Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/17ccf3b3d745a7fed5f3fbac3c1a32ce3ad4ffc3.roa
File: 17ccf3b3d745a7fed5f3fbac3c1a32ce3ad4ffc3.roa (raw, json)
Hash identifier: PFaNYEMYoUhBOIuAsLX4GQ2iv6ZLxlILcZR4emQ9+1Y=
Subject key identifier: C7:D5:30:95:AD:3A:A7:44:5F:12:A9:48:42:6E:25:A6:55:2D:DA:80
Certificate issuer: /CN=37891eaab39a53321626b241200bbc4960887f67
Certificate serial: 2835A2
Authority key identifier: 1F:89:B3:12:35:F6:85:3A:92:FD:07:B9:11:D7:1D:11:B2:3A:76:48
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37891eaab39a53321626b241200bbc4960887f67.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/17ccf3b3d745a7fed5f3fbac3c1a32ce3ad4ffc3.roa
Signing time: Wed 20 Mar 2024 13:55:26 +0000
ROA not before: Wed 20 Mar 2024 13:55:26 +0000
ROA not after: Fri 20 Mar 2026 13:55:26 +0000
asID: 11556
IP address blocks: 200.33.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2635170 (0x2835a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891eaab39a53321626b241200bbc4960887f67
Validity
Not Before: Mar 20 13:55:26 2024 GMT
Not After : Mar 20 13:55:26 2026 GMT
Subject: CN=17ccf3b3d745a7fed5f3fbac3c1a32ce3ad4ffc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:d1:e0:fc:e1:73:a9:24:7b:da:3d:79:26:
ce:ac:13:f9:31:76:fd:13:f9:3f:eb:d0:32:08:16:
f7:13:a8:27:98:4d:ae:78:bf:f3:1a:10:a9:c3:99:
e8:be:5a:5b:26:fc:91:6b:4b:db:eb:a6:29:39:33:
c0:6b:17:6c:e6:c9:b0:11:5c:e9:43:ac:20:55:84:
53:d9:09:cf:8d:df:13:be:67:b4:1b:67:d1:79:e7:
16:fb:6e:16:88:7f:d6:ef:9d:6c:b7:58:60:28:61:
77:18:b9:7d:c1:c6:9b:bd:65:c5:03:48:02:b7:e9:
d5:a4:44:c1:de:59:f5:51:de:21:8d:ee:55:6b:e2:
21:03:82:72:10:45:4e:1c:9c:24:aa:0f:aa:9d:cb:
90:d6:6a:91:28:69:da:de:83:60:eb:0a:b8:52:d3:
ee:82:4f:a3:69:15:d3:41:83:54:15:b7:bb:9d:be:
08:35:4e:de:37:14:f4:a9:59:f3:4a:d2:14:e7:0f:
06:06:08:16:e6:d2:9b:c5:74:9d:71:5d:ee:5f:1b:
d5:36:16:3a:e4:74:a3:50:f0:53:03:ef:bf:43:52:
5c:5e:11:89:68:22:6f:59:fc:0f:c8:36:ad:6f:38:
d6:7c:1e:0a:2a:5d:a9:5c:56:b1:2e:14:d2:65:fd:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D5:30:95:AD:3A:A7:44:5F:12:A9:48:42:6E:25:A6:55:2D:DA:80
X509v3 Authority Key Identifier:
keyid:1F:89:B3:12:35:F6:85:3A:92:FD:07:B9:11:D7:1D:11:B2:3A:76:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37891eaab39a53321626b241200bbc4960887f67.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/17ccf3b3d745a7fed5f3fbac3c1a32ce3ad4ffc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d79a5726-c4dd-40b4-b1d1-bec495fd2e4c/37891eaab39a53321626b241200bbc4960887f67.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.33.125.0/24
Signature Algorithm: sha256WithRSAEncryption
41:48:5d:31:02:24:e7:8e:38:0b:c5:b1:de:f1:7f:66:b1:b1:
bb:4b:e5:34:d4:e2:d8:18:90:d2:a9:8c:a3:98:af:7b:93:0b:
82:3a:b1:a6:12:f9:da:f6:58:ef:67:6a:2d:a9:87:a5:f7:65:
a8:4c:f3:fb:01:e7:5a:5f:42:91:8f:97:50:93:b0:b4:f3:99:
57:c9:d8:21:ef:99:fd:36:4d:fb:fd:a9:16:70:d5:ef:10:18:
01:eb:02:55:71:06:c7:b9:8f:74:a0:dc:99:86:64:a9:f7:b0:
70:36:7a:e1:ae:8d:1d:3d:3b:91:73:52:48:e3:96:64:1a:cd:
b0:2c:ed:ca:fe:49:81:11:a5:ee:4e:03:e9:71:6e:a6:e6:f2:
11:ed:f2:0b:3d:c4:18:fb:ca:d2:8c:f7:a2:1e:b0:d9:9b:e6:
b1:6f:c6:0b:0d:0c:c2:db:53:e7:6a:ae:72:83:9b:7a:b4:18:
dc:31:32:30:36:7b:fd:57:97:22:f6:0f:a0:9c:0e:1b:83:cb:
ea:7d:ed:8b:8b:ce:b5:1a:ba:e6:a3:c8:30:ac:be:1c:43:14:
3a:46:64:a7:18:1d:9e:3f:20:c5:05:f2:50:1c:ab:c5:25:86:
be:91:65:7a:a3:57:3d:87:3d:cb:12:62:51:2a:5c:c8:16:78:
8a:e8:0c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org