Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/1a029650deb04f03898fd536e866026bcf0b3ea0.roa
File: 1a029650deb04f03898fd536e866026bcf0b3ea0.roa (raw, json)
Hash identifier: aEBRBCd+Sg/vsRjO+v268rNl6YbGpRC81ISalSxWo4Y=
Subject key identifier: B3:8C:41:82:15:B5:2B:C8:07:C5:54:DE:F9:67:98:3A:01:67:0C:AE
Certificate issuer: /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial: 21C4B0
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/1a029650deb04f03898fd536e866026bcf0b3ea0.roa
Signing time: Fri 09 Jun 2023 18:33:59 +0000
ROA not before: Thu 08 Jun 2023 18:33:57 +0000
ROA not after: Mon 09 Jun 2025 18:33:57 +0000
asID: 265705
IP address blocks: 186.28.108.0/22 maxlen: 24
186.31.128.0/22 maxlen: 24
190.26.30.0/23 maxlen: 24
186.31.155.0/24 maxlen: 24
186.28.176.0/22 maxlen: 24
186.28.180.0/23 maxlen: 24
186.28.184.0/22 maxlen: 24
186.30.120.0/22 maxlen: 24
190.27.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2213040 (0x21c4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Validity
Not Before: Jun 8 18:33:57 2023 GMT
Not After : Jun 9 18:33:57 2025 GMT
Subject: CN=1a029650deb04f03898fd536e866026bcf0b3ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:47:ee:e0:5b:27:44:f8:67:40:99:cb:c2:ce:
cd:98:fb:e3:05:e5:fe:b0:96:a0:45:a9:d0:d0:ff:
50:15:bb:d7:2c:44:1a:f8:2f:93:f1:f8:e1:dd:06:
50:ae:08:7b:bf:64:8d:9d:12:ef:21:3f:6e:e0:cf:
c2:90:33:94:b1:2e:64:2f:4f:42:f0:c0:01:db:d6:
35:a3:40:96:a9:b2:79:f4:8e:72:55:47:3e:4f:ef:
c9:bb:10:cf:f1:f0:48:46:d9:4e:ba:44:1f:aa:8b:
ce:3d:51:07:74:52:07:45:07:e3:f3:ee:96:e9:ed:
f5:38:14:a5:2f:4d:ec:f6:35:19:d2:83:c4:93:ea:
44:01:96:4d:8d:8c:b5:9b:da:c7:e6:6e:43:09:29:
18:45:07:f3:1a:86:46:53:8a:b6:cd:02:b2:39:f1:
f5:c0:b7:c6:5c:5f:31:5c:7c:6f:14:93:6e:ea:a4:
dc:0e:1e:05:fa:1f:15:bc:5c:c4:e8:da:f8:5a:1a:
93:c3:be:e4:3c:bb:92:e5:98:5b:39:f7:2d:4f:24:
99:7c:5b:ac:bf:9b:41:2a:ca:fe:93:a2:b7:71:9f:
d4:49:74:8e:55:a8:10:b9:5c:23:21:c8:45:fd:f4:
2e:5a:b2:e6:92:77:cd:18:e2:e7:20:37:b6:ff:cf:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8C:41:82:15:B5:2B:C8:07:C5:54:DE:F9:67:98:3A:01:67:0C:AE
X509v3 Authority Key Identifier:
keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/1a029650deb04f03898fd536e866026bcf0b3ea0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.28.108.0/22
186.28.176.0-186.28.181.255
186.28.184.0/22
186.30.120.0/22
186.31.128.0/22
186.31.155.0/24
190.26.30.0/23
190.27.136.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:18:cb:79:62:a2:c8:70:f1:93:5d:ad:cf:7d:30:cb:f3:6d:
00:47:38:ca:38:cf:96:05:fd:cc:3e:0e:cf:4f:23:19:5a:a7:
58:a6:1c:4d:f1:ec:d1:98:de:9d:cd:b7:f6:e6:d5:e8:3e:ab:
ca:fe:72:3e:30:1a:f2:78:f0:9a:1c:ba:4e:43:29:2f:b6:67:
18:bf:a7:91:3e:fd:eb:0d:73:ef:32:e8:8d:dd:b8:df:6f:60:
25:28:46:95:97:43:f4:f5:24:54:97:2a:dd:f9:e5:03:ee:0c:
17:85:79:ee:82:fb:09:b9:91:11:73:bb:2d:c2:e8:bd:79:1a:
a6:da:fb:2f:81:5a:b8:cf:f0:4b:d3:bf:94:34:16:fb:52:7e:
54:5f:97:74:5c:25:10:90:ea:e2:21:89:89:3c:90:f7:28:c4:
ff:f8:f5:52:ee:65:15:d9:5e:4e:cb:40:e6:5f:b7:9c:9f:e5:
4f:a4:e1:0f:24:7b:60:f4:8c:eb:17:15:f0:16:f8:7c:f1:15:
3d:ce:64:4d:3a:bf:31:b5:a2:f1:cd:92:7f:cb:35:7f:bb:15:
17:da:94:57:19:87:a5:bd:85:cb:4a:f4:14:49:8c:ff:a3:02:
82:93:bc:38:3b:86:3e:5e:71:62:c7:c7:2c:f3:98:10:e8:e8:
46:b0:00:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org