84:81:e5:3f:2c:40:55:7f:5e:5a:2b:f7:b2:a5:52:f3:
40:5b:fe:6f:e2:56:b7:96:be:ad:49:f0:7f:b8:ca:35:02:e2:
17:af:ab:75:02:62:1c:20:aa:0d:3f:1a:1d:19:e5:14:15:32:
1b:82:6c:a2:d1:aa:49:c9:12:2c:f5:ad:17:4d:f1:95:55:bc:
9d:3f:e5:64:a1:54:d8:1f:9d:82:85:f3:04:3d:1f:b1:5a:b4:
56:4b:b2:73:cb:60:3b:cf:c7:92:46:1a:d3:6d:70:65:3c:35:
e5:c9:8a:a2:dd:6c:1e:56:91:e7:18:41:21:12:33:56:3f:87:
62:fd:00:78:ab:cd:03:48:f4:99:5f:4e:46:cc:93:9e:b8:a9:
9c:df:81:6e:13:ff:88:df:aa:c5:23:6f:d2:03:27:e2:23:86:
4c:af:0d:72:c9:62:d7:31:c2:67:aa:0e:1d:48:75:2d:8d:4e:
da:d9:13:f9:5a:4e:b8:8c:00:65:e6:a1:fe:b6:49:18:13:26:
f4:9d:1e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org