Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6ae60e55e13dee38cb457e1d6a66b577a9520212.roa
File: 6ae60e55e13dee38cb457e1d6a66b577a9520212.roa (raw, json)
Hash identifier: VapLgM3GqjHdsBLheI6BXjJijXG9VtTBmPU/9YN4AT0=
Subject key identifier: 4F:91:68:86:55:3F:7E:33:DC:91:9E:B3:C7:53:BE:C4:B4:E0:3B:35
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 1348EE
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6ae60e55e13dee38cb457e1d6a66b577a9520212.roa
Signing time: Tue 28 Dec 2021 21:40:09 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 19437
IP address blocks: 191.96.229.0/24 maxlen: 24
191.101.34.0/23 maxlen: 24
191.96.65.0/24 maxlen: 24
191.101.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263854 (0x1348ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=6ae60e55e13dee38cb457e1d6a66b577a9520212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:90:1f:74:1d:57:5f:22:6e:d9:49:02:b8:d2:
90:b1:09:41:85:28:31:f5:34:ff:f2:19:c6:68:42:
dd:2e:42:aa:a6:0c:97:cf:b5:a6:d9:c8:62:81:ff:
2b:e2:94:f9:b0:37:32:1a:eb:9e:83:08:7e:19:b5:
2a:03:21:60:b1:e1:93:e1:0f:79:30:99:1a:26:d7:
6c:f9:fd:aa:32:89:87:4e:27:65:74:2d:d4:57:99:
11:f3:85:7e:ae:dd:74:17:c6:f4:a8:51:90:f6:53:
05:fe:e7:82:dc:45:29:c1:72:89:ea:98:78:71:70:
23:60:01:95:8c:75:95:ee:dc:32:e1:fa:e9:bf:91:
b6:c6:8e:44:86:b6:7b:64:0a:71:8a:cf:18:5a:c0:
78:6f:1c:33:62:60:49:55:d0:eb:0c:00:e5:7d:50:
16:25:e7:ad:3f:91:a7:fb:e1:5b:0e:5b:c5:62:4a:
46:fc:bd:e4:cc:62:60:d0:d6:01:f6:02:3a:22:eb:
ea:4b:39:ed:39:da:a8:23:2b:51:15:f3:bb:4d:bf:
ec:46:7e:7e:ea:e5:43:66:95:97:0c:64:65:8e:b3:
6a:05:54:1e:3c:48:d9:87:7f:6b:c8:aa:ed:54:f9:
20:44:ad:29:90:a8:c3:3a:48:c5:6a:f0:ec:e9:4b:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:91:68:86:55:3F:7E:33:DC:91:9E:B3:C7:53:BE:C4:B4:E0:3B:35
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/6ae60e55e13dee38cb457e1d6a66b577a9520212.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.65.0/24
191.96.229.0/24
191.101.34.0/23
191.101.186.0/24
Signature Algorithm: sha256WithRSAEncryption
22:36:4d:46:18:6d:f1:83:41:10:c5:a2:ad:9b:07:30:1a:b1:
82:92:f6:8b:df:c2:18:ee:4e:b7:58:2a:0f:98:ec:8e:4f:4e:
01:34:ed:d7:c3:75:14:45:38:1a:5c:83:c8:e5:ce:92:de:41:
1c:ad:ab:a3:c5:8a:15:5f:d4:ba:23:25:da:10:36:ff:ea:dd:
01:88:0c:79:c9:ff:eb:f9:cb:37:d9:2c:fc:e6:19:28:5d:5d:
85:53:9b:9f:5a:d8:64:9d:eb:62:19:84:a5:3b:dc:3f:cc:9e:
6e:32:55:69:04:62:10:b6:bd:b8:83:c3:9f:b4:e5:89:33:56:
41:80:96:64:4b:d3:4f:44:53:42:65:a0:11:25:f1:68:b2:24:
e1:fd:1f:86:96:30:d8:40:06:45:c3:1b:5f:22:48:6e:ea:ae:
07:ca:bb:88:10:5c:a9:fc:b6:0c:5b:81:6d:fa:38:ed:cc:75:
e0:41:fb:1f:c3:8c:ad:e8:46:05:10:e6:99:a9:8d:eb:0f:78:
0f:b7:12:5c:0a:0f:67:ca:48:0b:71:23:e8:63:75:f4:e9:01:
1a:f1:51:0b:c8:21:89:bd:30:62:70:c2:b1:9d:1d:39:43:fe:
76:95:90:7e:f4:99:6e:88:2f:c2:9f:fb:bb:91:51:aa:b4:1d:
81:37:bb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-ams.rpki-client.org