Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/d7ddd0f9c23ab7cd0668974920d85cb23afc4d65.roa
File: d7ddd0f9c23ab7cd0668974920d85cb23afc4d65.roa (raw, json)
Hash identifier: 1PCGch+PAvZPeQfEarhWp9ez2hAdJrO9ch+EiX1U+ws=
Subject key identifier: 9A:35:82:C6:0B:0F:B5:24:7D:64:00:C3:1A:F5:E3:87:00:24:09:7A
Certificate issuer: /CN=e85efae22e3a2742c6ce22ce987058a023b76f56
Certificate serial: 1734C1
Authority key identifier: 0C:C2:EC:FC:9C:CA:AB:A8:B2:A6:E6:46:4D:C6:29:4E:67:60:C9:10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e85efae22e3a2742c6ce22ce987058a023b76f56.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/d7ddd0f9c23ab7cd0668974920d85cb23afc4d65.roa
Signing time: Thu 03 Aug 2023 22:11:23 +0000
ROA not before: Wed 02 Aug 2023 22:11:23 +0000
ROA not after: Sun 03 Aug 2025 22:11:23 +0000
asID: 265844
IP address blocks: 200.115.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1520833 (0x1734c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e85efae22e3a2742c6ce22ce987058a023b76f56
Validity
Not Before: Aug 2 22:11:23 2023 GMT
Not After : Aug 3 22:11:23 2025 GMT
Subject: CN=d7ddd0f9c23ab7cd0668974920d85cb23afc4d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:57:10:b8:12:40:2a:81:0f:e9:f5:1b:3c:ee:
62:d6:6d:ca:62:72:cc:f6:60:78:de:bf:33:98:31:
2a:52:db:30:01:97:c6:62:b9:d6:b1:87:4f:f8:2b:
30:67:49:8f:07:3d:3f:61:1d:81:56:79:c3:40:cb:
a2:ce:b7:c6:9f:f5:00:63:5e:92:09:3d:1a:09:a3:
19:00:89:4c:6a:7c:9f:00:ec:a7:fc:ae:a0:40:3d:
33:5e:df:91:7a:ff:31:e9:23:d8:b5:68:4f:96:dd:
eb:07:37:94:f1:17:d7:29:29:c3:06:88:34:80:bf:
44:36:03:78:75:61:51:d1:08:97:9d:8c:a7:d6:2e:
18:0d:5e:63:04:71:08:28:6c:96:19:54:a2:8d:4a:
35:c2:f7:74:c1:64:44:a4:17:71:55:26:0c:8f:1f:
f9:b8:94:09:19:15:7d:ab:03:15:bf:22:a2:75:1e:
97:c2:62:b6:84:13:b3:1d:a2:76:69:8c:9d:0a:89:
f4:54:32:27:4f:16:09:da:54:00:36:cb:d9:df:f9:
1f:29:59:d1:dc:32:2c:5f:43:02:0b:22:61:57:28:
5b:5e:05:bb:fe:cb:b4:22:72:90:55:37:cd:c0:5d:
db:25:55:98:cc:aa:17:13:ac:44:7b:56:19:ab:de:
71:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:35:82:C6:0B:0F:B5:24:7D:64:00:C3:1A:F5:E3:87:00:24:09:7A
X509v3 Authority Key Identifier:
keyid:0C:C2:EC:FC:9C:CA:AB:A8:B2:A6:E6:46:4D:C6:29:4E:67:60:C9:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e85efae22e3a2742c6ce22ce987058a023b76f56.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/d7ddd0f9c23ab7cd0668974920d85cb23afc4d65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f299d153-23da-43b7-8c4a-12ef38fdc354/e85efae22e3a2742c6ce22ce987058a023b76f56.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.115.14.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6b:d5:4a:6b:4c:5d:4f:8a:f5:07:cf:e7:29:d8:58:b6:e0:
2f:87:e0:57:39:cf:ef:dc:74:39:81:14:d2:29:37:f9:9f:7e:
ad:c5:9f:40:e7:64:0f:fe:1f:fb:5d:ed:7f:a6:ae:0b:c9:cf:
9f:68:e4:2a:b8:df:dc:83:c4:8e:e7:34:99:69:86:be:8b:df:
8d:8f:2f:f9:19:ee:42:14:6b:3a:71:40:43:80:53:fd:bf:c6:
4c:6c:21:aa:30:b6:c4:6b:cd:3f:9b:5b:ae:08:f1:2f:07:01:
b8:c5:e8:85:02:b6:51:af:fc:70:69:1b:47:36:62:66:a1:4c:
06:78:34:dc:59:93:73:2e:61:94:b1:60:fb:01:da:1c:4c:d8:
82:80:52:2b:2a:8e:f2:6a:85:78:7e:42:54:db:eb:dc:d0:54:
11:21:be:1f:85:b7:ea:aa:23:c8:d2:cd:93:1f:0f:39:68:09:
f3:d4:9b:1b:55:b7:15:34:0a:12:98:8b:52:67:17:c3:b3:50:
7f:8c:a4:d5:0f:f5:45:74:ad:f9:5f:bf:98:71:5f:9b:74:eb:
72:c4:97:2f:cd:ce:b9:e7:57:39:70:d8:86:bc:8a:76:db:c6:
5e:d8:3e:d7:52:0b:e7:0b:5b:b5:4a:e0:db:ab:ee:23:1b:2d:
8a:89:c5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 23:46:21 2023 by rpki-client on console-fra.rpki-client.org