Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d4e3a00afda1fe6e8ef435485df9846576286631.roa
File: d4e3a00afda1fe6e8ef435485df9846576286631.roa (raw, json)
Hash identifier: ZTohTBK2O5VPHf7rrp9DtfvDEM0Kr4vOxmy+pf+a/SA=
Subject key identifier: FA:61:C3:7C:3E:05:D0:AE:F2:79:A8:81:F2:17:94:C6:A1:26:F4:7B
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 07D37B
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d4e3a00afda1fe6e8ef435485df9846576286631.roa
Signing time: Wed 07 Apr 2021 16:03:00 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 3257
IP address blocks: 181.215.176.0/24 maxlen: 24
191.101.209.0/24 maxlen: 24
181.214.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 512891 (0x7d37b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=d4e3a00afda1fe6e8ef435485df9846576286631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:ad:0f:f8:b3:f3:95:38:c2:fd:b5:48:b7:
bb:c6:c4:d9:80:a9:a1:c1:d6:7f:62:4f:01:99:c1:
33:34:1f:60:6f:24:4e:c4:56:9d:73:83:1b:a5:0d:
a8:34:2c:1e:75:a4:10:4d:e6:b7:e6:f1:b3:ab:70:
70:ee:53:61:a6:96:0f:b9:52:40:10:d7:6e:b0:c5:
67:1d:2b:70:9f:32:1d:8a:86:38:30:43:cd:50:5b:
ad:82:43:74:85:54:52:88:8d:10:45:16:54:c2:a7:
2d:63:9c:42:2a:1a:9d:be:04:02:aa:58:6d:05:6e:
5b:ea:c6:7d:00:b6:3e:fa:0f:d3:1b:4b:82:f3:00:
dd:52:01:e2:85:a6:75:38:0b:65:f2:53:24:0c:27:
49:24:3f:04:9a:ad:fa:d1:a0:21:70:4a:81:a9:34:
0b:af:18:b0:ec:66:8a:72:12:13:dd:3c:a8:64:a2:
95:fc:ba:3d:48:af:6a:90:fb:4a:81:c7:5e:86:b8:
82:7f:1f:c8:c7:65:31:f9:96:0b:88:a0:f1:e4:dd:
50:62:0c:4d:20:00:4b:18:99:b3:01:68:76:a0:18:
8d:47:9e:0f:f2:11:a0:05:08:16:83:59:a9:dd:cd:
e5:14:ea:84:4b:38:18:f0:5b:9b:1c:9f:29:7f:4f:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:61:C3:7C:3E:05:D0:AE:F2:79:A8:81:F2:17:94:C6:A1:26:F4:7B
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d4e3a00afda1fe6e8ef435485df9846576286631.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.206.0/24
181.215.176.0/24
191.101.209.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a8:55:52:f3:93:fc:b3:f8:b2:e8:a3:82:8b:df:5a:1b:83:
b0:05:c8:35:18:75:a6:10:83:e0:0a:74:3e:6d:2b:54:c3:1a:
2e:f2:c3:f4:0d:9e:8f:4e:53:6f:4e:83:1f:e5:6c:c0:58:f5:
12:f3:f1:47:31:d6:80:d2:37:77:4b:19:a0:0e:e6:88:62:74:
37:74:fa:88:ec:07:eb:91:66:44:1b:85:78:44:83:c6:62:e1:
43:7a:8d:1d:fe:80:be:65:db:bf:9b:29:d9:be:82:f3:1d:db:
7f:b3:ef:0a:53:6c:24:ab:9f:4e:9d:4f:ae:75:a8:66:4f:06:
6b:ee:9a:3e:03:fb:05:9c:8e:09:18:4a:30:2a:ec:02:2e:25:
81:a4:67:83:ea:1f:9d:b3:39:11:a9:55:1e:2b:26:62:53:eb:
ed:8a:44:72:b2:64:e1:44:89:fb:42:08:d1:f9:37:59:91:a2:
27:b7:d4:30:03:7a:9b:9a:a9:42:c5:f7:b3:b1:11:1d:0d:64:
e4:cc:b9:00:df:13:2b:29:40:55:68:72:f8:37:0a:f1:90:48:
88:45:57:0c:9b:14:10:cb:8d:b0:a2:9b:86:df:f4:1b:ce:75:
6b:77:36:c9:8b:c1:ff:6f:cf:3f:30:ee:53:ce:02:7a:3c:d3:
51:0a:6e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-ams.rpki-client.org