Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9688f35834aaac4e4f63f9cf7f1f2f654e317070.roa
File: 9688f35834aaac4e4f63f9cf7f1f2f654e317070.roa (raw, json)
Hash identifier: As1DJXuDTPt+wBq1viDjvV1ubi0g61rWjN4/pUB0CBw=
Subject key identifier: CA:8D:DB:89:34:F3:49:65:38:45:3A:B4:4B:2B:EA:56:CE:E0:F0:9E
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 0EAEFB
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9688f35834aaac4e4f63f9cf7f1f2f654e317070.roa
Signing time: Thu 30 Sep 2021 08:07:07 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 174
IP address blocks: 181.215.52.0/24 maxlen: 24
181.215.176.0/24 maxlen: 24
191.101.31.0/24 maxlen: 24
191.101.217.0/24 maxlen: 24
191.96.168.0/24 maxlen: 24
191.96.145.0/24 maxlen: 24
191.96.190.0/24 maxlen: 24
191.96.150.0/24 maxlen: 24
191.96.185.0/24 maxlen: 24
191.96.106.0/24 maxlen: 24
191.96.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 962299 (0xeaefb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=9688f35834aaac4e4f63f9cf7f1f2f654e317070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:59:94:18:f7:0c:53:5f:d2:42:b3:16:d5:
10:7a:9d:c8:c5:31:b5:9e:34:4e:e2:ca:5b:7d:c9:
eb:18:67:e9:00:7c:84:cd:05:bf:18:53:4d:5d:c9:
77:43:f9:f2:1a:b0:a7:ef:ef:e1:88:7d:52:d2:e6:
70:87:fa:3a:b6:04:63:97:3a:90:27:29:54:e5:a1:
83:69:ae:7c:0a:25:3b:94:eb:5b:03:c7:8b:80:9d:
6b:ed:97:c7:8e:37:ae:10:39:d6:d2:cc:c3:c8:3b:
b3:82:22:10:7f:fe:70:07:e6:f2:bd:7e:aa:09:44:
2c:97:04:82:90:d6:66:fe:a7:c3:3c:69:c3:cc:66:
7e:55:c3:a2:80:14:07:6c:0f:d6:37:5d:3a:2b:cb:
2c:7b:66:19:5e:eb:57:33:98:e3:66:11:e0:78:4a:
5a:12:81:85:2c:74:42:98:18:bb:f6:63:32:eb:f4:
f3:1b:76:6b:1c:58:43:5c:a0:54:13:85:66:d7:68:
86:50:a1:a9:da:9e:1d:16:43:5d:88:06:3e:2e:cd:
a5:40:31:c3:22:46:62:de:f2:33:e5:75:4b:80:20:
10:7a:96:43:21:cd:3c:7e:9f:e2:78:f0:03:1d:15:
4d:74:e0:a7:b3:cc:b6:1e:00:a7:17:50:58:a9:78:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8D:DB:89:34:F3:49:65:38:45:3A:B4:4B:2B:EA:56:CE:E0:F0:9E
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/9688f35834aaac4e4f63f9cf7f1f2f654e317070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.52.0/24
181.215.176.0/24
191.96.106.0/24
191.96.145.0/24
191.96.150.0/24
191.96.168.0/24
191.96.185.0/24
191.96.190.0/24
191.96.227.0/24
191.101.31.0/24
191.101.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d4:31:37:c8:36:24:dd:d3:32:3b:ed:2d:c8:90:9b:80:d3:
63:9c:e2:31:1c:96:9b:a3:d6:24:18:94:68:19:cc:32:1a:51:
fe:d7:b1:09:c7:bc:ab:44:28:fa:f4:65:b0:a6:0b:46:e1:3a:
01:e0:d7:8e:51:85:30:f4:0f:0a:82:d0:7a:59:b8:b0:c1:06:
cc:35:3a:45:90:e9:46:b6:c1:57:85:20:af:6b:f4:af:e7:98:
77:cc:d9:3b:79:aa:8a:4d:58:12:0b:cc:8d:80:c1:10:c6:18:
f3:9c:41:13:9e:37:1b:a6:d3:3d:f1:d2:73:d6:ac:ae:46:fe:
00:c1:90:6e:0a:8b:49:a4:db:a4:87:26:b0:3b:80:fd:76:31:
9a:9a:f8:b3:40:a9:2c:dd:60:2d:89:56:4e:49:32:59:56:78:
a8:5c:5d:98:bd:ef:8d:1e:fe:0a:ac:9a:45:d9:a8:b2:b8:f5:
df:03:91:72:09:68:56:22:5e:0f:54:08:bb:92:eb:9f:b4:2d:
e4:a6:96:0e:32:92:4a:2c:38:f7:4a:34:5d:c2:c7:e3:90:4e:
cb:d4:60:ff:4e:f6:7e:18:92:80:6e:27:33:69:ff:cf:ff:e6:
94:0c:18:9e:55:5e:90:b5:5c:8d:58:50:54:56:d4:c6:4f:0f:
c7:b6:38:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-ams.rpki-client.org