Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2fa010a656de3f40d5d3a8e977b70a99c9fdf131.roa
File: 2fa010a656de3f40d5d3a8e977b70a99c9fdf131.roa (raw, json)
Hash identifier: GFmKgdw4jkjQnXJAbTwaB2mzUCbRnkZJMQrgZ39bU1U=
Subject key identifier: 5A:60:FA:09:7F:72:17:F1:05:0A:42:5D:AE:2C:D0:88:4A:2F:6F:DA
Certificate issuer: /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial: 035DE1
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2fa010a656de3f40d5d3a8e977b70a99c9fdf131.roa
Signing time: Tue 18 Jul 2023 19:49:00 +0000
ROA not before: Mon 17 Jul 2023 19:49:00 +0000
ROA not after: Fri 18 Jul 2025 19:49:00 +0000
asID: 16629
IP address blocks: 200.50.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220641 (0x35de1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
Validity
Not Before: Jul 17 19:49:00 2023 GMT
Not After : Jul 18 19:49:00 2025 GMT
Subject: CN=2fa010a656de3f40d5d3a8e977b70a99c9fdf131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:3c:74:2a:f0:4f:52:79:ba:b7:56:13:06:
ac:11:2d:6b:58:6b:b5:ca:d9:1d:af:28:7e:ee:4f:
df:fc:bc:4f:4e:cc:c6:6b:04:d6:8a:66:e8:2f:ac:
60:81:29:e7:dd:81:f4:69:5a:b6:a4:b2:58:f1:81:
32:09:d6:8d:66:45:8a:28:df:09:44:20:f0:90:1d:
99:95:36:41:45:5e:56:2d:43:78:4c:83:c6:f9:d4:
9c:d0:8e:77:d6:56:28:a7:b6:a8:a3:63:59:93:0f:
4b:c9:d3:b6:d5:26:4e:88:6f:58:f0:e1:06:f1:52:
d6:99:6e:84:c7:8b:6b:bd:c7:70:8f:65:d2:24:88:
5f:d4:11:13:18:71:6f:4b:71:e2:14:26:b7:2c:c8:
53:0b:cc:fc:71:4c:a9:f3:6f:34:c8:73:15:49:ed:
96:6b:02:b1:15:19:67:9d:91:9e:f8:b9:59:45:3f:
97:25:db:5b:50:cf:9f:63:9d:76:40:e2:66:64:e8:
11:a1:8e:db:3e:45:cc:24:de:d3:b2:35:91:52:78:
54:12:f5:63:28:31:f1:5c:55:ae:f1:a5:02:c6:6a:
d9:b0:8b:6b:ec:57:42:0f:18:6b:f0:31:4a:92:5a:
e6:8b:31:3e:bd:1e:26:89:d5:21:06:99:e8:dd:bf:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:60:FA:09:7F:72:17:F1:05:0A:42:5D:AE:2C:D0:88:4A:2F:6F:DA
X509v3 Authority Key Identifier:
keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/2fa010a656de3f40d5d3a8e977b70a99c9fdf131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.120.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:7b:6d:b1:f4:e4:2b:39:17:d7:73:22:f8:14:94:66:ba:7c:
71:83:6c:de:be:39:8a:64:61:33:9d:25:20:a8:01:98:3b:1a:
2a:93:ef:53:06:e3:b6:10:71:6d:e8:d6:4a:2c:74:c3:65:9b:
fa:0b:d9:16:ad:f9:6e:1f:d1:4e:87:75:c7:7f:b4:fd:ba:7e:
31:44:cc:c3:5d:16:4e:d8:0f:95:92:eb:42:ee:bb:4f:3c:0a:
a5:c1:7a:a0:00:ed:43:ea:ca:a4:89:bd:c7:cb:62:d3:a6:be:
4b:6e:12:da:f0:85:72:94:ef:f6:e9:6b:a3:96:22:da:c1:34:
a5:15:1a:4a:28:3e:ff:2d:df:77:b5:ac:03:78:e7:be:82:29:
16:a4:26:eb:91:d9:1c:e5:ce:c3:81:bf:ea:9b:b2:60:da:be:
83:5f:38:80:63:fa:a3:fb:81:12:5b:4a:47:ae:9a:b4:62:f4:
90:0a:9d:49:d0:3e:4b:ba:2d:fe:96:95:e4:aa:c3:d0:01:06:
e4:5f:37:05:c1:77:cc:dc:bd:0c:ea:3b:14:f8:83:96:6a:91:
13:b4:38:8c:cc:1d:36:f0:1f:09:d9:d2:fe:e2:db:60:05:6f:
66:d6:13:37:c9:d4:5a:d8:97:c9:82:c5:55:85:33:c8:ab:de:
78:92:0f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org