Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/d229180d3325bfee22d693ba0f134b2774c952eb.roa
File: d229180d3325bfee22d693ba0f134b2774c952eb.roa (raw, json)
Hash identifier: wu1p4Mxpj2P7V+xI9wJauJVLELFgS4S2Y6sxSCZ/vNU=
Subject key identifier: C5:3C:48:E9:D2:0C:53:18:51:A4:74:65:C1:36:BF:1F:09:7A:E4:FF
Certificate issuer: /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial: 02AEF2
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/d229180d3325bfee22d693ba0f134b2774c952eb.roa
Signing time: Wed 12 Jul 2023 15:25:45 +0000
ROA not before: Tue 11 Jul 2023 15:25:44 +0000
ROA not after: Sat 12 Jul 2025 15:25:44 +0000
asID: 16629
IP address blocks: 200.113.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175858 (0x2aef2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
Validity
Not Before: Jul 11 15:25:44 2023 GMT
Not After : Jul 12 15:25:44 2025 GMT
Subject: CN=d229180d3325bfee22d693ba0f134b2774c952eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b9:71:b2:b1:30:88:81:ae:dc:1a:96:d7:75:
75:df:89:f6:94:54:cc:02:df:e7:dd:0c:ad:c7:df:
44:23:76:79:d3:f4:7e:61:27:09:47:aa:ef:5f:c6:
e3:c0:ee:f9:3b:28:79:b8:a3:71:d1:b6:de:dc:54:
96:71:bf:39:3d:73:f8:34:44:af:8b:f9:dd:a6:75:
65:b1:2e:c3:22:fa:21:cf:cf:f0:86:6b:92:d1:f1:
1f:27:0d:9c:53:29:28:87:c6:d5:7e:76:ab:3f:f7:
18:6b:d9:62:df:ab:d9:5b:8a:2b:13:83:47:2d:42:
2a:90:b9:47:dd:01:eb:1c:11:47:ff:e1:f2:d3:be:
58:98:de:1a:1e:98:1f:99:cf:f6:77:8f:1c:ed:0c:
5f:94:3c:37:ba:93:b7:1b:44:73:3b:fe:92:7e:a7:
46:36:e2:bf:ba:4b:93:55:5a:3a:98:dd:ab:c9:7a:
6a:f1:9a:1c:34:94:d0:a9:7f:e8:76:78:dc:6f:2b:
04:7d:d8:03:e9:9d:01:08:2b:b8:1f:e4:ef:1b:c8:
e9:1e:7f:12:4a:88:40:f5:5a:1c:7c:e4:f0:e5:0d:
77:10:ff:1f:f4:b7:f3:27:2c:ab:ef:01:a4:bb:10:
57:c3:6a:d2:38:a2:4a:50:0f:d1:4e:37:f4:a7:8f:
83:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3C:48:E9:D2:0C:53:18:51:A4:74:65:C1:36:BF:1F:09:7A:E4:FF
X509v3 Authority Key Identifier:
keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/d229180d3325bfee22d693ba0f134b2774c952eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.113.0.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:10:26:af:11:fe:36:28:a7:4d:2b:a5:7b:ec:05:6c:fe:3e:
7f:a1:5d:fd:68:b6:2f:6f:c3:1c:aa:0d:1b:70:ec:1a:07:fc:
51:1b:1d:3e:bd:da:0a:62:59:b9:5e:5e:00:72:17:74:de:d9:
0e:1c:a3:58:1a:09:08:50:89:36:52:0d:69:76:76:74:27:c8:
ef:35:c3:1d:83:44:31:20:6d:2b:ef:63:f7:86:53:8c:20:6f:
c8:bb:f4:0c:79:22:18:98:ca:6f:61:9a:df:ec:4a:c6:8d:5d:
bc:3c:d3:39:a5:0b:06:9f:64:03:f7:a6:89:68:94:42:5b:63:
e4:64:62:54:c5:96:12:f7:26:79:a3:dc:31:c7:dd:17:fe:34:
0d:32:1e:36:69:58:14:a1:4d:22:f1:08:01:21:c9:f3:57:01:
db:49:56:c0:c8:2f:62:d7:42:d5:15:ee:76:1b:81:a2:23:8a:
94:1c:7c:93:3d:e5:18:8a:b5:26:70:e9:f3:14:e7:fc:7b:9c:
2b:bc:02:e6:2f:77:1d:95:3f:91:cd:7b:46:ae:da:2c:a4:2a:
48:ce:d0:b8:da:4e:b0:37:c7:10:3f:8b:10:aa:24:6d:88:f6:
9a:f0:9c:6e:40:64:8c:39:0f:b7:f5:bb:85:36:79:05:eb:5b:
92:b7:1e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:49 2024 by rpki-client on console-ams.rpki-client.org