Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef1fa093-85a4-48ab-ae65-933d18675a28/1dd9d5c365690ab7937f03598039ada779ebea89.roa
File: 1dd9d5c365690ab7937f03598039ada779ebea89.roa (raw, json)
Hash identifier: glOAztjKXANpCnc/Jy+GC6ZDRTcba8np8ft3hCA1SMs=
Subject key identifier: 20:6E:A2:17:71:B6:4E:99:BD:B5:38:66:3C:0E:CF:94:2E:DE:22:33
Certificate issuer: /CN=d2bd70707004d0ed541501541c2c5f8b2c430764
Certificate serial: 0D0BEF
Authority key identifier: 4B:E3:91:A7:FF:32:27:85:74:D2:9D:87:7E:44:E9:23:7F:2A:C8:F3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2bd70707004d0ed541501541c2c5f8b2c430764.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ef1fa093-85a4-48ab-ae65-933d18675a28/1dd9d5c365690ab7937f03598039ada779ebea89.roa
Signing time: Wed 24 Mar 2021 14:44:47 +0000
ROA not before: Wed 24 Mar 2021 14:44:47 +0000
ROA not after: Tue 24 Mar 2026 14:44:47 +0000
asID: 27999
IP address blocks: 200.10.205.0/24 maxlen: 24
201.131.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 855023 (0xd0bef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2bd70707004d0ed541501541c2c5f8b2c430764
Validity
Not Before: Mar 24 14:44:47 2021 GMT
Not After : Mar 24 14:44:47 2026 GMT
Subject: CN=1dd9d5c365690ab7937f03598039ada779ebea89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fb:58:fd:5e:77:c4:68:a4:61:c5:fe:33:61:
57:4f:56:92:9e:4c:19:b4:09:ad:c4:0d:a2:44:63:
16:22:52:70:f3:5d:9d:66:a1:12:1a:db:9b:86:8c:
50:fe:b4:e2:9d:eb:e1:88:6b:42:52:70:0f:85:0c:
ab:64:05:fc:87:69:0a:54:47:bc:28:99:78:21:2d:
c2:c8:35:3b:5c:07:27:5b:7f:20:31:95:96:15:20:
69:b0:75:59:b0:6a:5b:be:9b:33:96:c3:59:1e:01:
39:55:0d:7c:50:83:83:9c:1f:0a:04:a8:0b:d4:00:
e9:bd:44:81:93:69:14:c0:2a:23:99:54:27:38:27:
7f:c3:27:1b:5a:ad:0c:17:36:c9:46:2d:9c:ee:6f:
86:6f:e1:df:3d:85:27:02:e1:74:69:71:1b:ea:53:
f1:cd:c1:ce:e2:83:5c:85:ed:57:93:93:3b:c9:b3:
d1:e0:f6:ad:bd:8d:e6:13:8f:85:96:d7:4c:b4:ee:
f0:4a:c8:56:2a:e7:15:cb:3f:37:ad:be:b6:2e:ce:
a4:34:47:98:c4:8f:a4:02:c7:c8:16:e3:df:9c:ce:
83:c0:f2:13:fa:89:02:56:3d:8a:c6:36:25:37:aa:
b0:c5:76:e7:4f:f8:e2:5c:12:9c:0e:9f:74:b2:15:
91:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6E:A2:17:71:B6:4E:99:BD:B5:38:66:3C:0E:CF:94:2E:DE:22:33
X509v3 Authority Key Identifier:
keyid:4B:E3:91:A7:FF:32:27:85:74:D2:9D:87:7E:44:E9:23:7F:2A:C8:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2bd70707004d0ed541501541c2c5f8b2c430764.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef1fa093-85a4-48ab-ae65-933d18675a28/1dd9d5c365690ab7937f03598039ada779ebea89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ef1fa093-85a4-48ab-ae65-933d18675a28/d2bd70707004d0ed541501541c2c5f8b2c430764.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.10.205.0/24
201.131.115.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:83:e7:33:b4:fa:8b:af:ff:52:05:f7:a1:35:b8:9c:d5:7a:
8d:e5:ec:ce:60:cb:5e:61:70:af:d5:1d:8a:de:c6:c2:97:47:
f6:bd:c9:07:70:ca:ed:8c:39:f4:bf:21:20:5c:b5:bb:ee:09:
b1:7a:96:d9:fb:cf:67:72:e9:27:10:cd:b0:33:75:92:62:ae:
aa:ad:b8:d5:99:20:ed:a5:19:87:25:fa:e5:28:d7:f1:41:9f:
ff:1e:28:22:51:86:f2:4e:39:5a:97:0e:45:8b:87:86:29:0d:
2d:85:bb:c2:aa:a0:38:e3:84:3c:3c:be:e2:6c:f9:1f:f6:f8:
03:19:68:41:a5:27:c4:7e:21:e8:de:a9:d2:db:45:44:3d:dc:
d1:eb:7b:43:10:78:c2:19:0d:99:fb:64:fb:f1:3e:dc:76:4e:
e4:ca:14:bc:4a:3a:09:af:bd:af:07:72:d0:45:48:35:9f:19:
50:21:0f:47:06:37:b7:5f:a4:b3:da:26:64:4d:14:09:80:79:
3e:2c:aa:6a:98:87:e6:58:09:6a:34:63:0a:aa:bd:ce:42:a2:
2a:dc:2d:4e:52:77:e5:2d:f9:6b:a3:a9:8a:25:21:44:2f:0f:
ee:e4:2f:db:8c:b7:5c:2b:67:f9:9e:a5:18:5f:fb:22:ff:2e:
fc:54:03:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org