Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/560bd30c14a7bea9f4188f6aa14e25034a36047e.roa
File: 560bd30c14a7bea9f4188f6aa14e25034a36047e.roa (raw, json)
Hash identifier: mPrNwnFY4dqHaN3dkg6JQpNnbs9z+sNpz+14oRUDPnQ=
Subject key identifier: 26:78:00:94:9A:A5:E5:9A:0D:41:0C:F7:F7:DE:86:3A:ED:33:4B:4C
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 2A59C7
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/560bd30c14a7bea9f4188f6aa14e25034a36047e.roa
Signing time: Wed 06 Dec 2023 07:30:03 +0000
ROA not before: Wed 06 Dec 2023 07:30:03 +0000
ROA not after: Fri 05 Dec 2025 07:30:03 +0000
asID: 10620
IP address blocks: 190.158.204.0/22 maxlen: 24
201.221.172.0/22 maxlen: 24
181.57.248.0/23 maxlen: 23
181.57.250.0/23 maxlen: 23
181.52.218.0/23 maxlen: 23
190.145.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2775495 (0x2a59c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Dec 6 07:30:03 2023 GMT
Not After : Dec 5 07:30:03 2025 GMT
Subject: CN=560bd30c14a7bea9f4188f6aa14e25034a36047e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:a2:97:a3:ad:1b:fe:df:ff:5a:a3:1d:9f:
b5:ea:7a:ce:39:24:c6:a3:29:86:98:b7:22:e8:f1:
a1:b4:e1:9c:34:71:52:8e:80:c1:27:c7:94:bc:bc:
86:45:e0:c1:77:c3:1e:d6:5c:ef:17:60:4f:46:a8:
af:c8:91:c8:b9:0d:18:bc:5d:38:c6:4a:ed:0f:41:
17:88:df:f3:85:29:d0:ba:52:6c:c9:d3:3c:f1:6c:
9a:24:71:d8:e9:cd:c3:aa:c1:d9:8d:fb:85:34:70:
0a:db:33:89:e5:f8:e0:0e:90:e5:8e:ef:7b:5e:12:
a5:06:6a:88:77:2d:1a:1a:6a:22:26:e1:1b:4a:cd:
0c:ed:72:6c:91:dc:58:87:69:30:4c:cf:4a:84:3d:
28:12:d3:ec:c6:1b:14:45:50:ba:2d:e0:53:f2:ae:
36:0d:76:4c:e5:be:0c:60:88:62:04:52:22:4b:40:
94:c3:a3:65:f6:9c:e2:ce:c9:ef:f6:18:a2:f5:e7:
45:4f:a6:12:3a:a2:b3:1d:8d:3b:b3:17:f9:10:00:
ec:84:87:92:80:b3:fb:cb:7e:65:77:97:ad:cd:da:
e5:4f:27:88:38:28:30:fe:27:ff:81:07:ac:a4:9d:
90:50:10:8f:64:30:1e:99:3d:b9:60:e9:91:ab:69:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:78:00:94:9A:A5:E5:9A:0D:41:0C:F7:F7:DE:86:3A:ED:33:4B:4C
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/560bd30c14a7bea9f4188f6aa14e25034a36047e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.52.218.0/23
181.57.248.0/22
190.145.240.0/22
190.158.204.0/22
201.221.172.0/22
Signature Algorithm: sha256WithRSAEncryption
21:4c:33:cb:ff:ab:25:57:1e:4c:40:92:8f:61:b2:0f:ae:fb:
f5:f1:64:e0:9a:28:ff:3a:7c:3c:5b:96:92:94:87:b3:a3:f8:
cb:fd:9e:89:ca:b8:2c:41:15:63:10:87:e4:7f:b1:e1:37:46:
81:e1:ef:ac:f1:6f:76:61:5e:95:7d:7e:c7:68:67:1f:b7:af:
22:11:17:b9:d9:97:ea:00:5a:b0:06:63:16:d1:80:99:d2:5d:
8c:22:17:65:0e:bf:14:a0:6d:a3:9b:67:e4:ad:67:c5:9d:74:
3d:ef:1d:92:39:22:30:20:08:9e:37:93:ff:98:9e:fa:12:8e:
41:2b:f1:86:63:ab:33:62:26:fe:28:01:0a:66:71:cc:13:97:
ae:c2:7e:e6:33:d7:ea:23:a3:76:66:89:98:c0:e3:a7:94:d5:
e3:79:c2:d2:ee:a0:54:da:ff:80:21:a0:fe:13:f4:d0:99:88:
69:3c:1d:92:5c:26:f2:29:a9:74:4a:fd:61:bf:e4:7e:5e:07:
a8:cf:23:88:ea:e0:8f:36:2b:e4:7e:ad:d0:ec:e8:55:db:0a:
b6:56:7b:38:d5:01:f4:4a:9a:a8:84:fb:7c:bf:1d:a6:51:6a:
b6:fa:d7:ce:50:47:64:3c:37:b0:aa:56:74:f8:ba:77:5a:7a:
06:c7:2f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:24:31 2024 by rpki-client on console-ams.rpki-client.org