Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/a695db0f50d51cb1f93c07b1fe271cda18b7edc7.roa
File: a695db0f50d51cb1f93c07b1fe271cda18b7edc7.roa (raw, json)
Hash identifier: 5Luh7Yob0YeNrtnkPEQqgELZ9xmL9frV8iKURV7+SS4=
Subject key identifier: B0:E4:D4:93:1B:07:1D:C3:6D:BB:59:60:03:DC:79:DB:E2:C8:83:78
Certificate issuer: /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial: 029B1B
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/a695db0f50d51cb1f93c07b1fe271cda18b7edc7.roa
Signing time: Tue 11 Jul 2023 17:46:34 +0000
ROA not before: Mon 10 Jul 2023 17:46:34 +0000
ROA not after: Fri 11 Jul 2025 17:46:34 +0000
asID: 7418
IP address blocks: 200.50.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170779 (0x29b1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
Validity
Not Before: Jul 10 17:46:34 2023 GMT
Not After : Jul 11 17:46:34 2025 GMT
Subject: CN=a695db0f50d51cb1f93c07b1fe271cda18b7edc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:27:38:8f:6b:b0:05:fe:23:1b:71:3b:84:db:
97:bf:0a:23:22:8e:cf:52:de:60:3e:b9:bb:9f:4f:
f1:81:d3:db:49:da:e1:10:5e:94:5b:e0:41:dd:eb:
61:48:1e:aa:7e:52:52:5b:58:53:0f:aa:bc:69:62:
bc:61:ac:40:ba:b2:2c:97:fc:32:15:d6:3f:8b:ef:
36:22:f4:6d:dc:d4:d8:c7:25:e0:70:c9:06:e2:40:
bb:48:a0:03:6e:f6:33:aa:7b:1d:22:3f:c2:3f:94:
de:fd:b2:d4:6f:6e:f0:bd:77:8d:1f:d5:c3:d2:ab:
f3:b6:de:3e:52:74:b5:c6:9b:98:4f:ef:a7:42:b4:
23:1d:ea:2d:06:d7:64:92:4a:24:f6:a3:60:c3:74:
fb:1e:f5:06:fa:8d:95:8c:4a:74:1e:5f:8b:78:bb:
5d:f0:5e:ce:1d:00:e7:66:3f:08:ff:a9:87:29:25:
4e:44:e7:74:13:06:9b:9a:52:00:d4:72:5a:63:e7:
54:6d:11:88:29:e7:df:8e:cc:b5:0f:bc:60:96:c9:
d8:1c:b5:d8:6a:eb:7e:ac:7d:d3:a6:19:40:30:ea:
a9:ad:04:7b:ce:c0:2a:e7:b7:0d:50:6b:10:67:fa:
78:db:d0:27:6f:d2:af:f9:f4:47:f1:8a:45:ec:29:
65:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E4:D4:93:1B:07:1D:C3:6D:BB:59:60:03:DC:79:DB:E2:C8:83:78
X509v3 Authority Key Identifier:
keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/a695db0f50d51cb1f93c07b1fe271cda18b7edc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.50.100.0/22
Signature Algorithm: sha256WithRSAEncryption
15:d6:fd:ad:a3:e6:04:12:dc:90:21:7e:66:aa:9f:5f:61:7c:
5a:70:e0:0d:3f:ee:5a:7b:f6:7e:f9:84:77:ba:ee:fe:12:bb:
39:6b:9b:dd:22:8e:ed:cb:f6:18:c5:65:91:6d:d0:0f:3c:1c:
05:ca:15:93:8a:71:3e:e8:fb:73:90:79:f3:0c:27:24:63:a4:
21:92:35:27:f8:ed:a6:27:07:29:20:ab:70:db:a1:40:85:b1:
98:d1:98:bc:7a:2c:be:b8:e0:c8:2b:4f:7c:67:8d:9f:22:c2:
19:8b:42:1f:28:d7:4c:73:f1:0d:0e:9d:d9:f9:a3:d2:93:36:
0f:1d:1a:fb:6e:a8:d4:80:7c:ef:55:53:19:09:a4:50:98:9b:
92:d9:e1:5b:ba:25:48:5c:ea:15:a9:cf:ef:f5:f9:c3:a4:c6:
fc:ef:cc:b0:cf:65:45:a3:bf:2e:f0:0d:9b:4a:ab:fb:39:b8:
a0:e0:90:27:99:c5:15:a4:cb:45:7b:23:47:23:65:2c:91:16:
f2:16:ac:64:c2:02:d7:f3:01:54:1c:f3:30:57:a8:10:37:63:
cb:44:03:7c:4f:31:f6:61:2d:50:88:93:b9:0f:af:c3:2f:21:
63:f6:1d:0d:19:ea:c6:0e:87:91:2f:3a:32:eb:6d:f3:f7:f8:
58:c6:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org