Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/03dbdf58b951618a8b2a8210477f5b2e781cdd32.roa
File: 03dbdf58b951618a8b2a8210477f5b2e781cdd32.roa (raw, json)
Hash identifier: FZAB3SGphNvWyaNkRCOulwcht7VNckph2uw1y9ddwIc=
Subject key identifier: D5:36:49:AE:57:87:98:71:4D:30:9A:17:28:0D:D1:5C:AF:36:0E:4E
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 14FB7E
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/03dbdf58b951618a8b2a8210477f5b2e781cdd32.roa
Signing time: Thu 27 Jan 2022 12:04:05 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 32181
IP address blocks: 181.215.39.0/24 maxlen: 24
191.96.174.0/24 maxlen: 24
181.214.157.0/24 maxlen: 24
181.214.237.0/24 maxlen: 24
181.215.23.0/24 maxlen: 24
181.214.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1375102 (0x14fb7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=03dbdf58b951618a8b2a8210477f5b2e781cdd32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:77:2b:46:29:52:52:65:46:5f:3d:40:89:
da:de:7e:e9:4e:64:3e:a6:3c:1b:64:0d:bb:b3:74:
63:34:98:b0:ec:6b:d7:d3:b0:c0:56:7a:76:b7:3f:
b6:82:59:39:d4:e8:6d:a5:d3:08:84:ec:bf:69:97:
9b:1d:ae:23:bf:f3:88:df:55:2a:15:59:1a:92:62:
6b:24:5f:d3:06:3c:74:88:89:2d:47:15:3f:d3:b7:
a3:77:3f:a8:34:1a:c8:0d:6a:48:1b:b8:7a:61:db:
0c:8d:e3:9e:36:65:09:3b:65:c7:cc:32:aa:cf:6e:
f7:06:48:4c:da:c7:3b:5e:25:56:69:b0:6e:7e:17:
81:97:5f:48:69:98:93:f6:82:57:46:06:eb:22:c0:
c3:1d:12:f8:75:00:db:6c:17:a1:a7:82:98:3e:d7:
a6:ad:ed:3e:e0:2c:31:24:7d:f6:1e:76:28:24:71:
da:c3:ab:b3:c1:cb:80:fa:2a:3f:77:f4:ab:6f:90:
b3:6a:22:fa:29:2c:99:eb:37:12:7c:24:89:e6:ea:
d9:9d:95:c1:3a:91:f8:6f:28:ae:b3:20:be:84:e1:
84:b9:c3:2e:93:c6:02:7a:78:46:d4:70:98:d0:4a:
33:47:04:56:b8:33:ec:cf:69:52:e1:2f:e6:ef:00:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:36:49:AE:57:87:98:71:4D:30:9A:17:28:0D:D1:5C:AF:36:0E:4E
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/03dbdf58b951618a8b2a8210477f5b2e781cdd32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.146.0/24
181.214.157.0/24
181.214.237.0/24
181.215.23.0/24
181.215.39.0/24
191.96.174.0/24
Signature Algorithm: sha256WithRSAEncryption
88:77:5c:de:02:d1:f4:b4:01:25:6b:5a:5d:6b:73:2b:62:4b:
5f:97:1b:2a:df:0a:d7:d8:06:ab:8d:1b:d6:15:a3:d7:7a:90:
31:c1:84:a7:e1:78:5a:fb:5c:0c:0b:b7:43:4b:5c:90:e5:da:
2f:94:9e:a5:27:43:f6:a8:5a:4e:d4:bc:f4:ee:d3:ca:29:52:
3a:c2:1b:88:06:9b:6c:a3:97:1c:a0:44:83:01:53:22:5f:c3:
14:b2:ec:5b:13:55:ba:52:b5:21:97:3c:fb:04:d4:85:54:c0:
2f:dc:8a:bf:3f:bb:1e:07:b7:01:ca:82:0a:09:da:b5:7c:6d:
2b:45:f4:e1:18:e5:d8:f9:b8:50:0f:84:61:ac:0d:84:1a:0d:
20:e6:e0:3c:29:4d:cd:bd:b0:f8:28:a6:16:f1:61:fe:bc:f7:
07:cd:d9:0a:36:1b:2e:a4:48:f5:5c:a4:47:12:e1:c3:65:56:
de:2d:d5:2c:2c:6f:65:aa:86:ef:11:06:f4:19:af:f9:6c:46:
00:04:32:ee:eb:33:3a:31:5f:9f:45:29:0c:60:5d:74:9f:bc:
b7:d8:8b:85:f4:0d:ac:96:15:b7:32:7d:7f:c3:b0:05:79:7f:
67:e8:1f:02:ec:cb:b1:cd:f8:46:f8:6a:93:0b:2f:b7:00:45:
74:79:96:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org