Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4ba83f62357066f0718bf69c15f2f76a0d836872.roa
File: 4ba83f62357066f0718bf69c15f2f76a0d836872.roa (raw, json)
Hash identifier: r1hmOWlkAJEBTXyox9cT0h0iHDPQSO2Hh5zPBJnuljU=
Subject key identifier: 72:FC:D5:4A:C6:DA:A8:DA:08:89:EC:81:38:2E:4C:20:B3:B1:DD:80
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 14D65F
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4ba83f62357066f0718bf69c15f2f76a0d836872.roa
Signing time: Mon 24 Jan 2022 17:48:00 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 43260
IP address blocks: 191.101.254.0/24 maxlen: 24
191.101.242.0/24 maxlen: 24
179.61.219.0/24 maxlen: 24
179.61.227.0/24 maxlen: 24
191.96.227.0/24 maxlen: 24
181.214.19.0/24 maxlen: 24
181.215.228.0/24 maxlen: 24
181.215.241.0/24 maxlen: 24
181.215.167.0/24 maxlen: 24
181.215.210.0/24 maxlen: 24
181.215.17.0/24 maxlen: 24
181.215.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1365599 (0x14d65f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=4ba83f62357066f0718bf69c15f2f76a0d836872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:21:19:b9:7a:56:85:8a:db:19:36:66:f0:
b0:7c:11:d9:50:25:f1:2a:5c:0f:40:db:32:a6:4b:
f0:b8:65:ea:af:7c:a0:39:e3:c2:51:63:e9:8c:c5:
ad:8a:f2:5a:62:2d:05:42:d7:aa:ba:42:15:8c:b1:
35:34:76:b0:db:21:29:d5:d1:f0:b7:75:34:d0:d8:
58:93:cd:d5:4c:1a:a8:a2:b0:29:c3:4a:21:b0:38:
83:d9:8f:b3:0a:95:3b:c7:60:ae:63:0c:0a:e3:1a:
ae:52:78:25:70:ce:d5:72:66:af:db:2c:96:f8:38:
52:b5:51:e7:1c:4c:ec:8c:f8:d8:67:47:02:7a:e9:
14:09:84:aa:b1:30:49:b2:1b:a9:e4:0b:d5:90:21:
6b:9c:1d:51:67:2f:fc:a8:ce:23:51:24:15:58:75:
b6:50:c3:7e:8c:f7:c8:67:8b:81:cd:99:85:36:26:
54:39:98:39:d2:92:88:f1:58:74:eb:bd:79:39:95:
ae:a0:85:f7:aa:27:cd:15:65:d8:9e:6b:79:23:e8:
a1:23:6c:5c:df:e6:11:0a:08:37:d8:64:37:2a:71:
6a:9c:fd:be:a7:d8:e2:a8:c5:d3:27:47:8e:44:b7:
44:c7:02:3a:52:2b:09:f5:6b:e3:c1:b9:9b:43:8c:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:FC:D5:4A:C6:DA:A8:DA:08:89:EC:81:38:2E:4C:20:B3:B1:DD:80
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4ba83f62357066f0718bf69c15f2f76a0d836872.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.219.0/24
179.61.227.0/24
181.214.19.0/24
181.215.17.0/24
181.215.167.0/24
181.215.195.0/24
181.215.210.0/24
181.215.228.0/24
181.215.241.0/24
191.96.227.0/24
191.101.242.0/24
191.101.254.0/24
Signature Algorithm: sha256WithRSAEncryption
59:41:87:c4:e0:dc:c6:fc:a9:64:72:e4:9e:54:09:88:f7:e7:
b1:cf:b4:07:8b:45:52:61:f3:ad:a6:06:84:c5:90:1d:71:66:
0e:2a:99:47:87:fa:52:6c:bc:00:9e:d2:ac:0b:fc:dd:9d:af:
02:d1:80:1e:23:76:5b:df:17:bb:19:5c:65:8a:23:ba:6a:7b:
06:fb:72:60:71:a9:39:c8:47:47:52:d1:cd:30:00:b4:dd:b1:
fa:91:5c:d9:db:b4:a1:be:fd:5c:6b:68:34:63:09:e1:c8:7a:
5a:02:30:6b:ce:e6:72:78:52:47:1d:4b:d6:c2:0d:59:ac:67:
48:ff:af:40:6d:9d:9d:2e:d8:67:2c:f1:81:c5:0e:2e:88:bb:
fd:a8:bf:3a:32:41:40:ae:cb:0c:34:94:a2:87:50:9d:36:8d:
f5:9e:6c:7d:97:54:85:4d:e8:c1:3a:1b:65:0b:b5:70:6b:14:
d5:28:b0:24:3b:ff:df:5e:d0:f3:dd:40:bd:55:7a:bf:53:36:
c1:29:ad:77:d6:3d:25:8a:00:f4:d3:ce:ff:b8:bd:f6:6c:b1:
25:53:6e:c7:c2:2f:8f:58:c2:c8:d1:64:69:49:bf:14:02:94:
2c:84:7a:32:f6:44:5a:ce:0c:d3:53:c9:b6:6c:ba:0c:6a:a5:
af:6a:5f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org