Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/2d4deb3b25782fb8157858cc54837bec578334f6.roa
File: 2d4deb3b25782fb8157858cc54837bec578334f6.roa (raw, json)
Hash identifier: xI09ywTwscs4uYcv1b229j7clwbU23rIu01eYj+qcEc=
Subject key identifier: 68:FB:14:A9:1A:0A:17:40:00:E3:50:AF:95:B7:15:47:5A:CE:14:61
Certificate issuer: /CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
Certificate serial: 1DEA01
Authority key identifier: B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/2d4deb3b25782fb8157858cc54837bec578334f6.roa
Signing time: Mon 26 Jun 2023 08:30:00 +0000
ROA not before: Sun 25 Jun 2023 08:30:00 +0000
ROA not after: Tue 24 Jun 2025 08:30:00 +0000
asID: 269928
IP address blocks: 200.108.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1960449 (0x1dea01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb40d10524d57adf72ab2d55530078d68f27ac5a
Validity
Not Before: Jun 25 08:30:00 2023 GMT
Not After : Jun 24 08:30:00 2025 GMT
Subject: CN=2d4deb3b25782fb8157858cc54837bec578334f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:8d:d0:8d:0c:1b:8c:5e:4a:7a:e6:4c:39:
69:e2:c0:87:be:a0:59:b8:0f:20:ed:f7:0d:2a:bf:
2e:b8:a0:a3:91:e0:87:8b:e6:83:c5:54:b0:91:b3:
7f:e9:b1:01:a4:15:0c:6e:69:e5:56:a1:27:b5:ae:
e5:62:f9:f3:73:d6:59:af:b5:b9:d9:30:be:3a:3d:
aa:87:f9:fe:39:60:26:56:9c:92:f1:a5:a4:ba:36:
a3:b0:36:4c:a9:1f:1d:fa:55:7b:21:b5:0c:fe:de:
b5:0e:22:6b:78:9d:35:c8:39:ac:e9:ed:1b:2f:aa:
2f:90:45:ac:70:81:9d:9a:27:a3:70:58:b0:7f:06:
69:44:51:17:56:12:44:d6:f6:e4:f7:f7:eb:d1:28:
ac:95:e7:96:66:22:ba:1e:43:e1:0c:f3:d3:aa:72:
50:dc:ae:b6:ec:00:a1:1c:7e:af:bd:85:b7:87:52:
5e:17:d6:73:f9:68:26:18:e4:23:37:07:13:bd:dc:
e6:97:cc:2c:54:e8:75:2e:34:16:59:98:29:68:48:
07:36:ca:83:f7:84:a0:cf:c5:f8:dd:b2:64:6e:10:
39:4b:35:cd:b1:67:52:f5:fd:bb:7a:7a:7d:78:57:
a4:88:1b:6c:b1:46:9f:30:85:08:87:12:81:dd:4e:
b7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:FB:14:A9:1A:0A:17:40:00:E3:50:AF:95:B7:15:47:5A:CE:14:61
X509v3 Authority Key Identifier:
keyid:B3:9D:D1:35:23:58:CA:32:4A:FF:B8:6B:E0:5B:7A:32:BE:C8:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb40d10524d57adf72ab2d55530078d68f27ac5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/2d4deb3b25782fb8157858cc54837bec578334f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/eac7dc25-3daf-47d7-994b-ee487142c0dd/bb40d10524d57adf72ab2d55530078d68f27ac5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.108.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:73:92:b2:92:b2:42:62:3f:ca:b5:e0:27:af:e7:b9:0c:c9:
71:17:2c:e0:c2:7c:e2:ce:b6:b7:f5:e5:d4:8d:b5:e4:5a:18:
ac:57:7a:79:e2:bc:e7:05:a3:88:1b:1b:41:63:f8:7b:f8:98:
fd:5f:3b:22:63:db:93:4b:38:e9:08:ae:6d:a9:63:c9:6e:0d:
52:cb:27:ad:ac:c3:0d:8a:9f:31:eb:23:ef:16:b1:a8:2f:b6:
f8:35:43:ed:8b:73:ee:e3:4f:6b:b3:ca:62:7d:75:d7:a4:21:
b5:0f:cc:3c:3e:41:3b:18:a0:4e:d4:1e:82:f5:95:44:93:03:
3d:a0:67:dc:df:c9:17:e1:f6:0f:b1:7a:ea:d0:4e:6b:ec:2f:
c4:08:47:ff:e5:2e:cb:42:87:4a:39:ad:85:6f:36:f1:67:59:
23:76:0b:1c:ff:8c:28:20:fb:5a:5d:2c:bb:a9:a8:da:ba:1a:
e3:04:18:20:6c:21:04:03:ae:8c:dc:be:43:d9:d7:0f:d7:17:
38:10:07:d1:e8:d8:09:17:08:e1:25:40:cb:35:4e:ea:ae:9a:
3d:00:09:be:ea:50:87:90:31:fa:19:42:86:f1:a1:53:a6:2c:
3e:65:d0:b0:4d:5b:18:08:53:e1:7e:1e:52:50:3a:53:f4:1c:
8b:35:38:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org