Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8133f953d16a81c0295997d900faa0f7c4a7278b.roa
File: 8133f953d16a81c0295997d900faa0f7c4a7278b.roa (raw, json)
Hash identifier: IWBqGfbPnJmH3nlM+JG75gU/XnczbVCg/PSgc8ESV4I=
Subject key identifier: 3E:EA:56:B2:BB:30:64:C9:EA:2B:44:AD:5A:4E:E6:BC:C0:3E:74:42
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 1392BA
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8133f953d16a81c0295997d900faa0f7c4a7278b.roa
Signing time: Mon 03 Jan 2022 17:44:19 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 13768
IP address blocks: 181.215.240.0/24 maxlen: 24
181.215.249.0/24 maxlen: 24
191.96.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1282746 (0x1392ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=8133f953d16a81c0295997d900faa0f7c4a7278b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8c:42:5d:72:7d:a8:55:d1:02:51:a1:0c:5a:
5e:04:c1:e9:38:d5:97:1b:d7:73:cf:f5:07:ea:e0:
00:1f:fe:c6:02:d8:db:cf:78:23:82:3b:71:67:c1:
6f:1a:00:c5:bb:a0:f2:5c:e0:f9:82:67:97:86:3c:
dd:38:32:0c:8f:f1:fb:92:f8:c2:8b:11:75:fa:6e:
e1:5d:3e:66:2e:43:9d:e5:3c:93:94:de:c2:51:66:
28:2b:a8:c5:02:61:bc:69:e8:66:6a:bb:25:3e:53:
1e:22:d9:a7:0a:1d:65:a1:f6:6e:dd:25:ce:ff:10:
bd:0d:97:b7:aa:16:d8:8c:e2:fb:58:9c:aa:f0:f9:
a4:74:e1:cf:e5:40:ad:ab:a2:a6:78:8e:b5:fb:e1:
5e:61:37:bc:ea:d2:03:85:b8:02:50:85:e5:76:32:
44:04:2e:c9:c0:03:57:58:a6:80:4c:ef:b9:48:26:
76:ff:77:03:89:7f:9b:0c:ef:4c:6a:40:3a:6a:2d:
15:55:d3:f6:b6:bf:65:20:b5:82:f2:45:d0:1c:0a:
ca:42:62:bc:ba:4d:0c:4e:1e:19:65:b4:eb:11:ea:
77:f2:f3:98:71:97:6b:56:e8:ce:9c:f8:57:f0:8e:
3a:d4:fb:90:e4:aa:c1:04:7a:5f:6a:ee:b8:a0:86:
ed:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EA:56:B2:BB:30:64:C9:EA:2B:44:AD:5A:4E:E6:BC:C0:3E:74:42
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8133f953d16a81c0295997d900faa0f7c4a7278b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.240.0/24
181.215.249.0/24
191.96.30.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:b8:2f:a3:bc:c2:b7:a8:a4:3d:5b:cf:54:11:4d:f1:69:e6:
fc:d1:ac:ab:6f:92:f9:1d:3b:03:ec:58:b7:48:0b:6f:5e:14:
8f:0a:76:1c:78:9d:4f:16:6d:43:3b:99:d3:63:d9:35:c6:0e:
a5:13:1a:33:c3:b4:57:62:48:37:b9:bc:4c:83:44:84:da:7e:
58:be:63:2c:5d:40:cb:8e:52:50:c8:cf:43:c3:6a:54:0b:29:
0c:ec:57:89:5c:3e:8c:2a:77:5d:33:9c:68:50:5f:80:65:fd:
ca:8b:50:06:bd:2f:61:85:86:8c:84:e2:19:34:fc:e5:ad:4f:
e9:fa:80:99:ea:94:21:3e:3e:b9:cd:e3:c9:9f:b2:23:c0:fd:
8b:5f:ac:c2:11:43:8b:9e:30:ac:ce:dc:3e:da:71:fa:21:17:
6a:2e:64:8f:cb:9e:00:18:a3:81:0c:f1:06:d3:e2:43:ae:44:
92:e6:22:19:ae:51:a6:a7:47:10:07:6a:8d:2e:a8:2d:b8:c4:
38:e3:03:2b:f0:cf:32:37:d6:3e:84:79:58:2a:aa:31:7d:9b:
30:99:1a:1d:72:29:aa:f7:73:7c:9e:92:9e:5c:7d:a7:56:86:
6b:e5:e0:db:2f:84:24:00:f3:85:b4:e4:7a:c8:35:d6:f2:82:
10:45:fb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org