Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/7bf3bfae814b09827e56189e734af7a01a96d441.roa
File: 7bf3bfae814b09827e56189e734af7a01a96d441.roa (raw, json)
Hash identifier: GVwNgl1PZxfwC1JdidLWqwj4ewqX6M6aNu5w4GbaEl0=
Subject key identifier: FF:6B:C7:CB:01:45:5A:44:FC:2A:03:ED:C2:8F:A8:7C:85:02:7B:BE
Certificate issuer: /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial: 027D99
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/7bf3bfae814b09827e56189e734af7a01a96d441.roa
Signing time: Tue 11 Jul 2023 17:44:26 +0000
ROA not before: Mon 10 Jul 2023 17:44:26 +0000
ROA not after: Fri 11 Jul 2025 17:44:26 +0000
asID: 7418
IP address blocks: 200.42.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163225 (0x27d99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
Validity
Not Before: Jul 10 17:44:26 2023 GMT
Not After : Jul 11 17:44:26 2025 GMT
Subject: CN=7bf3bfae814b09827e56189e734af7a01a96d441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:af:49:e0:10:0c:33:47:9f:de:4a:b1:06:ea:
85:b4:e6:0f:7c:23:1f:26:e6:d1:28:18:4c:99:18:
46:0c:ae:7d:57:40:c8:7a:67:8a:f1:ac:2e:95:76:
e0:b6:f7:02:f1:9b:9a:0c:96:fe:8f:f1:9c:66:54:
35:ad:ac:8f:72:55:af:2e:2a:06:c3:9a:fd:31:35:
c6:ba:0f:06:2a:a5:c3:dc:d3:86:2c:be:7e:67:0b:
45:db:54:68:6e:7f:cd:40:e7:ea:b3:cb:f5:ea:2a:
a3:0a:fc:18:81:f6:e2:c1:d7:2b:06:b4:4b:f7:db:
cc:44:cd:29:ac:ad:cd:27:d1:16:4f:e6:3a:d9:de:
26:69:57:b0:5a:ca:d5:eb:04:92:10:9c:08:4b:d5:
48:53:7c:06:f0:a7:9b:a7:3d:a3:8a:46:de:b2:b5:
ef:5d:ea:f0:d7:70:51:c1:fc:05:c9:f9:3d:86:46:
ef:65:d8:b2:a3:a8:02:f7:85:78:28:a1:3f:cd:9e:
a7:7f:47:1a:5d:b8:81:64:ce:be:c6:c4:96:d3:4e:
6d:a5:5a:d2:ee:be:2f:93:f4:3c:0b:4e:96:b9:0d:
cb:fb:86:5f:ca:0c:e0:50:c7:f6:32:26:e9:80:85:
cb:68:6e:01:f9:c3:a7:c8:27:b8:d6:b6:f3:77:c5:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6B:C7:CB:01:45:5A:44:FC:2A:03:ED:C2:8F:A8:7C:85:02:7B:BE
X509v3 Authority Key Identifier:
keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/7bf3bfae814b09827e56189e734af7a01a96d441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.42.160.0/21
Signature Algorithm: sha256WithRSAEncryption
c2:39:a4:69:ce:75:8e:03:5d:bc:9f:01:41:a7:24:dd:1e:8b:
cc:50:e9:37:a0:9e:e9:b5:1d:8a:9a:57:f9:7e:e9:0c:f3:45:
f2:27:6c:a3:5e:46:8a:59:b6:37:1a:f0:e4:2b:40:3e:b7:d1:
d7:38:85:63:19:43:12:a8:f3:ac:42:b3:3c:08:09:25:89:4d:
6f:0c:d0:8b:72:6f:95:85:f0:aa:25:a6:a3:75:fc:3e:c0:16:
65:e4:fe:0d:4a:11:7d:18:df:ff:45:3d:ec:7d:9f:f0:72:d8:
4d:65:35:50:9e:b6:6b:32:1e:61:6e:8e:9e:f8:03:21:2e:6d:
d6:9d:3d:af:c1:9f:53:4f:46:a2:c1:a5:7d:9c:0e:3e:d0:61:
23:10:40:93:6e:19:33:3b:87:3d:69:08:e1:7b:fd:41:ba:ad:
c6:7b:00:3a:cc:8d:37:27:b7:90:f2:db:63:55:da:d1:49:d8:
63:88:93:1d:cf:c8:77:ed:38:eb:02:72:ee:d8:52:1b:47:e1:
fe:c1:27:44:f8:64:d7:af:32:b4:20:53:59:ef:e5:7c:69:ec:
c5:60:d6:90:f7:f9:19:db:ce:37:1f:db:ae:b6:9f:88:ab:e5:
e4:a0:ca:2b:55:0d:ab:3b:f3:c4:83:90:94:1a:f4:c2:35:8c:
b6:cb:27:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org