Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1cab91d1711c69864f2bed20d283bec8aecd10a9.roa
File: 1cab91d1711c69864f2bed20d283bec8aecd10a9.roa (raw, json)
Hash identifier: cDlGIby1/zFKD5dBxDrulJo5eTYgtUHDG+mIvhrQmBA=
Subject key identifier: AD:1A:53:25:6D:CD:CA:F9:D3:1A:E4:E4:09:F3:82:A7:BF:02:F1:F6
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 120CDD
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1cab91d1711c69864f2bed20d283bec8aecd10a9.roa
Signing time: Wed 08 Dec 2021 04:24:19 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 397423
IP address blocks: 181.215.242.0/24 maxlen: 24
181.214.133.0/24 maxlen: 24
181.215.47.0/24 maxlen: 24
181.215.49.0/24 maxlen: 24
181.215.243.0/24 maxlen: 24
191.96.30.0/24 maxlen: 24
191.96.32.0/24 maxlen: 24
191.96.101.0/24 maxlen: 24
191.96.155.0/24 maxlen: 24
191.96.166.0/24 maxlen: 24
191.96.186.0/24 maxlen: 24
191.101.166.0/24 maxlen: 24
191.101.172.0/24 maxlen: 24
179.61.194.0/24 maxlen: 24
181.215.244.0/24 maxlen: 24
191.101.58.0/24 maxlen: 24
191.101.30.0/24 maxlen: 24
181.214.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1182941 (0x120cdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=1cab91d1711c69864f2bed20d283bec8aecd10a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:15:4a:ce:5a:7b:bc:f3:89:48:50:c8:cd:
09:6c:84:f7:4b:bf:7f:6d:74:4d:aa:4f:7b:cb:e1:
1e:22:21:33:d9:67:70:a2:4f:74:b2:ab:c5:75:96:
26:eb:9a:b6:a2:3b:5d:8c:0c:cc:52:50:ba:5d:b3:
6b:5f:79:13:92:40:aa:35:c3:1c:90:c6:8c:66:f2:
37:df:04:4e:1b:ca:3c:d4:38:3d:66:e1:cd:74:9e:
a9:4f:51:ac:20:a0:04:26:2f:0d:81:52:eb:17:4e:
56:34:0c:0b:da:37:d0:35:04:1e:be:4f:7a:74:1f:
23:82:b7:e1:86:4c:a5:9b:2e:5c:f4:10:4b:24:a5:
75:36:75:53:b5:61:30:b2:fd:cb:31:8a:ad:f2:af:
f6:29:5d:31:e0:f1:e5:fc:67:c0:4d:08:f3:79:0b:
08:f6:2e:b8:f6:49:2e:7f:7c:ed:c0:c5:52:1d:99:
2e:48:80:99:e6:a5:51:60:44:24:8c:7e:be:97:72:
49:7b:2b:55:94:e8:d1:16:95:2e:34:15:67:f8:d9:
79:1c:df:f9:49:92:46:8c:10:c2:82:0f:3d:e3:73:
a4:8e:a3:c5:5d:42:20:0a:6e:83:28:41:59:55:d4:
4d:9b:29:1a:c3:0b:2c:ea:ad:2b:c8:3a:53:7a:72:
b0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1A:53:25:6D:CD:CA:F9:D3:1A:E4:E4:09:F3:82:A7:BF:02:F1:F6
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/1cab91d1711c69864f2bed20d283bec8aecd10a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.194.0/24
181.214.133.0/24
181.214.152.0/24
181.215.47.0/24
181.215.49.0/24
181.215.242.0-181.215.244.255
191.96.30.0/24
191.96.32.0/24
191.96.101.0/24
191.96.155.0/24
191.96.166.0/24
191.96.186.0/24
191.101.30.0/24
191.101.58.0/24
191.101.166.0/24
191.101.172.0/24
Signature Algorithm: sha256WithRSAEncryption
13:50:4d:5d:38:3f:55:11:4b:23:67:65:42:10:9c:93:e5:e8:
a0:95:3d:67:a5:8b:d5:bc:eb:76:8b:61:7a:19:a3:bc:6d:f3:
12:d7:38:4b:f5:da:2a:ae:32:6a:18:f2:41:75:b4:24:2a:db:
bb:13:ac:40:9c:46:e2:3f:c9:af:22:ea:d4:8f:e9:e1:81:6b:
ba:41:fe:fc:09:69:bb:0f:42:76:b4:6a:d9:98:20:e4:91:5f:
3d:91:3f:da:5a:09:4c:68:6b:27:ab:1b:ca:b3:f4:f4:f9:d9:
40:ad:51:9d:dc:3f:fa:7c:94:13:b2:5f:69:19:e9:76:f8:fd:
c9:3e:52:4f:22:e9:db:12:2a:b2:40:c7:f8:6e:9c:07:da:53:
42:6e:d2:72:5f:5d:dc:98:96:5b:5d:ba:1f:31:26:42:d1:7e:
70:aa:21:6e:26:c2:a7:b3:1d:cc:c6:38:ad:2a:ca:38:18:59:
ab:f6:5a:17:fd:d8:2d:39:9d:00:8b:67:af:0a:1e:2e:8f:8a:
d3:7f:8f:1b:37:8b:5a:6e:77:3a:18:29:ac:8d:86:0c:00:5d:
dc:f5:18:12:b2:1c:f9:22:35:dc:b9:b0:ab:c0:69:13:e3:42:
d2:2a:6b:0a:c7:7f:73:74:cb:32:fd:6c:45:68:09:76:61:2a:
ed:c2:3b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org