Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/03857712353620e3d32b2d5f89e08d1c111b7fbf.roa
File: 03857712353620e3d32b2d5f89e08d1c111b7fbf.roa (raw, json)
Hash identifier: PNkii1eD7tYOE0yYvETTDweIXfyQrD7zG/J/7p3Z3eM=
Subject key identifier: 22:99:71:97:69:74:0A:DA:43:64:5D:31:F8:6F:99:C8:D5:19:45:BE
Certificate issuer: /CN=e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0
Certificate serial: 09BEBB
Authority key identifier: FB:C5:93:04:19:B1:9A:69:80:9D:F4:2E:5F:F2:93:11:D0:5D:36:A4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/03857712353620e3d32b2d5f89e08d1c111b7fbf.roa
Signing time: Fri 01 Dec 2023 15:54:12 +0000
ROA not before: Fri 01 Dec 2023 15:54:12 +0000
ROA not after: Mon 01 Dec 2025 15:54:12 +0000
asID: 272902
IP address blocks: 200.123.54.0/24 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 638651 (0x9bebb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0
Validity
Not Before: Dec 1 15:54:12 2023 GMT
Not After : Dec 1 15:54:12 2025 GMT
Subject: CN=03857712353620e3d32b2d5f89e08d1c111b7fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:6c:06:d1:88:e0:32:a5:6e:02:e0:a0:e8:
c7:bb:2c:38:d3:a7:62:79:54:6a:7f:24:d7:19:30:
f4:23:34:67:67:5e:84:ac:fe:35:0b:ad:71:e5:24:
31:21:91:a1:5f:13:5b:7e:1f:f6:7b:c9:3b:b6:90:
77:51:4e:48:40:99:41:1e:5c:5d:6c:fa:2a:e6:bc:
9b:2e:5a:d5:24:58:e6:ab:f7:80:34:63:d3:c3:fa:
de:a4:7e:40:60:3f:d2:cc:e6:8d:c0:dd:49:8b:60:
97:86:43:a0:98:11:35:6b:86:db:08:ff:e7:f4:39:
3c:1d:db:fa:4b:d5:6c:12:5d:26:4f:01:79:42:6e:
c1:95:9c:e1:26:e6:af:67:4d:4a:7e:40:a0:d5:2e:
80:e5:8b:08:97:54:e0:44:39:d6:12:6a:03:97:df:
b6:b1:d5:76:8e:29:9b:96:83:68:3d:73:2a:0a:55:
0f:f2:99:ce:96:a3:59:0a:0d:8c:10:3a:1a:28:31:
7b:49:d5:ca:84:cf:94:84:1f:7c:b0:a2:90:16:71:
da:de:27:bc:58:54:34:73:e7:61:ed:dd:48:1e:45:
1f:b8:34:06:d1:36:9e:9c:e6:0d:e3:3d:23:2a:c9:
5d:b5:e8:93:b1:aa:ec:00:33:d6:bb:85:07:31:0c:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:99:71:97:69:74:0A:DA:43:64:5D:31:F8:6F:99:C8:D5:19:45:BE
X509v3 Authority Key Identifier:
keyid:FB:C5:93:04:19:B1:9A:69:80:9D:F4:2E:5F:F2:93:11:D0:5D:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/03857712353620e3d32b2d5f89e08d1c111b7fbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.123.54.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:7a:05:cc:21:93:db:ae:49:b5:36:80:08:54:57:76:5c:08:
3e:67:c7:65:58:7d:08:69:9b:13:cf:d9:a6:5b:f6:98:d8:bf:
5a:d4:7e:24:20:a9:6b:5f:0b:f4:c0:86:ba:95:68:2b:eb:a4:
f5:0a:13:3c:31:f4:3f:e2:7e:2c:62:4b:4e:4f:7f:7e:30:19:
08:8c:70:e7:70:36:48:3f:bc:8a:16:7a:77:a3:e8:d5:11:ac:
b6:5d:aa:01:cb:24:f6:e0:bb:4e:fd:57:58:85:01:cb:ef:77:
63:d8:06:75:67:aa:c7:14:cf:72:20:2c:f8:b4:34:ba:b6:72:
de:de:c6:17:4e:39:7c:25:10:b9:67:55:6b:23:14:0b:ee:9b:
34:5e:c6:cb:95:c0:2c:40:57:60:f5:eb:08:40:42:da:ad:3f:
0e:ee:50:b3:e6:3a:ed:0e:e7:4c:e6:8c:b8:33:37:f7:3e:8e:
b7:02:8f:b4:ae:6d:78:3e:6d:9d:fc:5f:05:be:a8:70:54:f0:
b5:c5:ca:ab:9f:33:0a:d3:a6:c4:c8:45:95:ea:6a:87:fd:4b:
8f:ae:31:ce:bf:21:76:a7:52:82:43:5a:56:95:d4:a9:bc:c8:
1d:ba:7d:ba:dc:3b:db:f8:57:4d:71:87:aa:0f:5c:88:5f:0e:
0a:b5:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org