Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d330b229fec17ce27eafd99a4d2e8ca409e1b74b.roa
File: d330b229fec17ce27eafd99a4d2e8ca409e1b74b.roa (raw, json)
Hash identifier: NJ4zYqV/vAPZLTtxl1WTkEtOJD5PW/cQBzUEYSAtDCU=
Subject key identifier: C1:BD:2E:EC:63:54:CA:58:FC:5E:7F:6D:E8:86:DA:07:6E:37:C2:02
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 0D84D2
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d330b229fec17ce27eafd99a4d2e8ca409e1b74b.roa
Signing time: Thu 09 Sep 2021 05:26:51 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 8100
IP address blocks: 179.61.204.0/24 maxlen: 24
191.101.132.0/24 maxlen: 24
191.101.135.0/24 maxlen: 24
191.101.205.0/24 maxlen: 24
191.101.240.0/24 maxlen: 24
191.101.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 885970 (0xd84d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=d330b229fec17ce27eafd99a4d2e8ca409e1b74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:a7:14:25:cc:46:af:e2:2a:ce:65:53:5b:
26:1a:8f:11:fe:9b:f1:bd:c0:27:c6:1b:a5:61:3f:
f3:5b:d6:f8:04:5f:74:07:66:36:57:36:ba:77:e3:
0b:b2:a1:a2:b5:3e:57:05:a0:5c:08:2f:b0:12:e0:
5b:bd:01:e2:76:d0:98:a5:83:77:0c:67:3c:ff:05:
88:30:2a:17:3e:aa:a7:44:aa:d4:ec:e7:e0:d5:38:
e7:7a:5e:7d:f2:cb:4a:ef:c4:10:bf:d1:16:c5:d9:
6b:0f:d2:41:39:06:4b:4c:cb:7e:72:7f:23:e9:94:
d6:df:0f:7c:f7:5a:3e:52:30:fe:0c:0f:87:16:41:
2d:f1:87:71:23:ab:4c:25:e3:dc:5d:ac:eb:46:cd:
02:a0:b7:27:c8:9c:35:3b:f9:60:90:f6:c6:b1:69:
6d:cc:11:ab:ee:d8:ea:6a:06:df:14:3e:58:e1:80:
27:83:0b:73:50:85:67:2b:9b:18:28:ac:bf:be:1e:
33:fb:aa:da:54:13:8f:aa:16:d9:f2:fa:f9:99:6b:
8a:10:07:e7:55:af:72:2d:fd:6c:0e:1a:62:a2:6e:
a1:62:c4:5f:46:1c:cf:33:3b:75:e5:ca:68:45:f0:
1d:5a:de:6f:d5:99:cb:1c:a5:5a:a6:75:87:04:c1:
d3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BD:2E:EC:63:54:CA:58:FC:5E:7F:6D:E8:86:DA:07:6E:37:C2:02
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d330b229fec17ce27eafd99a4d2e8ca409e1b74b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.204.0/24
191.101.132.0/24
191.101.135.0/24
191.101.205.0/24
191.101.240.0/24
191.101.247.0/24
Signature Algorithm: sha256WithRSAEncryption
23:1e:96:0c:30:de:87:5a:fa:33:4b:2b:ef:c6:69:da:b2:47:
d1:67:bd:da:16:e2:71:23:6d:c7:71:10:0e:05:7e:1e:00:42:
a8:e1:0c:07:aa:11:b0:ea:d6:93:48:33:a5:91:56:0a:1e:70:
a8:13:80:a1:96:e3:07:1e:b7:c2:71:c4:4f:52:2d:22:4b:a1:
a2:0c:47:fc:8b:e0:49:97:bd:94:6b:b4:71:be:4b:d3:a3:f7:
1a:b1:7d:84:5d:53:9d:2d:b8:fe:84:1e:e3:3d:be:c7:31:bf:
5f:a3:2d:35:2e:b5:33:73:19:04:92:8f:14:ca:d5:27:cd:2f:
9c:8b:a1:99:0e:8c:ed:67:71:6b:a4:20:26:07:0a:cf:fa:ad:
a2:d6:e4:4e:ad:48:a0:2d:4c:7b:fa:5f:c8:cd:77:1e:07:b4:
e1:a8:38:ab:f4:72:2e:2b:f9:04:2c:69:0d:c0:f4:32:01:75:
59:1c:d2:4c:68:a0:91:74:35:d7:ab:aa:2c:53:be:54:16:50:
b8:0d:72:24:a5:7c:84:77:56:af:81:4d:61:8f:f4:94:20:7c:
3c:d7:12:ac:54:62:5e:c3:4f:0a:df:ef:0f:49:a6:e3:47:76:
90:46:68:de:b2:8f:82:8d:a7:40:a8:d2:c1:1a:b3:a2:17:9f:
4a:49:8b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org