Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed5f5d41-f2f2-481b-95d2-37dbcd1aeef4/149fa425d50002cb50873c1b6765435f1c931669.roa
File: 149fa425d50002cb50873c1b6765435f1c931669.roa (raw, json)
Hash identifier: N3Zy7ssyItcskAzgFyiSbnSvge/oCik8y5HlHNXMK6g=
Subject key identifier: E8:8A:47:AD:B0:60:F7:F5:0D:DD:9A:97:6C:03:65:25:6A:60:B8:CD
Certificate issuer: /CN=8081b30b281f04b74546fe3da994ebc5681c19df
Certificate serial: 078144
Authority key identifier: 06:9F:57:DC:94:C5:7E:48:F9:04:54:F4:06:D8:F6:32:7B:F8:A8:07
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8081b30b281f04b74546fe3da994ebc5681c19df.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ed5f5d41-f2f2-481b-95d2-37dbcd1aeef4/149fa425d50002cb50873c1b6765435f1c931669.roa
Signing time: Wed 24 Mar 2021 14:33:55 +0000
ROA not before: Wed 24 Mar 2021 14:33:54 +0000
ROA not after: Tue 24 Mar 2026 14:33:54 +0000
asID: 27766
IP address blocks: 200.14.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491844 (0x78144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8081b30b281f04b74546fe3da994ebc5681c19df
Validity
Not Before: Mar 24 14:33:54 2021 GMT
Not After : Mar 24 14:33:54 2026 GMT
Subject: CN=149fa425d50002cb50873c1b6765435f1c931669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:74:7e:7e:d9:79:14:68:7f:41:89:92:bc:
9c:51:0c:01:97:e0:51:ec:06:ca:73:44:ed:bb:ee:
5d:c5:ce:94:7d:2b:c9:27:28:9b:d4:5f:e9:2d:7a:
36:79:fa:73:bd:42:29:75:6d:2e:dd:86:b3:3c:93:
a2:65:51:8d:a6:2e:ce:d0:70:46:d0:19:fa:6d:84:
b5:9a:37:ee:6e:8e:72:c9:78:f4:2a:c0:db:3e:27:
9e:9b:08:0a:e8:4f:5d:5b:f5:83:e9:32:3c:2c:8d:
68:30:29:02:ba:e7:78:d9:55:3a:a0:a1:f9:7b:24:
14:e4:c0:e8:ea:87:56:01:06:48:00:13:e2:a2:72:
30:36:3d:82:35:5f:97:ef:8b:f2:86:da:9f:7e:ec:
1b:2d:fa:86:c2:61:37:a3:3c:01:34:18:9a:bf:90:
25:8c:6b:1b:22:2d:8d:48:56:df:ce:83:9a:7f:1d:
20:65:e8:16:cb:fc:17:73:09:cf:5e:ed:de:6e:f2:
8b:89:ed:97:fb:17:39:73:dc:6e:60:e4:30:83:75:
90:6c:68:93:df:30:9c:f6:c8:48:01:d4:79:89:df:
9d:b8:5a:e7:ef:4a:29:6e:65:9d:4e:2f:84:03:ac:
3b:60:53:81:d8:93:3e:71:c0:d0:b7:b1:d7:89:e9:
d9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8A:47:AD:B0:60:F7:F5:0D:DD:9A:97:6C:03:65:25:6A:60:B8:CD
X509v3 Authority Key Identifier:
keyid:06:9F:57:DC:94:C5:7E:48:F9:04:54:F4:06:D8:F6:32:7B:F8:A8:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8081b30b281f04b74546fe3da994ebc5681c19df.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed5f5d41-f2f2-481b-95d2-37dbcd1aeef4/149fa425d50002cb50873c1b6765435f1c931669.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ed5f5d41-f2f2-481b-95d2-37dbcd1aeef4/8081b30b281f04b74546fe3da994ebc5681c19df.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.14.106.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0f:86:26:3e:a8:2a:b2:aa:51:6f:9a:59:2d:cb:b1:1f:1b:
8f:0d:30:2c:19:c6:45:9e:08:70:bd:69:1c:08:2f:07:86:52:
6e:38:54:f3:4a:67:d9:2b:f4:35:dc:27:28:03:2e:a9:7f:81:
41:8a:ad:ba:f3:37:f5:7f:36:5b:b7:49:d3:c6:c8:11:e3:f9:
5f:2b:d7:f2:f9:0b:91:6a:d2:c1:e8:c3:9b:36:b7:fb:3f:67:
3b:b6:1c:dd:14:82:91:93:ce:e2:5d:cc:d3:54:74:a6:b3:9e:
5a:b7:b2:a0:6f:f7:d9:38:8b:97:69:79:79:23:3e:6b:d8:f3:
51:c7:5a:c8:d8:82:bb:f7:71:f9:be:71:d3:62:ba:0f:c6:59:
bb:2a:38:f1:43:51:dd:e5:64:85:92:98:e7:f7:ec:47:b4:fa:
35:81:ec:53:ac:57:c0:7f:e6:36:1e:32:c3:db:02:9a:5d:0d:
9d:12:84:72:31:d2:92:da:fc:2d:db:72:d8:a3:9d:34:61:46:
4c:eb:f6:4d:be:6e:c6:17:b0:e0:5e:e9:89:cd:54:b3:34:d7:
d1:27:2c:e9:a8:18:a9:77:78:5f:07:61:3c:0c:ab:7c:25:a0:
af:9b:cf:0b:08:de:33:f6:d8:be:48:0c:23:25:79:32:bc:b4:
2f:df:cc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:51 2024 by rpki-client on console-ams.rpki-client.org