Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/1d71545534fa70b38c8f316a72bd0a7406c9b8f3.roa
File: 1d71545534fa70b38c8f316a72bd0a7406c9b8f3.roa (raw, json)
Hash identifier: Ao0aKbEAAVvOuEnlyY9f0l8PWhWmOQDbEiorD9q50xE=
Subject key identifier: 0A:DB:9F:95:F8:43:CB:9E:7C:BC:25:BA:5C:DE:D1:E2:AE:6B:8C:B5
Certificate issuer: /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial: 2230DB
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/1d71545534fa70b38c8f316a72bd0a7406c9b8f3.roa
Signing time: Tue 04 Jul 2023 08:30:08 +0000
ROA not before: Mon 03 Jul 2023 08:30:07 +0000
ROA not after: Wed 02 Jul 2025 08:30:07 +0000
asID: 14080
IP address blocks: 200.14.205.0/24 maxlen: 24
200.14.206.0/23 maxlen: 24
200.14.231.0/24 maxlen: 24
200.14.232.0/21 maxlen: 21
200.14.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2240731 (0x2230db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Validity
Not Before: Jul 3 08:30:07 2023 GMT
Not After : Jul 2 08:30:07 2025 GMT
Subject: CN=1d71545534fa70b38c8f316a72bd0a7406c9b8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:53:c4:74:7d:38:0c:02:82:1f:a8:1b:19:
16:96:cb:0c:29:e0:24:1c:35:37:5c:b7:f4:74:20:
12:89:65:50:a5:da:c3:a4:9a:e0:8c:3f:b1:62:05:
8a:d0:6c:e6:df:6a:34:38:ca:fa:9e:70:28:2a:9e:
4d:fc:26:ce:89:60:f7:11:57:44:b3:d7:e5:b4:82:
f8:8e:dc:77:23:89:cb:87:ec:ed:7e:e2:33:11:e3:
24:b1:2e:b9:07:70:90:6c:a5:45:60:74:f8:87:37:
91:ac:be:80:73:b1:88:9d:5e:c5:6d:d0:f3:e8:89:
6d:28:38:fe:50:9e:12:3e:8f:0a:32:7f:96:3a:2f:
68:1e:b4:5f:2c:14:34:e8:7e:a5:c5:b2:4f:4e:04:
f6:a4:8e:52:07:1f:8d:d4:bf:f5:73:95:b8:25:ef:
b9:f9:f9:7c:f9:4f:02:9e:31:08:a4:5d:0b:f8:68:
7c:be:c3:33:14:5e:72:9b:6a:d8:3e:83:4b:52:c4:
69:df:38:6b:99:56:ab:91:60:18:38:f8:22:f6:2d:
bb:06:53:83:05:1b:71:5c:40:37:60:54:2b:98:97:
0f:90:26:0d:41:eb:bc:32:a7:84:5a:e3:d5:94:89:
ac:45:a4:b9:b0:e9:d4:85:82:46:33:9f:b1:8c:6a:
bc:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DB:9F:95:F8:43:CB:9E:7C:BC:25:BA:5C:DE:D1:E2:AE:6B:8C:B5
X509v3 Authority Key Identifier:
keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/1d71545534fa70b38c8f316a72bd0a7406c9b8f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.205.0-200.14.207.255
200.14.231.0-200.14.239.255
200.14.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ea:60:e2:69:99:88:46:9b:8d:59:da:67:d3:ad:c5:13:40:7f:
89:65:d7:c3:95:94:e4:56:fe:86:c4:b5:81:04:df:29:44:ea:
e0:38:0a:03:28:d6:af:4b:d3:70:7b:4c:2f:23:22:07:3c:24:
e5:69:3c:b2:63:b4:00:9e:26:a5:49:3a:aa:36:a0:48:93:0f:
6b:54:ce:b5:8d:9b:bb:cb:8c:4a:ed:93:a0:f0:dc:02:1b:52:
b0:c5:2f:8b:5f:4e:c9:69:83:a2:5c:33:57:b3:52:f2:a5:b6:
b4:b1:a6:bc:8e:c8:f1:2d:e7:02:28:97:ed:85:32:50:f5:14:
68:27:6c:2b:3a:04:64:02:a9:55:7d:56:19:d7:62:11:0a:8c:
b9:41:ec:ce:e8:f7:25:d8:c3:fa:03:b1:2c:82:a8:f0:24:7f:
5c:f2:6c:a4:e9:20:23:31:57:f4:28:5c:a9:4e:ca:b6:9d:49:
35:7a:17:51:b6:88:25:72:08:62:c9:4a:e5:64:a6:13:e6:37:
5b:9d:1f:d2:c2:72:fa:d5:13:04:3a:a0:ce:e6:da:6d:b6:62:
b0:5e:46:ca:10:b2:1b:91:70:48:69:7f:bc:a4:5a:e2:07:6c:
f8:01:39:f9:05:15:22:f3:d5:f4:30:e3:db:9b:5a:7a:be:e9:
83:82:f2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org