Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/c2eb36a634f5ddffc4f9a6d579b9a37fc19bbbaf.roa
File: c2eb36a634f5ddffc4f9a6d579b9a37fc19bbbaf.roa (raw, json)
Hash identifier: hz7BHrHT7QxI7Eu+7bscaDGrWUAFoSJS7qj/jLTTLEk=
Subject key identifier: 74:E4:67:DC:36:16:E3:11:D3:84:32:D1:07:32:C6:1D:8D:FB:83:06
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 24E8B9
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/c2eb36a634f5ddffc4f9a6d579b9a37fc19bbbaf.roa
Signing time: Fri 21 Jul 2023 20:56:28 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 263223
IP address blocks: 201.234.239.0/24 maxlen: 24
190.216.240.0/24 maxlen: 24
190.216.245.0/24 maxlen: 24
190.216.249.0/24 maxlen: 24
190.216.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2418873 (0x24e8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=c2eb36a634f5ddffc4f9a6d579b9a37fc19bbbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:68:e2:1f:46:34:9d:97:c8:bf:d1:ea:23:
43:66:60:e0:fa:6e:aa:e3:73:e9:a9:28:00:36:00:
9b:81:c2:09:a6:82:66:2d:07:4f:f9:7a:0b:15:96:
51:3c:72:62:ec:46:e0:6a:ec:c7:db:8c:9f:94:06:
35:06:64:79:ab:95:63:78:05:29:f6:6f:46:bc:56:
9d:a9:57:df:2e:b2:2f:4d:04:f0:1e:74:10:da:15:
5b:70:13:d7:f4:97:2c:ad:d0:4c:e8:61:52:c9:e8:
0e:50:d4:c9:a8:e6:4a:a9:78:b8:fc:23:6e:bd:7c:
13:64:c2:c6:26:39:ec:37:b8:d8:86:8d:ff:ae:e2:
79:f4:7d:99:c7:69:2c:d9:b3:54:4e:e2:2b:31:c4:
53:5a:31:26:dc:0a:c3:ca:41:d2:a5:9e:6e:29:57:
f3:00:f6:c7:a7:fa:d9:7a:4a:51:8d:0c:7d:87:53:
ef:1c:0a:c7:33:9d:62:ad:a1:0d:2d:23:49:94:b9:
78:0f:7a:07:50:90:88:88:eb:7e:2b:c8:7c:70:c1:
8c:f0:57:9d:ea:1f:69:c7:20:3c:71:15:49:c1:35:
09:d6:b7:99:30:c4:f8:73:40:11:e3:f4:9f:fd:48:
13:f6:b5:da:93:ce:32:01:76:63:42:95:9c:ff:0a:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E4:67:DC:36:16:E3:11:D3:84:32:D1:07:32:C6:1D:8D:FB:83:06
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/c2eb36a634f5ddffc4f9a6d579b9a37fc19bbbaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.216.240.0/24
190.216.245.0/24
190.216.249.0/24
190.216.252.0/24
201.234.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:71:dc:02:0a:08:5e:ec:16:6c:37:9e:48:20:6f:5e:2e:77:
86:6a:25:48:7b:5f:42:30:bf:50:5b:3d:ab:73:aa:6a:54:23:
64:b3:8c:78:f4:86:b0:ca:ac:5a:fb:5e:5a:33:66:03:28:4a:
66:1d:0b:48:32:c9:17:6a:fc:8b:45:af:e0:38:6b:54:69:14:
9a:5c:1d:02:dc:d9:93:46:ab:2a:40:a4:4d:c7:c1:3b:23:12:
68:95:cf:85:a4:31:a6:9c:f7:32:db:4d:1c:36:2b:c5:7e:6f:
fd:eb:53:8f:c5:56:00:d3:cb:5e:c2:14:64:4d:61:f3:51:c1:
fe:68:1b:90:fd:00:1d:80:01:fb:14:28:21:9f:15:36:d3:8c:
f0:a2:ce:2c:51:7d:e4:a2:39:4a:02:03:96:59:65:d1:7f:a1:
23:44:1d:3e:25:fd:a0:e0:bd:f5:7a:ae:9d:3b:d8:32:9a:b3:
c7:2b:9d:a2:13:e6:1a:a1:ea:77:86:0c:75:bb:b3:8d:19:66:
b1:bc:df:ae:44:42:0c:bc:b4:98:c0:bb:5b:91:b9:68:69:1f:
64:62:a1:ae:1b:2c:6a:15:33:35:37:2d:0f:da:59:77:94:a0:
d4:47:74:ed:4f:66:7b:60:dc:bc:6e:09:8f:fa:01:47:6e:55:
09:19:17:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org