Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/172034e01a0ebeebaf6766550c5b6f37aa6b63b1.roa
File: 172034e01a0ebeebaf6766550c5b6f37aa6b63b1.roa (raw, json)
Hash identifier: xlN5yVAEr7RnHtUEq0YBygnwg1J1toSHbEsO25UYVP4=
Subject key identifier: D5:D5:AA:47:EE:D0:23:AB:E2:36:F4:0A:AA:E6:31:A7:D5:35:2E:47
Certificate issuer: /CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Certificate serial: 05E591
Authority key identifier: 3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/172034e01a0ebeebaf6766550c5b6f37aa6b63b1.roa
Signing time: Mon 21 Mar 2022 18:06:48 +0000
ROA not before: Wed 09 Feb 2022 03:00:00 +0000
ROA not after: Fri 09 Feb 2024 03:00:00 +0000
asID: 26617
IP address blocks: 190.104.113.0/24 maxlen: 24
190.104.117.0/24 maxlen: 24
200.12.37.0/24 maxlen: 24
200.12.36.0/24 maxlen: 24
200.12.38.0/24 maxlen: 24
200.12.39.0/24 maxlen: 24
200.12.40.0/24 maxlen: 24
200.12.41.0/24 maxlen: 24
200.12.44.0/24 maxlen: 24
200.12.45.0/24 maxlen: 24
200.12.46.0/24 maxlen: 24
200.12.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386449 (0x5e591)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
Validity
Not Before: Feb 9 03:00:00 2022 GMT
Not After : Feb 9 03:00:00 2024 GMT
Subject: CN=172034e01a0ebeebaf6766550c5b6f37aa6b63b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:4e:3d:13:7f:66:0e:40:ad:cf:be:1a:2a:
a1:8a:e4:74:b9:b4:71:df:11:cc:f2:d0:ac:a8:7e:
49:fb:e4:a0:ae:e1:34:e4:39:3d:c4:06:a1:2e:81:
eb:ca:34:69:e0:1a:95:27:fa:87:af:3d:76:1c:e1:
9e:8c:4f:e9:a3:1d:39:78:00:08:b3:37:b0:11:ff:
21:69:20:c2:1b:b4:5f:b4:21:88:58:b0:ce:19:60:
84:7e:eb:80:d3:b6:cb:35:90:e0:b0:71:10:c9:15:
3e:21:7f:73:3f:7a:d0:d2:bc:fc:73:14:08:80:a1:
03:51:fb:3c:50:17:3d:28:47:00:a8:a6:7a:8a:93:
95:0f:69:ed:9a:08:14:1d:5a:8d:12:c3:cb:ae:e3:
f5:eb:ec:74:c9:c8:b4:41:92:2a:66:f5:13:ef:8d:
86:67:e0:b5:79:da:75:9e:f8:fe:c7:98:23:b5:55:
e6:2d:90:d4:8e:aa:06:3c:bb:bb:38:0f:bb:44:fb:
ad:11:b3:3e:1d:03:88:45:65:0f:e1:97:0b:27:08:
76:cc:b9:3d:cc:a0:cb:55:cd:a6:e6:f9:d3:87:ed:
00:a3:a3:19:04:f2:fd:62:f2:a6:aa:0c:11:24:88:
6e:16:04:35:c2:5e:89:9e:5a:92:31:78:1d:52:25:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D5:AA:47:EE:D0:23:AB:E2:36:F4:0A:AA:E6:31:A7:D5:35:2E:47
X509v3 Authority Key Identifier:
keyid:3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/172034e01a0ebeebaf6766550c5b6f37aa6b63b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.104.113.0/24
190.104.117.0/24
200.12.36.0-200.12.41.255
200.12.44.0-200.12.46.255
200.12.56.0/24
Signature Algorithm: sha256WithRSAEncryption
25:12:71:bf:ff:36:19:f4:8f:e6:de:d7:28:f6:f2:63:7d:3c:
95:03:0a:1e:6e:51:f4:c0:b2:0c:05:cf:d2:1d:ac:bb:f9:80:
7f:24:41:9f:01:96:2b:4d:1e:ff:55:20:7a:83:0c:2a:68:88:
1f:82:01:06:e6:ba:1f:33:ed:6d:d8:63:93:cf:d7:66:50:3a:
85:cf:b6:16:ff:69:14:af:6e:9b:32:c0:47:15:3d:40:99:8d:
ee:17:85:9f:94:73:de:e0:54:51:04:b7:94:7c:b3:21:81:c7:
ea:30:b6:d1:05:6d:d2:2c:49:84:c8:56:78:4c:46:ad:7c:71:
8d:17:c4:f5:ba:41:17:ae:a7:0b:b9:a7:03:be:66:36:43:0f:
cf:fa:f5:08:95:5a:66:92:97:08:2f:82:a4:34:9f:f6:b0:3e:
ba:ae:c1:a2:7d:d6:7c:16:75:94:23:69:ad:55:a0:67:8a:15:
3c:b6:a2:be:01:1c:ef:48:a9:48:61:60:e1:cd:e5:44:f4:91:
77:81:10:df:67:e1:a9:ad:b9:ac:51:85:6f:a9:a7:c3:91:c1:
f1:da:88:75:26:48:9c:f8:2a:2e:d0:50:a5:79:4d:cf:21:3e:
87:c9:59:c0:0e:58:58:74:42:4a:96:98:69:18:7e:e4:e8:15:
0b:61:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:22 2024 by rpki-client on console-fra.rpki-client.org