Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1bb13812-e034-487c-9cc8-864f9451a8b3/e4b6471ae0c74a7023aba30515d0647c6ee0afc8.roa
File: e4b6471ae0c74a7023aba30515d0647c6ee0afc8.roa (raw, json)
Hash identifier: Zw8XI7wDQCHGiTk8pXh2+Q3mLF7/w3GU/OuAAnVfakE=
Subject key identifier: D1:46:EB:C9:A8:41:30:85:62:B7:2E:98:F4:F0:D7:67:F4:C7:2E:A5
Certificate issuer: /CN=5f89fa4fc43e783372b14c8fc33ac921186ae859
Certificate serial: 0D4922
Authority key identifier: 15:41:72:1B:1A:96:86:8A:5D:C9:07:39:C4:B8:F8:36:39:F5:77:79
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f89fa4fc43e783372b14c8fc33ac921186ae859.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1bb13812-e034-487c-9cc8-864f9451a8b3/e4b6471ae0c74a7023aba30515d0647c6ee0afc8.roa
Signing time: Wed 24 Mar 2021 14:42:32 +0000
ROA not before: Wed 24 Mar 2021 14:42:32 +0000
ROA not after: Tue 24 Mar 2026 14:42:32 +0000
asID: 14754
IP address blocks: 181.115.0.0/17 maxlen: 24
190.105.128.0/20 maxlen: 24
190.107.128.0/20 maxlen: 24
190.107.144.0/20 maxlen: 24
200.107.120.0/21 maxlen: 24
201.190.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870690 (0xd4922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f89fa4fc43e783372b14c8fc33ac921186ae859
Validity
Not Before: Mar 24 14:42:32 2021 GMT
Not After : Mar 24 14:42:32 2026 GMT
Subject: CN=e4b6471ae0c74a7023aba30515d0647c6ee0afc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:60:e8:ed:c1:b0:01:17:33:3b:12:01:cc:d6:
35:08:18:66:7a:f0:f1:25:2d:ff:29:fc:51:72:e8:
7a:b5:0b:59:13:4d:d3:5e:b2:47:05:1e:b6:41:52:
8d:de:18:9b:d5:ea:2c:e7:f6:62:5e:61:d6:3c:0a:
12:77:13:da:dc:44:20:a5:f1:49:8d:e2:26:50:77:
8f:a1:c6:7a:68:7f:98:2d:9f:41:9e:37:e3:b9:4a:
62:e8:75:27:65:17:7c:32:80:79:5e:1f:da:d2:e3:
cb:3a:6b:fd:b0:e3:39:7b:5a:0c:f6:28:30:89:d4:
8f:78:23:9e:05:f8:fa:84:35:22:bc:b3:fe:62:8e:
7e:ed:e6:28:98:56:96:94:ba:33:72:92:1b:eb:d2:
e4:cc:a4:bc:a8:6d:d5:35:0e:2e:f5:74:a9:70:98:
b1:e8:eb:af:5c:2d:63:0f:2f:12:ad:27:94:94:b3:
24:0f:ec:89:77:fc:d4:c3:1a:e8:b3:44:dd:90:f5:
4b:a8:25:0e:71:b7:b5:64:26:b4:b2:9a:10:c7:e7:
1a:1a:cb:93:10:9c:a5:51:ab:46:31:d5:41:fe:d2:
cc:ad:f9:a0:8c:02:12:ac:f0:50:b9:58:29:92:9c:
c2:28:ee:4d:e7:e1:aa:6b:2c:f9:21:fb:90:5b:76:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:46:EB:C9:A8:41:30:85:62:B7:2E:98:F4:F0:D7:67:F4:C7:2E:A5
X509v3 Authority Key Identifier:
keyid:15:41:72:1B:1A:96:86:8A:5D:C9:07:39:C4:B8:F8:36:39:F5:77:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f89fa4fc43e783372b14c8fc33ac921186ae859.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1bb13812-e034-487c-9cc8-864f9451a8b3/e4b6471ae0c74a7023aba30515d0647c6ee0afc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1bb13812-e034-487c-9cc8-864f9451a8b3/5f89fa4fc43e783372b14c8fc33ac921186ae859.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.115.0.0/17
190.105.128.0/20
190.107.128.0/19
200.107.120.0/21
201.190.0.0/18
Signature Algorithm: sha256WithRSAEncryption
42:aa:72:fa:e3:49:ea:b7:fa:5e:46:6b:93:95:b5:a9:e7:90:
9a:84:21:98:c4:91:ab:e9:34:45:b8:87:4c:be:d0:b3:c7:b0:
ae:f3:b4:a0:cb:7a:53:f8:dd:4f:4f:ea:77:61:e2:e4:d9:32:
a7:f0:01:96:45:a8:42:a8:cb:8f:69:24:5e:63:9a:bd:e1:db:
20:f3:33:f7:68:d0:f8:bc:a1:21:cf:05:2f:00:37:3b:e9:c9:
76:dd:dd:78:3a:35:65:08:e7:f6:3f:70:8f:73:c8:08:d0:f5:
3d:32:29:55:ae:84:b7:98:01:93:52:bf:27:fe:29:f4:b9:54:
b1:36:4f:f0:d0:88:50:f2:dd:9b:f8:b1:47:07:85:75:28:57:
fd:b8:ca:2e:9d:7b:a4:4b:ff:7f:54:01:a7:2a:71:9b:7f:53:
35:d4:76:28:4f:55:22:8b:0e:22:32:63:8d:4f:c3:fc:7c:75:
4a:89:6d:df:67:ae:1e:25:be:98:8f:d5:50:ab:d9:32:39:e4:
10:0f:e4:37:07:54:34:59:32:04:f1:2b:af:ab:39:83:69:82:
f6:8f:d8:6a:cb:a3:80:69:ca:9b:fe:9f:80:e2:41:26:11:da:
2d:61:21:a4:74:61:65:a9:ba:1f:2a:2a:ea:09:87:61:06:67:
49:0a:b0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:17 2024 by rpki-client on console-ams.rpki-client.org