Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e7b09a972b9bcc6cb147fb6e30577004f75a8965.roa
File: e7b09a972b9bcc6cb147fb6e30577004f75a8965.roa (raw, json)
Hash identifier: Me6Bp2JubVKfsqH0Sl1MvKCy/uLBxWGn52rVsgQ/Bys=
Subject key identifier: F4:B9:D7:BA:7F:89:E5:21:17:6A:64:67:01:CD:1F:40:86:EE:19:5C
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 0E1D5C
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e7b09a972b9bcc6cb147fb6e30577004f75a8965.roa
Signing time: Mon 20 Sep 2021 14:44:30 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 46562
IP address blocks: 191.96.215.0/24 maxlen: 24
179.61.206.0/24 maxlen: 24
179.61.216.0/24 maxlen: 24
181.214.5.0/24 maxlen: 24
181.214.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925020 (0xe1d5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=e7b09a972b9bcc6cb147fb6e30577004f75a8965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4c:af:24:3b:3a:fb:80:af:9e:7c:a7:95:17:
d4:0b:91:be:7f:95:0f:96:68:8f:ea:b1:37:96:3c:
57:c0:23:cb:3d:cc:4a:76:35:19:fd:76:47:5a:95:
a8:82:67:3e:fa:04:fc:e2:54:b9:57:4f:c4:be:40:
2a:4e:f5:c1:db:93:1f:a2:24:7f:7b:d2:6a:6a:77:
91:21:e7:d2:8d:6e:b9:c8:57:a8:0c:23:52:1e:1a:
29:d0:4a:12:a4:40:da:dc:96:a9:83:3e:22:da:b9:
92:22:15:ce:f7:83:60:c3:9f:9c:17:a1:b5:3b:70:
0b:f1:16:9a:31:cd:e3:4e:23:73:0b:21:77:f9:d4:
68:06:5d:fd:b0:43:5e:0d:4c:97:c4:4e:83:05:b5:
9c:f9:d2:90:67:fd:a7:a2:83:3b:d1:e4:58:d9:73:
ab:ed:4f:c1:c5:f5:22:ac:84:35:b9:bc:25:0b:19:
3f:c6:60:20:ef:e4:35:2e:37:a0:c7:47:fb:51:d2:
e9:cd:10:a4:7f:ed:f2:1c:05:ad:3a:86:33:28:93:
85:06:5c:e6:cd:e2:40:e0:87:a2:76:19:fb:55:75:
ce:04:96:7d:88:22:69:98:e9:a5:e8:17:68:4b:52:
bc:03:f9:27:3f:48:a2:3b:8e:3a:2d:67:b5:0d:fe:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B9:D7:BA:7F:89:E5:21:17:6A:64:67:01:CD:1F:40:86:EE:19:5C
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/e7b09a972b9bcc6cb147fb6e30577004f75a8965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.206.0/24
179.61.216.0/24
181.214.5.0/24
181.214.247.0/24
191.96.215.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:7d:08:95:b1:c8:b7:a4:ae:9d:54:f9:1a:f9:8b:23:49:d5:
91:f8:d1:cf:ee:71:fb:42:fa:20:9b:90:6d:b2:7b:f3:ce:31:
0a:c6:de:cb:a2:ee:6e:c9:df:c6:ad:68:98:c4:39:95:4c:17:
07:0e:33:61:e2:10:7b:c2:cc:52:4f:b1:3f:4a:79:c6:75:05:
f5:ef:d9:78:99:12:72:f7:e2:ec:b9:3d:73:dd:46:f1:c4:5b:
ad:87:38:11:54:e1:d1:fe:c6:c0:f0:b0:d2:0b:26:60:81:d4:
5a:d1:80:4c:45:32:4a:20:1f:3b:4e:20:55:7f:7b:d3:0a:4e:
0e:02:96:8e:63:f0:73:f9:24:f6:03:6f:5b:da:45:d9:33:7f:
79:82:3e:dc:10:ab:30:27:28:27:fa:c4:52:66:c4:ad:d0:82:
93:88:b0:70:9c:be:5e:70:21:f1:e1:7c:a4:b8:14:0f:68:99:
5a:05:51:e6:da:67:dc:18:6d:e8:8b:d9:25:31:2d:fb:3e:32:
e6:1e:35:d1:85:c8:de:72:b1:b7:2e:1b:99:90:0c:6a:95:ae:
2b:ca:1a:32:ec:e3:83:a4:15:55:8b:22:c6:44:a0:45:20:87:
1b:fe:b0:4f:5a:b3:d4:bd:f7:17:84:56:c2:67:6d:4e:83:64:
00:e5:59:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org