Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0d2257aa8faf3f986f1978f8baa79085005a2b2d.roa
File: 0d2257aa8faf3f986f1978f8baa79085005a2b2d.roa (raw, json)
Hash identifier: X9aJagsQvt1++FF7qCR5N56AxHgeF1YB3OOXxxuPJ00=
Subject key identifier: 2B:8D:3F:37:14:C9:DD:4F:36:D1:5E:58:46:3F:04:AE:9E:D0:A2:1A
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 06CEFE
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0d2257aa8faf3f986f1978f8baa79085005a2b2d.roa
Signing time: Wed 24 Mar 2021 14:33:38 +0000
ROA not before: Wed 24 Mar 2021 14:33:29 +0000
ROA not after: Tue 24 Mar 2026 14:33:29 +0000
asID: 35913
IP address blocks: 179.61.245.0/24 maxlen: 24
191.101.133.0/24 maxlen: 24
191.101.129.0/24 maxlen: 24
191.101.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446206 (0x6cefe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 14:33:29 2021 GMT
Not After : Mar 24 14:33:29 2026 GMT
Subject: CN=0d2257aa8faf3f986f1978f8baa79085005a2b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:1e:11:f1:0b:af:01:c0:2e:05:a2:bb:91:
9c:03:91:c9:10:9a:4a:cf:83:89:82:31:95:4f:13:
c3:74:d9:6a:67:00:53:8f:7c:96:f8:c7:fd:15:27:
67:a6:ba:c1:04:9e:a2:b5:ee:cf:d2:4a:34:cb:1f:
66:5c:fa:0f:0d:66:52:2b:f8:76:e3:6a:f5:d0:f9:
fd:e1:de:aa:b0:71:8e:8e:2c:d3:a3:3b:24:68:74:
5d:7c:ab:ab:ff:60:a1:14:50:d7:53:d8:bc:79:11:
46:6c:6a:60:40:95:13:5e:d8:42:50:96:f7:6c:bc:
fb:3f:8b:82:41:57:51:79:4f:2f:92:f9:d9:ee:6c:
6a:d3:3d:b8:5b:b2:6c:4f:f2:24:e7:77:45:f7:13:
57:8a:5b:11:ed:a2:b0:bb:69:88:53:82:9d:18:5d:
6e:c3:44:ac:c8:b3:0c:d6:c9:4c:bf:e3:60:73:47:
86:c4:6a:ef:02:33:1c:bc:da:d7:9a:20:aa:a3:01:
92:5e:54:60:ed:aa:51:08:31:aa:0b:03:e1:72:7b:
83:82:50:b0:5a:51:cd:cd:08:79:8c:e3:66:72:85:
9f:da:81:3b:4a:68:9d:25:83:78:0c:95:da:e2:ac:
be:59:fb:b6:0c:d7:50:ae:25:1b:b4:22:dd:f5:28:
52:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8D:3F:37:14:C9:DD:4F:36:D1:5E:58:46:3F:04:AE:9E:D0:A2:1A
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/0d2257aa8faf3f986f1978f8baa79085005a2b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.245.0/24
191.101.42.0/24
191.101.129.0/24
191.101.133.0/24
Signature Algorithm: sha256WithRSAEncryption
20:31:be:45:a5:b7:fa:81:7a:82:2c:e7:55:de:f6:8a:6f:88:
00:f3:21:41:72:ee:94:cf:c8:5e:47:6c:3d:7f:d7:ef:91:6e:
3f:93:17:50:e6:68:04:2c:df:26:e1:fa:92:23:93:5e:78:00:
b9:4c:70:86:67:bb:22:5c:75:25:7a:bc:8e:83:9b:3e:2c:40:
2b:b7:65:97:20:ff:26:40:17:b1:92:80:0d:10:d0:d0:2c:24:
3c:b4:02:26:c2:68:77:3b:3b:64:c5:50:3f:63:ed:6b:63:ea:
67:db:42:a7:8f:4d:c3:87:4b:12:5e:d5:9d:f9:88:25:ad:8a:
ec:be:6b:70:98:b8:61:1e:c4:d5:0b:85:e3:85:ae:5f:28:ff:
4b:58:de:f3:a7:c3:d5:da:19:cc:5b:24:72:b2:2f:82:b9:10:
c7:f2:ec:76:72:94:76:12:bc:e8:d9:aa:01:d9:b5:96:9d:3f:
68:7e:b0:f2:59:7d:31:ce:01:df:ce:b0:0c:9d:84:2f:95:8f:
b1:e1:f0:53:c2:32:ae:72:38:07:76:c0:e8:33:b4:ab:c6:d4:
14:c1:c6:21:f7:96:5f:10:0f:67:cb:67:a2:83:82:68:22:ba:
b3:9e:fa:35:5f:8e:99:bb:44:35:38:f0:af:20:8a:af:0b:42:
4b:0e:27:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org