Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/16e7dbbebb7e79145d7dc585dcec1116c6baf734.roa
File: 16e7dbbebb7e79145d7dc585dcec1116c6baf734.roa (raw, json)
Hash identifier: CkWRkeoSCPpW8oMKJ/398qI9oviguSS2X/GG1wpRigs=
Subject key identifier: 8D:40:A9:04:74:99:9C:8A:33:C2:EE:38:A9:CF:67:59:3D:84:37:52
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 1320BD
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/16e7dbbebb7e79145d7dc585dcec1116c6baf734.roa
Signing time: Tue 28 Dec 2021 15:57:40 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 397727
IP address blocks: 181.214.7.0/24 maxlen: 24
181.214.37.0/24 maxlen: 24
181.214.148.0/24 maxlen: 24
181.214.234.0/24 maxlen: 24
181.215.11.0/24 maxlen: 24
181.215.25.0/24 maxlen: 24
181.215.27.0/24 maxlen: 24
181.215.43.0/24 maxlen: 24
181.215.189.0/24 maxlen: 24
181.215.190.0/24 maxlen: 24
181.215.198.0/24 maxlen: 24
181.215.214.0/24 maxlen: 24
181.214.80.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253565 (0x1320bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=16e7dbbebb7e79145d7dc585dcec1116c6baf734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:c7:d3:20:dd:7e:16:ea:76:e2:23:c3:bb:
d2:f4:a7:19:95:7d:5f:32:99:b8:87:23:16:62:55:
ef:92:ef:83:f0:d2:69:44:2e:d3:19:89:9e:17:79:
87:7b:1f:39:85:a9:ce:23:8f:de:b1:bb:e7:3c:8c:
1b:61:8b:be:d0:cc:fc:75:df:22:9c:8a:34:5e:a1:
20:d5:24:81:c3:1d:88:1a:55:fc:77:c8:29:95:19:
0b:88:69:63:88:d1:e6:ec:80:4a:ca:08:3e:00:48:
d6:61:17:44:f2:12:fc:7d:fe:54:ab:d8:0c:f9:69:
d5:bc:1f:f6:4e:c4:86:70:77:89:b0:5b:0f:45:d7:
2e:27:85:bf:fe:cd:28:6a:c6:57:d2:c1:7f:57:4a:
21:ce:5b:cd:f4:8b:38:bd:dc:cd:40:63:b7:56:94:
c5:40:02:f8:61:9e:e1:19:e5:ae:3f:4b:f2:a9:50:
93:1c:02:d1:44:77:bf:5a:89:06:d9:26:5a:33:9f:
4f:e1:08:a7:00:aa:08:26:60:13:bc:55:78:90:5a:
72:c0:57:39:b7:4e:1d:55:52:93:88:d8:92:29:56:
c2:2a:69:d5:7c:51:79:1a:ef:1a:99:b3:d8:2c:92:
05:4b:58:d6:74:ff:72:2f:0a:22:30:21:96:3c:ab:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:40:A9:04:74:99:9C:8A:33:C2:EE:38:A9:CF:67:59:3D:84:37:52
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/16e7dbbebb7e79145d7dc585dcec1116c6baf734.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.7.0/24
181.214.37.0/24
181.214.80.0/23
181.214.148.0/24
181.214.234.0/24
181.215.11.0/24
181.215.25.0/24
181.215.27.0/24
181.215.43.0/24
181.215.189.0-181.215.190.255
181.215.198.0/24
181.215.214.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:64:b6:6b:74:68:e8:9c:ec:06:52:39:b4:86:c2:a1:50:96:
4f:79:d7:43:43:4f:3c:1f:13:42:b5:42:3d:03:39:ad:b8:a8:
6a:4f:d8:35:cb:0a:98:ff:4a:95:24:d7:ba:72:97:88:95:bb:
d4:e2:31:6b:90:0c:d2:2f:4f:7a:fc:cd:d9:ba:96:69:12:63:
cb:c1:37:7d:67:49:7f:e9:28:0b:22:96:42:9e:52:d9:d5:4f:
88:b6:26:45:c8:b2:92:4f:0b:37:83:70:ab:50:43:e2:5d:f8:
6f:00:84:da:f1:7a:5f:f9:e3:c2:7f:c4:41:35:94:ea:74:68:
d9:a5:c5:74:58:72:58:c4:15:56:5c:52:e3:9d:90:02:77:42:
89:e4:dc:ea:eb:45:32:7a:31:c4:8a:55:05:f3:e4:f8:5e:76:
72:d0:de:94:11:cd:55:30:4e:3d:2a:d1:48:61:13:74:f1:7a:
89:3f:74:e0:72:a9:d7:83:35:e5:67:08:79:be:a1:25:9b:10:
36:bf:a5:60:b8:83:35:56:f1:94:fc:44:b8:fe:87:53:5b:7a:
df:a2:36:90:f9:a6:f0:21:a9:c3:03:21:31:cf:63:e4:f4:5f:
f5:86:b6:f5:1b:56:3e:18:fc:54:c0:5a:36:6a:dd:00:34:40:
20:07:51:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org