Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/97def2f9d6fa38389ecab42c5da7e559d8853b5a.roa
File: 97def2f9d6fa38389ecab42c5da7e559d8853b5a.roa (raw, json)
Hash identifier: itpg5Vphb1Z/W6qbgPh3XTu8oD17iSEzJpNpttO0/RM=
Subject key identifier: A2:75:7C:AF:B0:D8:E3:93:2E:76:DF:45:A7:E3:D0:DC:04:6C:08:3F
Certificate issuer: /CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Certificate serial: 27B8A4
Authority key identifier: 5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/97def2f9d6fa38389ecab42c5da7e559d8853b5a.roa
Signing time: Tue 30 Jan 2024 04:02:50 +0000
ROA not before: Tue 30 Jan 2024 04:02:39 +0000
ROA not after: Fri 30 Jan 2026 04:02:39 +0000
asID: 27678
IP address blocks: 200.27.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2603172 (0x27b8a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7aa34ce93acbfe70c4de64538dca0894b670f0d2
Validity
Not Before: Jan 30 04:02:39 2024 GMT
Not After : Jan 30 04:02:39 2026 GMT
Subject: CN=97def2f9d6fa38389ecab42c5da7e559d8853b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:51:51:59:f9:03:c6:87:6f:9d:89:df:8b:db:
26:e0:73:d1:23:f9:d3:1c:d7:90:61:b6:09:08:b0:
43:13:70:e8:76:e3:c3:dc:77:b3:71:7d:2a:8b:78:
45:7e:a6:e6:56:75:a8:10:6a:8e:78:24:82:fc:4d:
11:b2:3f:3d:71:81:23:2c:bd:73:27:ab:0a:2f:5b:
b7:a0:07:93:1a:76:7e:24:ca:00:b5:65:c8:82:7b:
94:75:1f:45:b3:e2:d2:79:ed:8a:98:d5:69:1b:dd:
7d:97:95:5d:64:88:db:87:2c:8a:5d:da:88:cb:8b:
01:17:34:1e:75:b9:40:5e:20:b4:95:24:a4:b0:d3:
81:b2:01:35:e6:ce:cc:5b:76:20:13:44:24:a0:39:
84:11:43:cf:60:83:b0:39:c5:c8:b2:fd:a3:9e:2c:
c5:27:2c:5b:f4:90:2c:7c:e4:bc:80:1a:aa:93:c8:
bb:d4:b8:ad:86:0d:e5:b2:4a:e4:f8:8d:43:9a:9c:
32:6b:3e:1b:99:e7:02:42:17:f3:5a:bc:55:2e:2a:
3c:a3:61:3d:9d:50:57:09:f9:e9:6d:5d:08:ab:3f:
db:8c:77:30:71:cd:30:45:2a:91:6b:ee:33:ef:76:
4c:76:14:5e:22:14:2b:bf:6f:8d:c2:c2:72:65:57:
15:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:7C:AF:B0:D8:E3:93:2E:76:DF:45:A7:E3:D0:DC:04:6C:08:3F
X509v3 Authority Key Identifier:
keyid:5F:85:D3:6E:A2:27:14:35:40:49:19:8D:ED:3B:94:16:27:FD:D5:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa34ce93acbfe70c4de64538dca0894b670f0d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/97def2f9d6fa38389ecab42c5da7e559d8853b5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4e43743-cebb-4f29-956e-360d8d220f54/7aa34ce93acbfe70c4de64538dca0894b670f0d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.27.115.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ff:80:e2:13:38:69:60:45:9d:39:28:59:b7:ab:4d:dc:74:
c4:3f:53:01:ec:f7:7e:83:fa:4d:b8:05:a5:bc:ea:a0:52:80:
7c:5b:bc:3e:c1:d4:0e:b7:b9:45:08:fa:0b:a1:6e:66:f7:72:
32:02:9a:72:c6:56:0b:36:c6:a6:f6:8a:b5:9b:a8:d8:3f:db:
b3:30:25:f2:d0:39:41:f3:c9:2b:ae:50:f7:fd:3d:30:86:a8:
b2:04:21:8e:04:87:fb:28:78:8b:55:37:b6:fc:a2:32:54:75:
d2:7b:4e:21:53:84:c4:0a:a1:3f:82:a0:bd:3b:93:7b:5e:0f:
c6:96:2b:b9:80:e5:ac:2d:fc:8f:7a:51:dd:95:97:c5:c0:23:
44:37:f4:b2:cd:c6:0b:c4:63:cc:d6:aa:31:0b:08:a2:3b:94:
ac:e9:ce:11:f9:be:85:bd:d7:12:80:4c:9a:f6:04:48:50:c2:
df:1f:8b:09:69:b0:e1:1b:23:fe:3e:74:b4:70:fc:9b:1a:34:
9e:06:74:4b:a9:f1:65:ca:2b:b2:87:d0:08:ee:b6:37:4b:ce:
fa:41:46:e8:f8:bc:8e:83:7f:28:70:79:06:c6:24:d7:82:ff:
c9:c2:8f:c4:a2:94:12:07:29:0c:27:4f:6d:ac:81:ee:8b:4c:
2d:5d:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org