Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/4587e3c78338e8e037c81f5416cd07edb3cbfe21.roa
File: 4587e3c78338e8e037c81f5416cd07edb3cbfe21.roa (raw, json)
Hash identifier: xY/n29Pukw+l6yNYOzv4ZhQGazo6n9nmjzp7alzUDeo=
Subject key identifier: 8E:FB:D8:3A:C2:03:BC:DA:02:43:54:93:43:40:F6:C4:37:3A:CF:53
Certificate issuer: /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial: 2625A2
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/4587e3c78338e8e037c81f5416cd07edb3cbfe21.roa
Signing time: Fri 29 Dec 2023 20:35:28 +0000
ROA not before: Fri 29 Dec 2023 20:35:27 +0000
ROA not after: Mon 29 Dec 2025 20:35:27 +0000
asID: 262191
IP address blocks: 190.131.195.0/24 maxlen: 24
190.131.210.0/24 maxlen: 24
190.131.222.0/24 maxlen: 24
168.228.125.0/24 maxlen: 24
168.228.126.0/24 maxlen: 24
168.228.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2500002 (0x2625a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Validity
Not Before: Dec 29 20:35:27 2023 GMT
Not After : Dec 29 20:35:27 2025 GMT
Subject: CN=4587e3c78338e8e037c81f5416cd07edb3cbfe21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9c:23:8d:18:1f:f7:81:1f:74:0f:a5:44:fe:
54:66:d8:81:9b:65:bb:ad:35:74:a1:89:95:e2:56:
08:5c:6a:bd:56:17:89:d4:ce:f3:e6:cc:18:bb:70:
a8:48:5a:e6:8e:8f:3b:e0:a8:13:52:20:89:d3:e0:
25:cd:19:83:c6:15:17:b9:4b:a9:e7:5c:78:62:77:
bc:bc:be:c2:ba:0f:57:86:5a:76:bc:8b:de:74:b9:
14:41:7c:18:2b:d6:8f:4c:b2:e5:db:c8:1d:1d:31:
fb:1f:20:83:1f:3c:b3:22:15:a5:e2:7c:2f:53:e5:
cb:3f:59:cd:5d:40:d2:5e:ca:6a:10:a0:91:20:91:
df:ef:16:89:84:d1:b1:ad:98:18:c7:7b:6c:f7:5c:
d5:a0:64:3d:6e:22:fc:8b:96:5d:0b:ce:72:25:62:
d2:98:87:71:92:78:1e:54:b1:27:61:e0:a6:bb:10:
64:65:57:61:3c:67:83:55:c5:6c:2d:ce:71:67:d4:
7e:0c:ce:f0:76:60:14:c7:e8:9b:f2:b6:93:03:4b:
66:c6:9c:f8:4f:2e:bc:37:f0:4d:36:73:57:74:e2:
70:67:a1:8f:fb:50:ca:ea:4a:e4:51:ed:ec:e5:30:
02:6c:0e:62:59:fd:76:b3:a1:68:7f:49:47:82:88:
68:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FB:D8:3A:C2:03:BC:DA:02:43:54:93:43:40:F6:C4:37:3A:CF:53
X509v3 Authority Key Identifier:
keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/4587e3c78338e8e037c81f5416cd07edb3cbfe21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.125.0-168.228.127.255
190.131.195.0/24
190.131.210.0/24
190.131.222.0/24
Signature Algorithm: sha256WithRSAEncryption
48:76:39:06:d9:63:ab:88:a1:f8:e5:5b:0f:e7:29:2c:bd:a3:
f3:b1:c4:f5:9a:de:b1:b4:9d:78:c0:5b:fa:9b:27:d2:2c:74:
13:00:c1:9d:ea:5b:52:58:92:37:11:d3:b6:3b:1b:79:6b:a7:
66:d3:fe:84:84:4e:b5:2a:a9:56:18:d7:90:97:c4:0d:11:b7:
06:b8:16:a3:4a:ae:7b:24:be:5d:9b:18:4d:86:00:a8:db:f1:
84:84:c9:87:48:42:ac:48:35:3a:98:95:5c:29:47:f6:40:6c:
36:32:f9:7b:cc:13:08:ac:75:4d:3a:d8:b8:09:41:9a:aa:40:
99:88:1e:e3:ae:42:5c:1a:30:01:73:5c:f5:60:5f:99:1e:c9:
45:86:e9:16:a6:3e:4d:2e:22:22:59:70:a2:49:12:17:c2:d0:
a0:06:81:98:ce:21:25:a7:4a:39:d4:97:a3:3f:e8:20:c4:72:
3d:6b:62:6c:69:90:6d:0e:84:e7:1b:ee:98:e3:8a:d7:2f:0f:
76:37:8d:31:32:ea:c2:7c:78:a5:da:0d:7e:f6:ac:18:4b:ac:
5a:2f:1b:4b:3f:86:a5:06:17:f2:b2:85:db:da:28:3d:54:75:
84:15:88:b2:ee:bb:c9:45:91:1e:bb:1d:ff:88:bb:8b:84:0c:
ba:a8:bb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org