Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4e45a5297e53cd433ae05eeed6739a4e7fc38f42.roa
File: 4e45a5297e53cd433ae05eeed6739a4e7fc38f42.roa (raw, json)
Hash identifier: 1lG2RNzWiVOKjXoqH0aoJ22O4XtwwUGGjtTsb8F8AKY=
Subject key identifier: 6C:40:E5:75:34:32:42:50:A0:81:BC:E9:1F:B6:E9:48:9B:FF:ED:8A
Certificate issuer: /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial: 02BBB5
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4e45a5297e53cd433ae05eeed6739a4e7fc38f42.roa
Signing time: Wed 12 Jul 2023 15:27:01 +0000
ROA not before: Tue 11 Jul 2023 15:27:01 +0000
ROA not after: Sat 12 Jul 2025 15:27:01 +0000
asID: 16629
IP address blocks: 200.113.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179125 (0x2bbb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
Validity
Not Before: Jul 11 15:27:01 2023 GMT
Not After : Jul 12 15:27:01 2025 GMT
Subject: CN=4e45a5297e53cd433ae05eeed6739a4e7fc38f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e7:3f:6d:29:16:7f:f1:b6:d7:7b:82:e5:f4:
16:48:fd:10:22:96:cf:a0:3c:25:fa:21:a6:52:ed:
f8:28:b2:d4:ac:a4:44:ef:fe:c2:dd:2d:db:b4:49:
81:d3:dd:16:56:8b:af:ff:9d:d0:03:ab:50:bf:55:
59:c8:86:5a:da:ca:32:51:cd:16:1e:f2:0a:1a:1d:
1a:59:e2:62:e5:88:1f:30:44:8a:c7:17:5f:9b:9b:
18:6e:39:a5:d4:98:89:d8:f7:a4:a3:55:1e:98:fc:
68:8a:dc:90:14:ac:c4:de:fb:24:34:60:0a:a9:70:
f0:28:80:38:bc:7a:7d:c4:63:72:90:b1:2d:d7:d9:
78:cc:e8:ba:66:b3:ee:89:a6:8e:56:bd:0a:bd:f6:
c2:36:02:55:d2:d5:7d:08:85:07:9f:14:32:99:51:
7c:07:28:64:aa:28:b2:af:7c:75:c2:12:de:d6:e2:
0f:ae:e7:d7:f3:d5:96:a1:32:75:96:75:3c:fd:9e:
1f:25:f5:83:04:6b:a0:31:d6:c2:fe:fd:78:a6:0e:
94:20:88:d2:07:35:72:07:78:8c:a5:cf:b6:cb:32:
72:e8:89:11:3d:88:cf:c3:df:5f:44:56:4d:fc:f4:
aa:48:77:5e:34:e0:20:db:51:1b:5f:ae:88:d1:93:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:40:E5:75:34:32:42:50:A0:81:BC:E9:1F:B6:E9:48:9B:FF:ED:8A
X509v3 Authority Key Identifier:
keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/4e45a5297e53cd433ae05eeed6739a4e7fc38f42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.113.16.0/20
Signature Algorithm: sha256WithRSAEncryption
f0:f9:da:80:9c:51:38:1f:a5:63:9f:7c:68:4a:18:0e:62:a1:
e4:25:38:64:54:9c:c7:a2:4f:f3:ba:bb:37:cb:e0:95:f5:bf:
ac:e2:e9:86:3e:6e:0f:08:95:f6:a3:50:d0:bf:af:80:78:3a:
86:31:c9:cb:4a:82:ad:a6:2a:55:bc:ae:cc:25:1d:8c:43:35:
7d:07:af:f5:df:1e:75:e7:b2:9a:06:e2:d6:ff:ec:be:f6:3b:
f1:dc:f5:dc:db:ee:5a:42:01:e4:73:80:c7:36:58:46:c8:7a:
e0:33:7c:72:a5:5e:8d:68:31:63:49:b2:c2:7c:41:13:f1:c6:
f1:31:a1:e7:f6:9f:5d:1e:9a:a3:77:62:cc:db:64:bd:9a:6e:
48:14:64:81:30:30:00:13:99:d2:4d:57:19:18:93:52:67:93:
d9:30:90:b0:46:c8:e3:a7:26:97:4e:2e:81:e1:79:9d:81:87:
c7:16:a6:b6:9c:b8:f4:df:3a:f1:9f:63:1f:2b:79:a1:08:cc:
72:54:75:22:b5:69:12:ea:15:d8:09:ae:21:d7:6a:3b:ed:4b:
1a:b3:4d:4a:0b:f2:19:0f:6c:09:58:e9:de:71:bc:47:ee:00:
d1:62:de:6f:c4:b5:d0:66:e9:22:3c:43:3e:be:fd:f1:67:31:
f9:e5:fb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org