Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20305.roa
File: AS20305.roa (raw, json)
Hash identifier: JsS/cQfCzGg1PrUxExxroUF/fQqk9eZUzJcG+LjswDw=
Subject key identifier: C0:5E:C8:E3:B3:75:AE:75:5D:DA:C1:62:14:E3:49:BC:3E:28:BE:27
Certificate issuer: /CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Certificate serial: 01C59E922E4EFD67805FF69B9967EF2BFFD51D4D
Authority key identifier: 41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20305.roa
Signing time: Tue 05 Mar 2024 18:07:59 +0000
ROA not before: Tue 05 Mar 2024 18:02:59 +0000
ROA not after: Tue 04 Mar 2025 18:07:59 +0000
asID: 20305
IP address blocks: 200.0.252.0/24 maxlen: 24
200.70.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:c5:9e:92:2e:4e:fd:67:80:5f:f6:9b:99:67:ef:2b:ff:d5:1d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1
Validity
Not Before: Mar 5 18:02:59 2024 GMT
Not After : Mar 4 18:07:59 2025 GMT
Subject: CN=C05EC8E3B375AE755DDAC16214E349BC3E28BE27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:0e:2c:50:be:ad:5b:36:66:31:a3:22:f5:b7:
1e:b8:23:f7:65:14:c6:30:f8:b2:97:38:d2:67:90:
a7:a6:76:6a:e0:8f:f3:01:81:b9:74:b5:03:ad:22:
75:a0:49:02:64:1c:bf:1e:fc:25:43:4a:59:f9:a4:
bd:9b:e5:e0:a8:3b:a9:ce:d9:7f:6d:a7:c4:fe:8b:
d0:4d:96:77:41:5b:33:e6:b1:ce:9b:c5:4c:90:92:
04:f7:0f:7f:35:a2:16:12:4e:71:3c:d4:96:6f:11:
45:82:a9:9d:e4:02:b3:0b:76:45:d1:36:5b:68:5e:
1b:95:65:c3:ea:d6:7f:2f:47:00:d9:60:9c:07:ae:
88:11:fb:00:bc:57:e0:a3:9f:bc:ee:ce:08:ae:8a:
74:cd:3a:52:b8:12:15:5f:7b:c1:96:5d:1a:22:3e:
ea:d3:aa:96:00:0e:be:32:9e:0d:a8:4c:1b:11:92:
ff:d2:30:b1:2d:db:9a:85:78:5f:d6:cb:31:1a:f3:
e6:a7:7f:32:36:47:aa:98:2c:9d:57:9e:7d:7d:29:
3f:de:d9:21:3e:c5:39:c6:7e:24:77:d7:3a:3f:0b:
15:85:dd:a3:4d:c4:72:32:61:52:12:5a:02:22:23:
fe:4e:1d:53:62:d0:c1:e4:eb:4b:94:3a:e3:22:54:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5E:C8:E3:B3:75:AE:75:5D:DA:C1:62:14:E3:49:BC:3E:28:BE:27
X509v3 Authority Key Identifier:
keyid:41:08:19:C7:C9:B4:C8:5C:E0:B1:D2:27:41:BE:5E:40:A1:F0:E7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410819C7C9B4C85CE0B1D22741BE5E40A1F0E7B1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D1A5E65ACB417339855ADA5A6C5416DC041CCF0640803843898BE56C4DF6C32/0/AS20305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.0.252.0/24
200.70.26.0/24
Signature Algorithm: sha256WithRSAEncryption
17:da:7b:fe:08:3f:a8:61:c9:d4:dc:22:e6:66:6c:51:92:90:
32:97:d0:5f:69:75:60:cd:54:8f:b6:63:30:51:23:b2:37:10:
5c:28:40:3c:66:45:25:19:1a:7e:13:dd:ef:fb:b4:56:95:58:
95:f0:d8:7e:6a:d9:06:dd:0b:26:72:95:9b:8e:fa:7d:14:24:
15:83:d8:3c:6c:32:9b:f4:20:b3:84:00:a4:9f:cf:b1:18:f2:
b7:26:6b:5c:f3:45:98:14:a4:da:d7:5a:ea:69:4c:39:46:e9:
0a:4e:b4:9f:64:8b:90:08:4b:8c:59:d6:fb:c2:26:21:e9:da:
2a:e0:18:7e:9d:6e:76:cc:94:52:26:95:1e:63:ea:f7:df:02:
9c:3e:95:09:84:60:2f:4f:d5:d7:9d:d0:59:83:4f:c2:2b:ba:
e2:7a:0e:68:70:16:dc:e3:69:d3:34:ac:7a:ec:18:35:60:4a:
c4:bb:31:80:b7:d9:70:b9:2a:6f:3b:5b:cb:59:d0:3a:58:ff:
4e:8b:d3:cc:a9:10:40:b0:61:d1:a9:ce:4d:a6:7f:0e:47:92:
f2:51:60:18:19:d3:30:18:7d:5d:9f:31:52:6b:36:e2:80:19:
4d:74:16:37:92:30:4e:de:cb:0b:29:be:b3:91:1f:33:25:ee:
4b:2d:d1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:15:50 2025 by rpki-client