Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/207973744f90c33fcfd6e4e8150b2a1d0830ceb3.roa
File: 207973744f90c33fcfd6e4e8150b2a1d0830ceb3.roa (raw, json)
Hash identifier: oK2JJXcsJ9w/RGZw/w1SpFMLRnxPZQhOy7UFrvuuzEA=
Subject key identifier: 38:5F:41:BF:CC:39:77:95:09:80:AA:BA:D9:D6:1B:85:4A:EE:92:7A
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 12973C
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/207973744f90c33fcfd6e4e8150b2a1d0830ceb3.roa
Signing time: Fri 17 Dec 2021 13:04:42 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 24875
IP address blocks: 181.215.178.0/24 maxlen: 24
191.96.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1218364 (0x12973c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=207973744f90c33fcfd6e4e8150b2a1d0830ceb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:bb:46:d8:6f:5c:c6:02:82:b7:53:85:bf:
0f:85:e6:02:87:60:cd:25:f8:c6:79:a6:99:64:02:
56:97:2b:05:90:f9:21:d7:1c:70:de:a1:7b:e9:7f:
4f:a0:ea:4c:14:cb:bc:66:6d:d6:f3:55:cf:53:f2:
eb:1c:99:ab:d3:43:e8:0a:a8:61:bc:f9:82:c9:3c:
3f:d8:b1:80:2b:09:c2:28:8e:40:d9:c1:7f:d5:f7:
e5:fe:17:27:54:c7:fe:6c:d7:f0:b0:c3:ae:96:34:
71:de:1c:7d:6f:03:d8:fa:3a:95:f1:95:73:d0:ec:
e0:cb:a5:f8:c7:8b:ca:26:a6:c7:8b:27:45:eb:d3:
82:ae:93:81:45:bc:0b:26:0f:27:da:6c:c2:ba:4d:
a2:af:c1:90:47:4b:f9:3d:98:e2:9f:7a:9b:d2:d1:
32:b8:c7:86:a5:db:e1:7a:70:17:f6:2d:3c:c2:ac:
f2:47:25:5d:2e:8f:91:fe:37:b2:63:15:63:32:c5:
a7:5a:9f:77:ac:07:54:02:13:98:d2:24:46:db:f6:
01:f2:a3:fc:e7:32:33:d0:9a:ec:72:f3:74:e8:2b:
10:a9:b5:bd:a1:b3:b0:18:a0:d0:27:94:6b:89:12:
a4:11:a8:42:93:64:5b:56:70:7f:75:e7:f8:81:e8:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5F:41:BF:CC:39:77:95:09:80:AA:BA:D9:D6:1B:85:4A:EE:92:7A
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/207973744f90c33fcfd6e4e8150b2a1d0830ceb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.178.0/24
191.96.100.0/24
Signature Algorithm: sha256WithRSAEncryption
29:59:aa:dc:d9:66:b8:72:50:9d:30:88:5d:af:cf:c4:ba:bc:
6e:88:95:ff:99:6c:bb:86:2e:84:90:ca:87:67:eb:88:ca:f8:
c0:46:1d:5c:a2:5a:0a:ef:7f:40:43:df:74:99:80:41:b0:86:
1c:0d:c7:cf:ba:dd:27:2f:00:ca:31:91:cf:f9:4c:2a:33:fe:
6b:3c:57:de:c0:e3:10:ac:af:ad:f5:ba:af:e7:52:2a:76:a2:
e4:da:0b:6d:3d:d5:9e:f9:5c:e7:e2:a6:3a:0b:fa:2a:64:d9:
a7:30:ad:37:15:0e:6c:d8:70:26:31:bb:eb:19:31:ee:96:e6:
fe:e6:30:e8:59:cf:4d:44:2e:b8:eb:b7:2f:e9:c0:bb:6d:6f:
7b:b9:48:34:4f:91:75:09:67:de:8e:cc:b6:da:8e:46:7c:ae:
47:8e:f7:98:0d:25:7d:c9:d1:e0:d3:fc:3b:60:f8:2e:f1:38:
c9:41:60:75:ee:63:f7:b2:d8:b1:ad:a7:a5:ea:f7:3d:a8:7e:
ba:0d:52:9b:0b:80:2a:f8:91:1d:0d:03:1f:f6:e8:70:b1:86:
4a:57:e1:fa:b8:1f:ee:8f:b8:c5:c3:8c:6c:07:ab:e5:a8:f2:
15:f1:b6:a8:8b:3c:f5:5d:dd:05:af:81:34:3b:8f:80:7e:4d:
cd:ae:58:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org