Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/25a83c7de9f0631b4c8848503aeebff4df8d4017.roa
File: 25a83c7de9f0631b4c8848503aeebff4df8d4017.roa (raw, json)
Hash identifier: cHu277a4Imj4sCGkJrODV5djbESl8j3h2O4psjyF9G4=
Subject key identifier: 9C:EA:67:06:2A:48:38:C6:EB:07:19:9D:DF:DD:5F:0D:81:46:B5:41
Certificate issuer: /CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Certificate serial: 19539F
Authority key identifier: 21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/25a83c7de9f0631b4c8848503aeebff4df8d4017.roa
Signing time: Wed 13 Jul 2022 12:19:42 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 22927
IP address blocks: 179.0.14.0/24 maxlen: 24
200.13.42.0/23 maxlen: 24
200.33.82.0/24 maxlen: 24
2801:0:440::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1659807 (0x19539f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=25a83c7de9f0631b4c8848503aeebff4df8d4017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:24:78:73:cd:0f:95:0d:16:93:23:c7:bd:52:
fa:d4:49:88:56:bf:c5:34:08:2c:bb:41:14:6e:24:
5c:1d:0a:18:45:a1:8e:1c:6a:39:b9:f9:88:d2:bc:
a6:65:46:46:af:ec:66:db:1d:e1:72:6a:5c:27:2b:
e3:34:80:9e:35:aa:76:b4:15:9c:da:62:04:29:0c:
db:fb:7b:95:74:f7:a1:4c:e0:dc:ac:ab:ad:8c:66:
69:df:55:c4:49:91:3a:43:a3:7c:74:8d:13:33:d6:
1c:77:dd:e0:de:cb:ba:c2:57:15:c0:d8:be:04:eb:
16:41:2c:8f:d9:15:23:76:4f:17:de:eb:89:a5:fa:
c5:ef:a8:29:95:00:16:61:d2:ed:0a:2f:58:68:e8:
1c:ac:d7:e7:57:cc:d2:40:a4:fd:6d:6c:77:93:c7:
b4:38:42:0e:81:e2:cd:85:46:4c:a7:f4:4e:b2:03:
cc:49:44:de:e2:f5:f0:53:21:5c:d5:21:1b:95:b6:
0f:38:b4:90:f4:16:18:e5:0d:5f:1c:b5:d9:9a:8c:
2e:7e:92:70:89:a7:70:80:12:6b:62:f8:c1:81:c1:
b6:a5:ee:74:7c:67:29:93:a5:fe:31:b8:af:05:a5:
e6:83:69:1c:4c:f5:0a:33:a9:08:7f:22:01:d2:67:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EA:67:06:2A:48:38:C6:EB:07:19:9D:DF:DD:5F:0D:81:46:B5:41
X509v3 Authority Key Identifier:
keyid:21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/25a83c7de9f0631b4c8848503aeebff4df8d4017.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.0.14.0/24
200.13.42.0/23
200.33.82.0/24
IPv6:
2801:0:440::/48
Signature Algorithm: sha256WithRSAEncryption
21:9c:1d:65:c7:b4:f7:31:7f:e0:89:8c:4e:d6:a4:67:57:63:
03:d0:57:60:42:80:d6:1a:c2:92:8b:c9:2a:b3:c4:5d:8b:b7:
2a:25:06:25:e4:f4:76:f0:5b:79:50:2e:16:dc:0f:1a:b7:a3:
20:b0:40:d5:6a:e1:81:e4:60:a5:d5:25:3b:6e:03:46:9b:9f:
27:1b:38:e5:2e:04:5f:9a:2c:b9:98:d3:11:63:1e:b1:6e:36:
15:e0:47:e7:c4:47:6a:23:6c:e9:f2:37:ff:00:2f:8e:a4:12:
db:31:17:9d:2f:24:3b:aa:39:d1:71:ae:c2:57:d5:35:86:d2:
44:72:7d:2f:3d:3a:e5:fe:70:dd:0a:34:1c:86:9b:b4:e1:b1:
05:7a:32:ed:9b:46:5e:42:e2:38:1f:9e:6e:cd:1f:1e:f5:b8:
f8:71:a0:a4:78:55:e2:fb:41:6a:83:45:69:a5:ff:45:8e:a7:
a0:fc:b1:b6:95:a5:f4:f8:49:0d:97:1e:59:a9:21:7b:09:55:
3b:f4:24:df:81:6f:d3:4b:e3:a2:d3:43:c4:c2:b7:8d:09:8b:
1b:d0:e0:a7:08:c1:c3:cd:f6:da:a6:68:1e:c6:73:7c:78:ad:
9f:0a:31:0b:49:9f:f6:82:17:d8:56:ac:ba:48:0e:05:a4:75:
74:65:a5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org