Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/2f7898a49fa073c2b3152d49413e86619c06767b.roa
File: 2f7898a49fa073c2b3152d49413e86619c06767b.roa (raw, json)
Hash identifier: qsaifzuFV/a2hJUdUOX6zY5w+KQAo46aJZh4MR7LLYc=
Subject key identifier: 02:79:66:30:07:9B:83:8C:F8:77:D9:A8:92:DE:05:6C:FB:72:89:EC
Certificate issuer: /CN=425b31fb70180b4aa636c240ebd5276c722716f7
Certificate serial: 207007
Authority key identifier: D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/2f7898a49fa073c2b3152d49413e86619c06767b.roa
Signing time: Sat 08 Apr 2023 08:30:07 +0000
ROA not before: Fri 07 Apr 2023 08:30:07 +0000
ROA not after: Sun 06 Apr 2025 08:30:07 +0000
asID: 262589
IP address blocks: 179.1.160.0/20 maxlen: 24
190.94.176.0/20 maxlen: 24
190.94.176.0/24 maxlen: 24
190.94.177.0/24 maxlen: 24
190.94.178.0/24 maxlen: 24
190.94.179.0/24 maxlen: 24
190.94.182.0/24 maxlen: 24
190.94.186.0/24 maxlen: 24
190.94.187.0/24 maxlen: 24
190.94.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2125831 (0x207007)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425b31fb70180b4aa636c240ebd5276c722716f7
Validity
Not Before: Apr 7 08:30:07 2023 GMT
Not After : Apr 6 08:30:07 2025 GMT
Subject: CN=2f7898a49fa073c2b3152d49413e86619c06767b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:e5:ef:e1:39:b1:22:0e:42:40:1b:de:65:
af:d4:a2:48:ae:31:d0:93:bd:fe:3c:ed:ad:14:1f:
fa:71:ab:7c:ec:db:de:87:b8:8b:df:ed:f3:ab:ef:
90:db:5c:7d:08:b0:95:22:e4:bc:98:0b:ae:ff:51:
7e:c9:18:57:ca:b9:0f:18:99:95:66:08:f8:b7:2f:
52:b0:16:a7:28:dd:01:75:6a:e8:f0:94:e8:b8:be:
3c:c9:f4:b7:40:8f:da:29:37:9b:bb:7b:81:b6:6a:
60:b5:df:96:6c:c1:82:19:b1:df:83:62:26:68:fa:
23:83:35:99:29:d3:c8:fc:8a:d4:9a:84:a1:2b:80:
3a:2a:48:e1:ce:61:9c:49:e2:0a:1e:e0:0c:38:2a:
6d:63:95:64:91:03:f5:63:ac:da:b9:1d:58:ee:7d:
f5:3b:79:01:eb:d9:49:bd:b3:57:99:c3:d6:5d:8c:
04:30:34:75:92:60:7b:b5:d0:6c:88:e3:55:c0:c3:
c9:0e:22:83:d9:f0:a2:fb:35:42:44:f0:d0:ab:a5:
91:ec:8d:1a:89:f7:d7:ee:5b:83:d0:1b:99:fc:11:
63:0a:85:70:fd:b8:45:72:eb:a8:71:3c:f9:e1:c3:
6e:fb:d8:fa:eb:52:b5:3b:2a:24:00:d8:09:9a:70:
07:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:79:66:30:07:9B:83:8C:F8:77:D9:A8:92:DE:05:6C:FB:72:89:EC
X509v3 Authority Key Identifier:
keyid:D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/2f7898a49fa073c2b3152d49413e86619c06767b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/425b31fb70180b4aa636c240ebd5276c722716f7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.160.0/20
190.94.176.0/20
Signature Algorithm: sha256WithRSAEncryption
88:31:f0:5f:4f:a3:ff:f6:40:1c:ff:c0:5d:ba:0d:88:73:b7:
2c:df:6b:ea:b5:ed:51:f9:f3:83:d7:82:be:85:4d:20:d0:5a:
cb:4d:6a:0c:fa:35:13:f7:e8:15:e0:e5:41:92:cd:b4:a7:1d:
c3:03:bb:bd:8f:5a:64:e4:fa:32:62:2d:e3:2e:35:cc:02:c6:
f1:1e:43:aa:a0:12:7c:7e:0b:d1:2d:3a:b3:aa:ad:60:8c:25:
1a:34:89:fa:5d:da:07:19:2a:42:24:2a:b6:84:07:ef:26:d0:
17:6a:c9:05:c9:af:9d:bb:43:0b:3b:c3:1c:76:34:b3:c7:28:
06:01:05:0b:78:f4:80:df:5b:cd:b5:0e:2e:98:b9:eb:68:cd:
f8:74:8d:ae:28:44:9e:b9:4d:a3:57:8f:86:1d:93:53:24:f3:
ec:09:e2:ff:6b:5c:8a:72:35:cb:f9:dd:12:67:6e:c9:b3:2d:
23:7d:cb:0b:99:57:e6:65:16:7a:e7:c2:84:1b:b8:d9:85:d1:
ca:63:bc:5d:68:1f:07:4f:87:9b:d3:57:28:10:f6:f3:4f:9c:
13:40:ea:fe:76:12:d6:b3:96:23:b6:bc:1e:39:d3:f2:04:d7:
03:f9:1d:cf:ec:00:e5:7d:1d:1d:0d:2d:56:29:94:bd:c1:3f:
33:ea:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:21 2024 by rpki-client on console-fra.rpki-client.org