Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/47ebfc08536a5183eae3d4ea716c7c011af08d8f.roa
File: 47ebfc08536a5183eae3d4ea716c7c011af08d8f.roa (raw, json)
Hash identifier: WFG5X3oZmlhsByvejMcQi7jotD3ix8642a4TPjXHBM8=
Subject key identifier: 5E:18:4A:C8:E1:76:82:C1:BA:25:0F:BD:EE:D5:B1:D0:0A:80:07:86
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 06A44D
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/47ebfc08536a5183eae3d4ea716c7c011af08d8f.roa
Signing time: Wed 24 Mar 2021 14:33:37 +0000
ROA not before: Wed 24 Mar 2021 14:33:29 +0000
ROA not after: Tue 24 Mar 2026 14:33:29 +0000
asID: 29802
IP address blocks: 191.101.20.0/23 maxlen: 24
181.214.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435277 (0x6a44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 14:33:29 2021 GMT
Not After : Mar 24 14:33:29 2026 GMT
Subject: CN=47ebfc08536a5183eae3d4ea716c7c011af08d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5f:9d:ff:bd:9a:58:23:0c:85:42:1b:b2:67:
47:3d:c8:ad:19:c6:27:3e:d6:b9:1d:bd:7b:ab:44:
08:1e:4f:71:c0:d7:0c:3b:cb:93:4f:0f:0b:72:2e:
c7:5f:37:6b:54:26:8a:9e:5c:69:88:dd:44:8e:ff:
35:8c:f4:d8:4b:09:b6:45:20:7a:85:fb:18:0e:de:
2d:a8:40:f4:9c:e8:cb:f7:34:a3:c3:fa:5d:69:48:
5c:9f:4a:76:60:c3:09:b8:7c:3f:16:12:12:2f:b0:
41:f7:35:d1:c1:5a:12:7e:57:7f:1f:e0:f5:02:45:
1b:73:59:db:77:96:96:b1:c1:39:b3:c3:ee:27:fc:
43:95:42:4a:28:cc:eb:06:c2:20:fb:d9:0f:66:7d:
57:09:30:f5:4f:31:0a:31:ba:74:1a:08:bd:ae:20:
03:a9:86:7a:fb:77:eb:3b:c5:f7:44:98:a9:35:a9:
63:c4:3f:3b:b9:1b:0c:e4:20:78:37:b9:21:5d:cf:
ad:9c:93:60:52:6b:d7:84:f9:9a:f0:ce:04:dc:09:
53:c7:48:34:56:3a:a4:6b:9d:0e:88:a3:cb:4c:95:
27:88:59:df:9c:b1:f2:87:65:06:07:07:7b:0e:db:
ff:70:f6:fb:fb:ec:97:5b:ca:11:2d:00:fb:ae:d9:
09:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:18:4A:C8:E1:76:82:C1:BA:25:0F:BD:EE:D5:B1:D0:0A:80:07:86
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/47ebfc08536a5183eae3d4ea716c7c011af08d8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.253.0/24
191.101.20.0/23
Signature Algorithm: sha256WithRSAEncryption
75:00:fa:47:59:a0:0b:0f:8d:10:ab:a7:85:1f:f8:d0:92:75:
c2:3c:31:79:9b:d8:3e:67:e7:32:3f:d7:15:3f:5a:eb:82:27:
ce:2a:29:17:4b:61:42:2b:b3:26:9e:ea:d3:da:5c:2e:89:f8:
00:29:64:a8:24:b3:da:64:25:df:d7:1b:ba:aa:6a:cc:16:dc:
