Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/66b2afe775101a5d615a1164408549299e931e76.roa
File: 66b2afe775101a5d615a1164408549299e931e76.roa (raw, json)
Hash identifier: gLN0leK9jQG7vDVzP/tYrv6jD45olZmJIU6lJGeCI9c=
Subject key identifier: 70:8E:42:9E:21:8B:A0:60:FC:5F:90:33:03:32:A2:C3:03:33:59:42
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 06C3FE
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/66b2afe775101a5d615a1164408549299e931e76.roa
Signing time: Wed 24 Mar 2021 14:33:37 +0000
ROA not before: Wed 24 Mar 2021 14:33:29 +0000
ROA not after: Tue 24 Mar 2026 14:33:29 +0000
asID: 263612
IP address blocks: 191.101.34.0/24 maxlen: 24
191.101.35.0/24 maxlen: 24
191.101.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443390 (0x6c3fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 14:33:29 2021 GMT
Not After : Mar 24 14:33:29 2026 GMT
Subject: CN=66b2afe775101a5d615a1164408549299e931e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c6:b4:bf:a8:24:bd:06:81:93:da:67:3f:78:
98:a9:63:b0:7d:c3:8a:99:e1:63:32:ee:5b:ea:b2:
b0:a6:25:15:21:3a:fd:34:d2:da:ce:93:e6:2c:11:
00:99:3b:69:8a:09:6d:28:5d:1c:95:d6:5d:98:aa:
40:3a:a1:1a:a3:5e:ac:b8:fd:2e:cf:e6:e0:64:89:
13:1d:ca:22:3d:cf:eb:84:81:86:c4:6a:23:29:0e:
e2:eb:fe:7b:1f:3f:bd:5c:2f:da:bd:63:de:9a:e3:
c5:e5:90:d3:cf:a0:c6:ee:56:6e:0b:a6:8e:b9:c1:
6b:6a:c1:a5:56:60:e7:91:ae:a3:6f:d6:c2:ec:f0:
92:68:32:c6:96:97:9d:ab:75:d4:a5:33:8c:cb:fd:
58:c1:f0:f0:45:05:2c:48:0a:21:d5:8c:56:b5:ca:
aa:c6:72:2e:72:bf:40:08:91:ba:4d:ca:94:7b:2c:
70:5e:14:fd:50:df:dc:a8:95:a6:89:3b:6a:76:0d:
ef:c2:2a:0a:13:9e:09:e9:17:15:bc:40:93:40:02:
ec:92:93:ef:22:b9:fc:3c:4d:60:ed:b4:df:1f:48:
ee:57:3f:90:b1:7c:43:37:3f:8f:d4:8c:ac:49:bf:
01:65:a2:b5:f2:a8:6f:7e:75:a2:1f:c3:cd:a9:32:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8E:42:9E:21:8B:A0:60:FC:5F:90:33:03:32:A2:C3:03:33:59:42
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/66b2afe775101a5d615a1164408549299e931e76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.101.34.0/23
191.101.37.0/24
Signature Algorithm: sha256WithRSAEncryption
53:53:39:1a:02:d7:b3:d9:2a:cb:c7:b7:82:28:dd:1d:72:63:
12:29:8b:5a:1d:ce:67:db:36:c6:70:eb:0b:4e:12:45:8b:e7:
2a:13:98:71:af:94:1b:01:d9:30:35:2b:6e:71:ff:da:a9:c6:
43:87:60:53:e6:7b:1e:d7:3f:e7:42:47:7f:c2:ad:eb:83:3c:
73:93:8e:34:e4:12:ff:f3:a4:7b:97:d1:cb:01:cb:df:d5:9f:
76:d9:c2:9e:2b:a5:1c:77:10:40:9d:8a:2a:c3:37:db:a3:36:
b8:87:45:1e:18:56:ba:0b:d6:08:fd:0b:8d:08:55:37:80:db:
42:b9:67:32:ba:dd:58:67:35:ad:b4:b6:33:1d:7b:1d:f4:4a:
78:eb:62:6c:05:91:4d:4f:a7:52:70:af:87:85:a8:f6:90:eb:
a0:ce:5f:5e:7b:9c:85:21:1a:7a:36:2b:d9:c4:f3:c1:b0:d7:
0a:b0:a1:7c:9b:2c:75:ad:e5:03:78:a4:58:22:06:ac:00:b7:
ef:5f:72:80:0f:d6:22:23:8b:53:1a:26:dd:db:b9:d2:97:a7:
d1:03:67:f4:65:1a:98:a5:ed:22:26:0f:3c:29:62:9f:6e:77:
0f:3e:4d:67:21:ff:7a:5b:ca:f8:d5:13:e9:4a:c0:ae:de:61:
bf:c9:47:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org