Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/265f05d2024bcec7542c0fed918d8a82e9ced098.roa
File: 265f05d2024bcec7542c0fed918d8a82e9ced098.roa (raw, json)
Hash identifier: wevBnFr6IsZuiDVy58ZnA6KLus2999lzWThiuP1Uwgs=
Subject key identifier: 97:BA:60:81:32:29:3A:B9:E6:12:74:F5:CC:D0:CE:C0:7F:91:83:EF
Certificate issuer: /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial: 27BA33
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/265f05d2024bcec7542c0fed918d8a82e9ced098.roa
Signing time: Tue 30 Jan 2024 04:02:51 +0000
ROA not before: Tue 30 Jan 2024 04:02:39 +0000
ROA not after: Fri 30 Jan 2026 04:02:39 +0000
asID: 264714
IP address blocks: 200.14.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2603571 (0x27ba33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Validity
Not Before: Jan 30 04:02:39 2024 GMT
Not After : Jan 30 04:02:39 2026 GMT
Subject: CN=265f05d2024bcec7542c0fed918d8a82e9ced098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:26:ea:12:2c:2b:dd:42:58:cd:5c:de:8c:
3e:1d:13:cc:22:ae:ac:b0:f2:39:3b:2c:22:1f:95:
fb:f2:92:de:97:59:d0:b0:e8:64:c2:59:a4:ec:99:
6e:92:fd:f7:2f:85:3b:37:da:93:2e:c5:70:a7:f6:
3b:30:5a:0b:ff:ac:24:31:41:8b:50:7f:9d:6e:63:
e0:af:41:4c:bf:0b:71:71:32:c7:d3:cc:a9:36:67:
32:2a:24:c7:76:4b:03:0c:d7:f7:97:44:5f:bb:59:
26:2e:bd:f1:4a:7d:e1:a6:b3:a8:7e:31:03:0e:29:
7f:eb:1a:10:84:09:fa:17:72:99:9f:10:f4:42:ae:
68:8d:93:b3:fe:5a:58:98:ee:5f:1e:27:82:d2:fd:
43:1a:62:6d:1b:bd:ce:a6:98:ad:7b:18:19:6d:97:
77:77:92:ee:07:6b:fe:10:bd:85:3f:92:93:3a:79:
07:a9:13:0e:51:3a:6e:ee:f3:33:fc:19:fd:8b:82:
9b:34:57:b9:ed:be:2f:ed:41:a3:61:71:66:fe:f6:
b0:1c:f9:84:40:db:c1:15:1f:1d:9b:49:c0:f9:cf:
8d:a5:57:02:e4:4f:04:47:71:04:b1:ea:c4:25:e8:
d6:51:4e:8b:1d:c6:e7:22:00:c9:b6:00:00:23:1a:
45:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BA:60:81:32:29:3A:B9:E6:12:74:F5:CC:D0:CE:C0:7F:91:83:EF
X509v3 Authority Key Identifier:
keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/265f05d2024bcec7542c0fed918d8a82e9ced098.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.232.0/24
Signature Algorithm: sha256WithRSAEncryption
52:92:82:c7:b3:6d:ef:47:be:87:02:08:c6:cf:67:bf:bd:70:
bd:cd:84:a6:f8:c0:6f:b2:60:93:1e:cb:73:f8:87:d7:66:a2:
ee:c2:27:bb:ff:a6:c2:5d:b9:b2:1f:ef:e5:c0:75:f9:54:4f:
56:b7:a2:64:51:0a:0b:6a:d5:b4:2e:43:46:c0:f1:a7:9b:40:
49:17:97:35:1a:5f:70:b1:81:08:63:83:66:d7:4d:b7:ab:d1:
78:71:48:61:ff:f8:67:81:9f:09:91:36:06:24:02:61:d3:d0:
c6:8e:98:64:c4:62:40:71:90:4e:1a:c1:db:26:a6:38:6f:e3:
5e:b4:c0:40:2a:58:70:5e:dc:e5:fc:0d:09:dd:09:39:f1:ec:
99:f9:e4:50:b7:2a:04:7f:0c:66:d1:70:74:1a:9c:a7:ed:2f:
08:42:34:c4:6a:62:73:f0:66:47:0f:93:bb:28:61:24:b1:fb:
48:3b:7a:7b:0e:08:5b:22:d7:00:18:d0:65:c7:76:c8:c8:ad:
3c:78:b3:e9:81:e8:f1:d2:20:27:0e:d7:a1:1c:5d:b4:e4:ce:
bd:af:7f:ad:61:c0:2a:40:07:eb:43:af:02:5e:3c:47:e4:e6:
3a:41:b4:52:ba:fd:09:11:c9:76:7b:ea:c5:5a:b6:33:a5:ac:
cc:1f:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org