75:75:67:64:6e:ac:2d:d7:49:e3:18:f6:18:33:05:07:72:15:
e4:04:53:f2:ef:1c:b3:98:a0:45:b1:1b:a6:5e:57:4e:19:cb:
e9:52:84:e1:ce:ed:1d:d9:11:a0:98:25:21:0e:78:71:18:c1:
f3:95:c9:69:e2:30:b5:90:a4:d1:d5:c1:14:ec:be:d9:59:67:
ba:dc:db:a9:65:93:be:75:2c:84:93:47:b9:29:d7:07:9a:4f:
95:ca:9d:ef:b1:5f:ec:df:b6:2b:74:cd:5e:cd:0c:fd:69:3b:
10:85:de:62:35:ae:d7:cd:73:f4:35:97:77:bf:aa:ec:67:e0:
be:ba:ae:bb:49:ae:31:2d:1d:c8:55:0d:c8:f7:07:47:05:5f:
b4:ed:f1:d0:99:c7:c5:3f:b4:a8:3f:e8:8c:2d:95:e5:04:d7:
a1:74:3a:84:41:ca:2f:f9:8c:15:5a:9f:9d:79:ba:f9:2d:6b:
e8:01:3c:ed
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIDBqRNMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNl
MjQxMzZhMzVmMTA1MDJmMDgwYTk5ZWVjNmYxMjg4MmQyZjA0ZmEwHhcNMjEwMzI0
MTQzMzI5WhcNMjYwMzI0MTQzMzI5WjAzMTEwLwYDVQQDEyg0N2ViZmMwODUzNmE1
MTgzZWFlM2Q0ZWE3MTZjN2MwMTFhZjA4ZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgF+d/72aWCMMhUIbsmdHPcitGcYnPta5Hb17q0QIHk9xwNcM
O8uTTw8Lci7HXzdrVCaKnlxpiN1Ejv81jPTYSwm2RSB6hfsYDt4tqED0nOjL9zSj
w/pdaUhcn0p2YMMJuHw/FhISL7BB9zXRwVoSfld/H+D1AkUbc1nbd5aWscE5s8Pu
J/xDlUJKKMzrBsIg+9kPZn1XCTD1TzEKMbp0Ggi9riADqYZ6+3frO8X3RJipNalj
xD87uRsM5CB4N7khXc+tnJNgUmvXhPma8M4E3AlTx0g0Vjqka50OiKPLTJUniFnf
nLHyh2UGBwd7Dtv/cPb7++yXW8oRLQD7rtkJAwIDAQABo4ICYTCCAl0wHQYDVR0O
BBYEFF4YSsjhdoLBuiUPve7VsdAKgAeGMB8GA1UdIwQYMBaAFCu/7xlfe0CD3zd7
L/vHe1DdEArjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2UyNDEz
NmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRmYS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMWVmNGIwNjYtZTRkMi00ZTUzLTgzOWUtOGJkZmZi
MTdhNTJiLzQ3ZWJmYzA4NTM2YTUxODNlYWUzZDRlYTcxNmM3YzAxMWFmMDhkOGYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xZWY0YjA2Ni1lNGQyLTRlNTMtODM5ZS04YmRm
ZmIxN2E1MmIvY2UyNDEzNmEzNWYxMDUwMmYwODBhOTllZWM2ZjEyODgyZDJmMDRm
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEALXW/QMEAb9lFDANBgkqhkiG9w0BAQsFAAOCAQEAdQD6R1mg
Cw+NEKunhR/40JJ1wjwxeZvYPmfnMj/XFT9a64InziopF0thQiuzJp7q09pcLon4
AClkqCSz2mQl39cbuqpqzBbcdXVnZG6sLddJ4xj2GDMFB3IV5ART8u8cs5igRbEb
pl5XThnL6VKE4c7tHdkRoJglIQ54cRjB85XJaeIwtZCk0dXBFOy+2VlnutzbqWWT
vnUshJNHuSnXB5pPlcqd77Ff7N+2K3TNXs0M/Wk7EIXeYjWu181z9DWXd7+q7Gfg
vrquu0muMS0dyFUNyPcHRwVftO3x0JnHxT+0qD/ojC2V5QTXoXQ6hEHKL/mMFVqf
nXm6+S1r6AE87Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org