Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f4013c6b10f6873969271cb5250565919d5c136b.roa
File: f4013c6b10f6873969271cb5250565919d5c136b.roa (raw, json)
Hash identifier: c3eT9Ek7HNZCYsb/6qLVac5jv/2RFss4oQ7jb87CRhs=
Subject key identifier: 10:9A:B9:5B:0C:73:FF:B4:C0:8F:FC:B8:41:DA:E7:AF:49:78:F8:0A
Certificate issuer: /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial: 24C09B
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f4013c6b10f6873969271cb5250565919d5c136b.roa
Signing time: Fri 21 Jul 2023 20:55:53 +0000
ROA not before: Thu 20 Jul 2023 20:54:57 +0000
ROA not after: Mon 21 Jul 2025 20:54:57 +0000
asID: 263771
IP address blocks: 201.234.224.0/24 maxlen: 24
201.234.235.0/24 maxlen: 24
190.216.241.0/24 maxlen: 24
190.216.244.0/24 maxlen: 24
190.216.251.0/24 maxlen: 24
190.216.253.0/24 maxlen: 24
190.216.254.0/24 maxlen: 24
200.41.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2408603 (0x24c09b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
Validity
Not Before: Jul 20 20:54:57 2023 GMT
Not After : Jul 21 20:54:57 2025 GMT
Subject: CN=f4013c6b10f6873969271cb5250565919d5c136b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:2d:03:6b:f7:36:c5:dd:e5:35:31:92:6f:
70:c5:e5:7f:b3:b3:6f:18:a3:d5:59:f7:cd:dd:58:
69:74:93:2e:69:6a:11:8e:13:6f:bc:bf:a5:a2:80:
5f:b3:14:ff:c3:fd:3d:64:1a:b5:cc:33:8f:9d:da:
51:89:f6:f5:74:59:95:b0:ec:80:17:fc:30:d4:04:
f5:1a:54:46:fd:d7:f5:51:b3:46:5f:46:65:1f:65:
4e:ce:bc:13:1d:85:e8:f6:a4:2c:b9:95:de:d6:3d:
1d:3a:52:0e:7b:65:ff:c7:c5:95:55:cb:8b:a2:57:
af:d8:fe:8d:56:2c:85:4c:1f:b8:2f:80:2a:09:50:
2e:81:ab:f2:c4:61:e0:f1:8a:83:c3:31:3f:0c:95:
3b:7c:ad:d5:85:4c:8b:69:f2:1d:99:d4:d1:70:d2:
98:85:32:1d:b8:a9:5d:5a:a6:3c:3a:f0:1a:61:40:
17:77:f4:09:77:ed:42:28:d3:aa:5e:0f:b4:cb:75:
61:08:75:31:79:be:20:39:2a:63:46:6c:e6:74:a1:
e7:20:f9:36:c5:2d:d6:15:1f:5a:41:1f:b3:7e:17:
c8:02:d1:57:0a:00:6c:d5:31:9e:3e:b8:fa:55:91:
94:0e:93:ee:64:6d:c4:af:3e:31:ff:ab:b2:34:bb:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9A:B9:5B:0C:73:FF:B4:C0:8F:FC:B8:41:DA:E7:AF:49:78:F8:0A
X509v3 Authority Key Identifier:
keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f4013c6b10f6873969271cb5250565919d5c136b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.216.241.0/24
190.216.244.0/24
190.216.251.0/24
190.216.253.0-190.216.254.255
200.41.117.0/24
201.234.224.0/24
201.234.235.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ab:09:1e:c1:39:d5:8b:77:18:99:e9:4e:ad:74:33:0a:11:
2a:67:c5:07:8a:a1:fd:a0:c4:13:42:35:98:12:5c:48:84:18:
22:3c:cd:bb:05:ab:5c:0c:e4:72:99:89:c0:c7:c2:bc:a8:a8:
2e:2c:ad:19:fa:b9:d6:c0:bc:57:e5:c4:3b:66:ba:a8:84:a3:
bf:78:47:bd:76:6c:ff:44:c4:c2:60:72:74:df:df:33:55:c7:
94:70:e3:54:51:8a:63:80:36:ae:f4:23:e2:54:bc:72:2d:e0:
86:5f:e6:3b:7a:01:3f:e3:e3:c9:49:e9:ae:56:24:ca:50:54:
c6:12:4d:47:33:c3:7c:63:c0:f7:a1:c3:bd:3c:fb:94:e3:c4:
8d:99:e3:6d:53:d3:8c:76:d8:5a:27:7c:73:3d:7e:34:46:26:
0d:b7:74:e6:de:ca:e8:ce:57:44:b1:19:ed:b8:0a:d6:ec:b5:
b2:21:a8:05:9d:09:0c:1e:c1:af:a5:ad:df:b3:65:fc:83:b3:
c9:8b:1a:f9:b6:04:7e:3f:6f:a2:08:4d:b1:ec:06:c6:ca:c8:
fa:2d:c6:ad:98:82:14:10:f8:91:39:f4:88:d2:11:b0:1d:86:
47:18:9f:d0:51:9b:12:9b:a6:c6:7c:b8:7f:8b:88:26:c3:ee:
c3:12:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org