Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/972a841d94609fe747312358176b22502680f601.roa
File: 972a841d94609fe747312358176b22502680f601.roa (raw, json)
Hash identifier: CB7Bd3FXtArPra7z9Dk4VIz0ZDUmg8ltm0tTo5Lig0c=
Subject key identifier: DD:05:96:5C:CB:B6:F2:55:51:8F:52:7F:B0:62:7F:99:AF:8D:68:66
Certificate issuer: /CN=ead29b83faed797d3bc08fb554018f7693cf4391
Certificate serial: 0C3C8E
Authority key identifier: 0F:3D:8B:4D:45:D9:21:4A:E8:7D:88:E1:84:55:53:02:7A:05:64:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ead29b83faed797d3bc08fb554018f7693cf4391.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/972a841d94609fe747312358176b22502680f601.roa
Signing time: Tue 05 Dec 2023 17:53:21 +0000
ROA not before: Tue 05 Dec 2023 17:53:21 +0000
ROA not after: Fri 05 Dec 2025 17:53:21 +0000
asID: 10964
IP address blocks: 200.31.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 801934 (0xc3c8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ead29b83faed797d3bc08fb554018f7693cf4391
Validity
Not Before: Dec 5 17:53:21 2023 GMT
Not After : Dec 5 17:53:21 2025 GMT
Subject: CN=972a841d94609fe747312358176b22502680f601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:1a:c1:1f:57:5d:08:24:d0:44:16:0e:6b:
45:f8:12:fa:bc:72:cd:f3:a0:82:99:aa:e0:29:8b:
90:4a:6f:67:81:a7:07:22:13:44:13:7a:f4:37:07:
f8:90:07:83:c9:29:ba:03:db:b9:b2:1a:f4:a6:09:
23:18:b7:97:a7:22:06:5f:bf:ec:28:c7:27:dd:83:
ba:8a:a6:aa:e7:2a:ff:7f:76:31:73:f0:f6:ca:1a:
09:dc:bb:64:99:a2:19:99:22:1f:a4:58:32:59:b0:
9c:db:e4:2e:f3:5d:82:38:6d:f8:f8:15:4e:db:6f:
b6:5a:0d:ce:ce:4b:40:d0:f2:16:f9:62:67:11:d2:
ca:51:ca:e8:18:ac:ab:24:d6:4e:32:92:ff:5e:07:
15:86:ba:e3:0c:78:07:72:e7:f0:aa:29:d9:24:d7:
41:4f:65:e7:9a:b0:30:6b:e6:b7:1d:12:c9:e6:64:
49:de:de:0d:66:0d:5d:31:fd:7f:ba:f5:75:2f:d5:
91:09:a1:00:15:2f:97:48:fa:a5:e3:cf:f2:82:57:
2e:01:ab:07:94:e8:dc:cf:69:ab:cc:6b:57:e9:cd:
01:b6:03:08:17:59:80:cc:56:b2:0a:27:59:ac:09:
35:75:a4:54:53:52:a2:dc:9b:92:42:c0:30:35:02:
e1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:05:96:5C:CB:B6:F2:55:51:8F:52:7F:B0:62:7F:99:AF:8D:68:66
X509v3 Authority Key Identifier:
keyid:0F:3D:8B:4D:45:D9:21:4A:E8:7D:88:E1:84:55:53:02:7A:05:64:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ead29b83faed797d3bc08fb554018f7693cf4391.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/972a841d94609fe747312358176b22502680f601.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/da609218-6bbe-4c06-bd28-462d793a84ff/ead29b83faed797d3bc08fb554018f7693cf4391.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.31.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:6e:52:0c:e7:6e:96:7c:aa:9c:22:68:04:90:03:9a:d2:ca:
7b:8e:05:43:6c:85:3e:49:d7:6d:a9:0b:de:d6:bf:58:e5:a7:
63:50:17:5e:48:9e:60:2f:0c:7a:87:ec:45:a9:81:19:32:93:
fb:c1:52:61:1f:51:89:b2:4e:04:f2:56:24:75:23:73:db:66:
ab:42:a6:22:84:c6:a1:e6:69:37:a1:ca:83:62:48:a6:b5:36:
f8:dc:6c:e7:35:bd:99:f5:71:63:27:83:9a:17:57:14:cc:56:
9a:43:b3:d3:ab:6a:72:73:63:87:03:e0:2d:95:33:03:dd:99:
83:f8:f2:d3:0e:a4:4e:cb:a3:4e:db:0d:f8:f9:c2:77:d4:4e:
b3:2f:80:b2:0a:aa:82:cc:57:bd:37:b9:18:58:20:5f:3c:12:
9a:c0:e2:3e:a5:55:e4:3d:fa:5e:32:b0:04:b3:a5:98:fc:29:
d7:0d:29:c1:34:4b:d7:1e:67:1b:f1:ef:7c:5e:bf:bf:f4:51:
6d:59:c4:f1:b1:d9:95:82:e7:6c:fa:c8:31:82:83:f3:81:a8:
47:bf:7d:e7:3c:0d:b1:ca:76:61:47:8e:59:89:79:e2:90:72:
d4:e0:8b:be:91:0d:b7:a9:5d:eb:c6:f3:41:9e:70:70:55:95:
9d:74:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org