Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2a9edbafd8707b087ddb693d6a70870beacffd7d.roa
File: 2a9edbafd8707b087ddb693d6a70870beacffd7d.roa (raw, json)
Hash identifier: Gd+Q8BvZBA3Tul2VTOfDKo90BWFhMZQNEoWKF7iKJ+o=
Subject key identifier: 1F:35:31:0E:3B:72:C4:81:52:9B:A8:D3:93:DD:34:0C:DF:B2:1E:05
Certificate issuer: /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial: 0366C5
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2a9edbafd8707b087ddb693d6a70870beacffd7d.roa
Signing time: Wed 19 Jul 2023 21:54:09 +0000
ROA not before: Tue 18 Jul 2023 21:54:09 +0000
ROA not after: Sat 19 Jul 2025 21:54:09 +0000
asID: 7418
IP address blocks: 200.42.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222917 (0x366c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
Validity
Not Before: Jul 18 21:54:09 2023 GMT
Not After : Jul 19 21:54:09 2025 GMT
Subject: CN=2a9edbafd8707b087ddb693d6a70870beacffd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:fe:3c:68:f5:e6:96:11:23:c9:1f:d9:71:
c4:47:20:81:41:ca:c7:52:15:4f:a8:b8:48:c8:bb:
43:d2:7c:2f:eb:69:8a:e4:06:09:55:c4:45:16:ba:
eb:c0:29:01:7e:5f:8a:15:e5:97:b3:69:cb:6d:84:
cd:3b:65:15:e0:3b:3a:88:5c:81:91:06:19:48:46:
be:d5:85:e6:93:85:9a:59:98:ba:e4:d6:e8:2b:ee:
91:4f:4b:dd:4b:e9:a3:1a:d8:14:86:b1:cc:38:12:
b2:a7:e1:19:6a:65:59:fc:b7:8b:0b:57:35:f8:d5:
43:28:06:3d:e2:05:8b:cc:93:30:80:ce:37:31:b0:
a4:b7:79:4d:9f:6f:88:e9:99:af:3b:08:79:5d:bc:
d9:0a:2d:41:4c:b0:68:6b:51:46:9a:01:ad:c1:08:
66:ca:0b:5a:15:c5:bf:d9:3d:e0:88:d8:9e:00:ff:
d6:85:89:cd:df:8c:9b:e7:07:8b:7e:0a:d4:6b:16:
09:b0:5f:3d:5e:8c:8c:52:2a:9e:c2:72:3b:91:fc:
b7:fe:bb:3d:5f:13:3c:00:af:ee:6c:a2:9a:8f:19:
cf:86:fd:70:85:c2:1b:2d:8f:4d:1f:fb:3f:00:0e:
23:38:1a:3d:3d:64:2a:af:6a:a5:f5:1a:af:49:85:
65:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:35:31:0E:3B:72:C4:81:52:9B:A8:D3:93:DD:34:0C:DF:B2:1E:05
X509v3 Authority Key Identifier:
keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2a9edbafd8707b087ddb693d6a70870beacffd7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.42.189.0/24
Signature Algorithm: sha256WithRSAEncryption
82:fe:18:ce:84:d0:7f:51:59:28:4d:48:0f:cf:a1:ac:4a:fc:
b9:89:51:38:cd:8e:ae:25:5d:73:25:81:3d:66:0a:84:f4:ae:
6b:e3:45:ea:c9:b2:2c:16:98:5e:ab:e2:cd:b0:94:0a:f8:1a:
16:8f:f4:14:25:d1:f7:8c:a1:74:a5:ab:e3:82:b5:94:fa:d0:
41:83:ec:fa:6b:44:e7:50:45:b5:2e:4a:00:42:7f:bd:e7:c3:
fe:da:fd:a1:33:16:86:89:38:5f:8f:fe:ed:11:c0:9a:c5:4c:
d1:90:66:d0:f5:b1:bc:dd:d7:d8:26:b7:d8:a0:2b:3b:1d:5a:
42:60:68:48:4f:7c:89:89:bd:78:7f:c0:78:0c:a1:0a:70:0c:
60:b1:f4:de:dd:8a:fd:bd:1e:7e:61:a7:78:0b:86:b8:4c:05:
95:c5:c0:fe:88:92:a8:ed:b8:64:38:46:d0:9d:ec:58:e3:42:
85:e9:3f:f2:6b:f8:22:f2:2d:f7:a3:a0:b6:dd:cd:01:4c:d2:
b2:d2:71:7b:3c:2b:1d:35:12:3d:3b:9d:fe:b4:79:1e:9c:40:
db:93:f7:f4:36:42:e5:be:22:63:6c:a8:dd:df:69:2c:8a:f0:
db:e8:0d:a8:2e:62:84:99:02:c2:2b:6e:b3:af:d0:c3:3b:57:
4c:6c:18:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org