Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32342d3234203d3e203332303938.roa
File: 3230302e32332e3136382e302f32342d3234203d3e203332303938.roa (raw, json)
Hash identifier: Gp2iMDat6xDB62wWodlsF64N62bWvPeHe0DmnhFw1lw=
Subject key identifier: 25:51:68:7A:50:4F:D3:E3:1D:13:30:1E:4E:0E:9F:18:F6:81:BB:2E
Certificate issuer: /CN=DA9CE332EEAB17EF6270B269990D948099DD5049
Certificate serial: 163DD0519E399920C32A8745EB1CA095058F46E9
Authority key identifier: DA:9C:E3:32:EE:AB:17:EF:62:70:B2:69:99:0D:94:80:99:DD:50:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32342d3234203d3e203332303938.roa
Signing time: Tue 05 Mar 2024 17:43:54 +0000
ROA not before: Tue 05 Mar 2024 17:38:54 +0000
ROA not after: Tue 04 Mar 2025 17:43:54 +0000
asID: 32098
IP address blocks: 200.23.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:3d:d0:51:9e:39:99:20:c3:2a:87:45:eb:1c:a0:95:05:8f:46:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA9CE332EEAB17EF6270B269990D948099DD5049
Validity
Not Before: Mar 5 17:38:54 2024 GMT
Not After : Mar 4 17:43:54 2025 GMT
Subject: CN=2551687A504FD3E31D13301E4E0E9F18F681BB2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:29:cc:65:81:b3:7f:2c:15:0f:b3:79:92:
f0:1f:b1:a6:6d:8c:ea:8f:dc:71:ed:18:3f:2b:cc:
c1:67:11:3b:8b:f3:75:90:1d:e7:51:3a:50:15:9a:
94:e8:51:37:1f:dd:b9:54:63:02:be:76:b8:35:0c:
8d:a1:e7:e1:f2:4d:6a:2c:3c:8b:1c:61:34:5d:50:
31:25:53:df:8c:5d:4d:9b:a8:b9:31:4b:1b:79:fc:
91:7a:a2:94:fa:b6:a5:7e:f3:05:84:dd:db:9c:f7:
fd:e9:db:fd:9b:8d:1e:25:87:ef:9e:b8:87:3d:9b:
35:86:cc:15:87:62:24:e4:cb:5f:3f:ab:b2:98:72:
43:f6:27:52:e5:5a:4f:aa:e2:82:ce:18:a9:ea:e3:
82:b3:25:56:75:42:82:44:ec:44:bc:31:44:46:58:
47:d4:10:27:c8:59:79:2a:dd:75:bd:bb:0f:ea:28:
5a:fc:87:10:f8:a5:7e:3e:cc:96:ed:74:fe:0b:0e:
7c:ec:81:97:8a:b9:98:f8:dc:82:b3:95:8d:46:d3:
a5:2c:a7:ac:f4:01:ee:83:8a:9f:9f:09:4f:af:66:
a3:09:38:5d:bf:60:8e:6a:e6:bd:68:87:5c:55:da:
b7:4a:5b:5e:f3:57:6e:3e:80:ef:c1:f6:0a:ef:be:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:51:68:7A:50:4F:D3:E3:1D:13:30:1E:4E:0E:9F:18:F6:81:BB:2E
X509v3 Authority Key Identifier:
keyid:DA:9C:E3:32:EE:AB:17:EF:62:70:B2:69:99:0D:94:80:99:DD:50:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/DA9CE332EEAB17EF6270B269990D948099DD5049.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA9CE332EEAB17EF6270B269990D948099DD5049.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D999D3A68842F99FBB597F38B2C3EBFAEE804D61D600863CE6797F253484C45B/0/3230302e32332e3136382e302f32342d3234203d3e203332303938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.23.168.0/24
Signature Algorithm: sha256WithRSAEncryption
11:16:57:b3:fe:ec:7a:52:1d:5b:55:ad:98:98:c8:98:ed:7a:
75:05:86:d0:9b:35:8e:9c:85:ec:fe:0c:a7:73:63:f0:22:20:
ea:b1:4a:7e:88:80:4d:f1:6b:98:a9:0e:df:75:f9:91:53:d7:
d2:19:76:53:37:ae:f1:a0:06:45:6e:e1:da:f2:41:9f:ee:c1:
88:0a:4f:f7:d2:e8:fd:4b:27:df:66:04:e3:75:bf:7a:4d:e0:
9a:38:82:df:8f:49:22:aa:33:a0:2d:8d:63:44:ea:35:60:af:
7a:78:36:6a:7b:ba:2a:f7:91:62:f5:a9:53:e1:30:16:fd:80:
61:53:0f:66:df:ef:5f:b2:c5:17:31:92:d6:61:09:83:36:e4:
b1:12:e1:30:19:d8:26:1f:0f:c4:8d:89:d5:b7:50:bb:4c:1b:
4f:c1:c4:25:5b:9d:5c:99:d3:62:83:90:57:75:76:20:ad:ba:
d4:d8:14:ca:fe:f7:76:6d:9e:04:1f:44:a1:dc:df:bd:18:65:
4c:4c:24:d0:af:36:c9:ca:ee:b7:a3:9f:32:ad:51:75:4a:1e:
3d:7c:cd:33:7d:c6:bd:b5:59:a3:77:ed:4b:ac:e0:20:3f:70:
cb:e9:ea:80:e6:1e:3a:96:80:cc:66:78:94:1b:45:1a:a2:dc:
c1:a5:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:48:11 2025 by rpki-client