Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5f9016b43b44cb455a644fafa360998a24700103.roa
File: 5f9016b43b44cb455a644fafa360998a24700103.roa (raw, json)
Hash identifier: ZPmXsrlJSZ7vTF3vGfkJWXCFfD+FCabnp6khkQndFzM=
Subject key identifier: 1A:67:84:CB:19:5A:EF:A1:AF:16:82:89:91:D7:B1:0F:CE:7E:AE:00
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 131558
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5f9016b43b44cb455a644fafa360998a24700103.roa
Signing time: Tue 28 Dec 2021 15:54:30 +0000
ROA not before: Mon 21 Jun 2021 03:00:00 +0000
ROA not after: Wed 21 Jun 2023 03:00:00 +0000
asID: 207429
IP address blocks: 181.214.19.0/24 maxlen: 24
181.215.224.0/24 maxlen: 24
181.215.228.0/24 maxlen: 24
181.215.241.0/24 maxlen: 24
181.215.167.0/24 maxlen: 24
181.215.210.0/24 maxlen: 24
181.215.17.0/24 maxlen: 24
181.215.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1250648 (0x131558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Jun 21 03:00:00 2021 GMT
Not After : Jun 21 03:00:00 2023 GMT
Subject: CN=5f9016b43b44cb455a644fafa360998a24700103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:94:a7:5a:36:89:76:a0:95:01:04:68:24:
25:7d:3c:29:0d:04:b8:80:0b:6f:74:43:26:60:21:
2e:01:dd:0d:4c:ba:33:b9:4a:5c:de:9f:ba:12:61:
cd:b9:f6:da:a4:b4:4b:dd:4b:44:d9:a0:b7:6d:50:
5e:b6:51:23:03:35:05:79:3e:23:b6:75:55:bd:b9:
41:1a:1a:2c:f0:85:7c:db:bc:d2:e2:78:e1:17:e1:
fe:68:4e:48:af:f0:0a:42:9b:48:bd:11:a3:64:21:
e6:60:42:2b:28:b7:7d:d8:82:14:02:f7:d1:14:7e:
f2:92:d5:b7:e7:fd:cf:cb:f5:3c:49:bc:8d:3e:88:
91:c1:bd:66:58:f7:a5:74:e5:a4:bb:5a:f5:35:91:
b4:c7:d3:62:45:5e:34:2f:82:4f:45:e7:9e:8c:38:
d3:d9:01:f6:f2:21:03:9f:8f:db:0a:cc:7a:49:32:
84:a8:a6:c8:0e:17:ac:35:72:dd:1e:73:f5:d3:1e:
3f:bc:b6:76:ad:87:34:18:f5:c4:b3:28:bf:e3:77:
c9:10:f7:d4:a8:bc:37:5f:a8:2f:75:ea:99:24:ad:
07:b4:57:d5:4d:49:f2:2a:bc:c0:34:4c:fd:89:39:
e9:98:9d:a3:77:dd:01:0d:7a:9b:72:48:a1:4e:a6:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:67:84:CB:19:5A:EF:A1:AF:16:82:89:91:D7:B1:0F:CE:7E:AE:00
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5f9016b43b44cb455a644fafa360998a24700103.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.19.0/24
181.215.17.0/24
181.215.167.0/24
181.215.195.0/24
181.215.210.0/24
181.215.224.0/24
181.215.228.0/24
181.215.241.0/24
Signature Algorithm: sha256WithRSAEncryption
01:21:fd:53:76:f3:66:0a:de:3b:28:13:35:7f:33:07:64:03:
4a:0f:c4:2c:0b:d4:b7:d3:92:33:8f:83:5d:be:bd:bf:7f:16:
1c:ee:40:13:70:fb:86:3e:db:13:4e:d1:a9:7e:27:87:3a:3b:
e2:de:65:e0:18:50:fe:63:80:27:9d:96:ca:ed:5c:9c:d5:8b:
74:8e:91:56:36:02:9d:ba:0e:81:48:63:ae:0b:3d:e3:e3:3b:
b9:49:56:84:12:fb:44:b9:ba:26:00:bc:b7:8a:cd:f6:92:15:
e4:aa:7d:ca:6b:38:9a:49:be:90:24:8b:4b:50:ca:b3:e9:2c:
33:a1:2c:1c:cc:9f:9f:11:76:2b:91:f8:d7:4f:53:9c:af:1f:
dc:00:46:1a:a7:ca:cd:4e:58:f7:21:cf:7a:07:d0:3e:cc:d0:
95:66:13:98:f3:74:b5:53:cb:3f:d7:f2:ca:a2:c6:43:44:f9:
07:49:e9:ff:05:6d:c6:46:a3:c3:4e:5f:ee:fa:b7:3b:78:c9:
32:74:1b:13:97:77:6d:b7:2b:31:31:bf:1f:cb:88:39:d6:41:
53:c0:2f:e2:fd:de:84:af:b4:34:aa:68:73:ef:d9:ad:95:ac:
b5:9b:b7:af:42:a7:7d:50:64:b7:e4:a6:fe:50:d0:5e:36:8c:
1c:7d:73:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org