Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/275f8c14191649d5687c6c7d79779ed7b4f5f802.roa
File: 275f8c14191649d5687c6c7d79779ed7b4f5f802.roa (raw, json)
Hash identifier: HKnunw4zuqbbAXkXNeLhRs/oH/IdrP6+BNFn7qzz5xQ=
Subject key identifier: C7:83:B9:01:3A:46:A4:6A:33:8C:74:83:0D:DE:A1:5A:6B:96:AD:1C
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 15D4F4
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/275f8c14191649d5687c6c7d79779ed7b4f5f802.roa
Signing time: Mon 07 Feb 2022 15:27:31 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 138156
IP address blocks: 191.96.92.0/23 maxlen: 24
181.215.50.0/23 maxlen: 24
191.101.212.0/22 maxlen: 24
191.101.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1430772 (0x15d4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=275f8c14191649d5687c6c7d79779ed7b4f5f802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:b5:32:b9:d6:82:d6:c1:60:3e:f4:0c:3e:
7e:04:01:7e:36:bf:7c:1e:c9:86:db:9f:ad:00:bb:
83:79:38:1c:35:b9:e6:48:9d:e0:a4:bd:c2:6a:de:
25:36:19:1b:a7:96:60:00:2e:a3:e7:9c:9d:92:f9:
03:0d:08:90:ef:53:21:aa:54:c6:10:11:2b:a1:39:
b2:da:c0:63:11:f3:55:7d:86:2c:d4:95:c9:11:0e:
de:bc:f0:87:eb:74:f7:e2:80:7d:8d:92:ca:32:25:
73:ea:3f:af:b9:e6:13:5e:ed:18:67:36:a8:77:8f:
88:f1:e5:4d:43:3b:f1:11:d7:cc:ea:ae:aa:ee:f6:
45:11:6b:0d:aa:fe:75:0a:3b:93:68:45:09:75:28:
d1:ad:08:6f:5e:47:71:76:5b:36:b1:fa:af:69:10:
20:40:1b:56:4c:b7:17:a7:c9:f1:6b:0b:ac:5b:b3:
27:4d:63:3d:67:dc:72:b6:13:16:45:72:47:58:c5:
21:bd:2d:fa:dd:35:72:96:39:19:29:9f:c2:b8:8e:
00:cb:eb:62:67:f8:26:30:f7:25:23:df:61:3b:80:
54:60:14:d8:1b:ac:f4:84:f8:19:a9:75:76:1b:b5:
06:5b:29:49:c7:99:2e:5b:df:87:9d:db:c3:fd:b0:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:83:B9:01:3A:46:A4:6A:33:8C:74:83:0D:DE:A1:5A:6B:96:AD:1C
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/275f8c14191649d5687c6c7d79779ed7b4f5f802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.50.0/23
191.96.92.0/23
191.101.212.0/22
Signature Algorithm: sha256WithRSAEncryption
47:9b:90:2b:53:1a:fe:37:3b:d3:5e:07:37:53:c7:cc:62:10:
41:1e:0b:83:64:9b:04:59:c3:ff:eb:9b:93:8b:18:2d:43:d8:
6a:9d:a8:b9:3e:f5:2b:88:a5:09:63:cd:fd:ef:23:b7:aa:ed:
78:8e:59:d2:e1:5a:64:9f:3d:ee:f2:55:2d:55:7b:a2:3c:39:
a4:01:9b:b7:c8:84:93:95:88:5d:c7:ee:9a:f7:0b:10:67:f1:
c3:8c:0e:dc:63:be:e8:f7:92:4d:1c:8c:f2:57:9f:54:a6:42:
93:a5:cf:c7:e8:f1:ca:95:2e:42:43:f9:4d:fe:0c:32:82:c2:
a4:f1:e0:d1:34:53:7e:02:d6:16:d3:6a:29:6f:9f:65:6c:8c:
8f:59:0f:35:ba:7e:9a:e7:47:8b:48:06:ba:f2:87:ab:f1:73:
0e:58:2d:a0:81:86:0f:d6:1f:d9:e2:0b:80:bc:b7:36:51:0a:
5a:f7:17:b8:87:b5:4a:08:e8:c4:02:27:f0:5c:1a:4c:62:ac:
39:73:ea:2a:17:a1:60:cc:6a:97:a7:5f:de:ee:1a:7a:e2:02:
27:ac:19:e8:d6:0d:ca:82:8b:1c:f5:c0:b5:aa:ba:24:36:bc:
64:94:ac:c7:3d:3c:31:8e:85:ef:95:d2:30:07:95:ee:37:36:
2d:8a:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org