Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8856ed4a286aad2824fc7c42142b831628c09033.roa
File: 8856ed4a286aad2824fc7c42142b831628c09033.roa (raw, json)
Hash identifier: I0R6GHGBc7646nY6XsRY92HzsgLhy7G1hIiI0KgKmOs=
Subject key identifier: 44:CA:B1:49:2C:A6:5E:FB:B3:73:5C:D9:29:35:EE:1F:94:85:10:A2
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 095333
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8856ed4a286aad2824fc7c42142b831628c09033.roa
Signing time: Tue 18 May 2021 16:39:22 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 54825
IP address blocks: 181.214.236.0/24 maxlen: 24
181.215.11.0/24 maxlen: 24
191.101.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 611123 (0x95333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=8856ed4a286aad2824fc7c42142b831628c09033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:1c:df:ac:a9:6c:7d:bd:d0:55:b6:09:b5:
01:ec:86:e2:bc:4b:f4:2d:65:a0:94:45:5e:a7:c3:
76:12:1c:31:51:d1:1b:89:ac:6c:75:d4:44:db:3f:
e2:2b:a9:70:e1:46:18:38:05:d1:54:e1:c1:b5:b1:
3a:d5:83:84:48:19:1b:ce:6e:d4:f3:25:7d:40:77:
59:5d:c2:d2:bb:b5:b6:ed:01:6d:32:59:35:08:7f:
b6:f7:7a:fa:14:f5:7c:01:61:5e:c0:6e:6e:16:ad:
f7:76:a4:5f:f8:14:6c:84:ad:dc:2f:18:80:83:c3:
a1:3a:81:a4:b6:41:10:d9:9b:f8:86:67:14:c5:99:
51:5a:50:33:8f:cc:90:e6:93:94:4d:49:9c:b7:22:
b4:c1:94:9e:35:35:a2:ea:38:7d:ee:dc:58:97:2b:
01:17:a2:6f:91:72:c5:81:65:70:a6:67:3d:d7:32:
fc:7d:08:68:26:5c:cf:90:64:d9:f6:d4:da:c6:c8:
bd:7c:8b:5e:99:c3:e9:6d:0f:72:b6:b7:9d:e7:96:
e9:0b:52:73:93:44:19:e2:d9:ab:10:18:34:ba:60:
17:12:78:ec:d7:5e:64:ff:2c:33:17:d4:3a:82:74:
c0:ad:a4:d9:dd:3f:24:12:95:df:45:27:9e:a2:1d:
48:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CA:B1:49:2C:A6:5E:FB:B3:73:5C:D9:29:35:EE:1F:94:85:10:A2
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/8856ed4a286aad2824fc7c42142b831628c09033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.236.0/24
181.215.11.0/24
191.101.29.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a9:f2:82:d1:27:e0:b5:3f:d7:74:44:fb:ab:4f:82:df:aa:
00:82:ef:cf:bd:49:66:9b:30:53:15:78:e3:52:dc:94:1a:da:
bc:8f:53:55:b0:b7:a1:ec:3d:95:1e:3c:56:50:07:ee:b4:25:
f4:35:ff:d0:5b:93:b0:06:c0:b5:bf:07:e7:22:9d:f8:14:20:
de:f7:ca:f4:5f:ca:b1:ea:5b:78:85:e8:d5:99:3e:7a:3d:d6:
7b:bd:71:29:2e:fd:f6:96:6d:ee:cf:90:2f:81:36:3f:31:18:
3f:ef:32:31:35:e3:c4:e6:12:26:e6:08:fa:74:6e:01:a4:8f:
69:6c:d2:56:06:0d:08:a7:5f:a5:07:23:71:e7:b4:29:a4:04:
3d:9c:34:60:85:b2:56:a0:2e:99:ce:cb:2b:41:fe:ec:81:de:
c6:72:fe:50:3b:98:33:57:d3:78:34:95:0a:bf:ef:4f:98:31:
ed:84:ab:9a:14:29:0c:8a:c1:a5:ad:9f:03:c9:5d:e2:92:09:
7a:c1:d7:c0:74:f5:8c:74:10:a2:f5:9b:3e:06:c2:ea:8f:e5:
da:e7:e9:27:62:60:58:bc:85:d3:ca:db:7a:7b:26:b7:bf:e8:
35:f4:5e:c5:3f:29:2a:b0:e7:dd:16:f3:07:fa:22:5d:1d:59:
0a:bc:25:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org