Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c221293a2ce9a160f6f37f5dadfc4ba3bb2623d9.roa
File: c221293a2ce9a160f6f37f5dadfc4ba3bb2623d9.roa (raw, json)
Hash identifier: nYhvYy/IB0fjaAi+cx/XRBBu0KCImEEUGN8hyzqVNz4=
Subject key identifier: 30:FA:99:9E:F4:B2:1E:E4:B5:DA:A0:5B:E5:77:15:57:5D:8D:7B:B0
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 0674E0
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c221293a2ce9a160f6f37f5dadfc4ba3bb2623d9.roa
Signing time: Wed 24 Mar 2021 14:33:36 +0000
ROA not before: Wed 24 Mar 2021 14:33:29 +0000
ROA not after: Tue 24 Mar 2026 14:33:29 +0000
asID: 19318
IP address blocks: 191.96.88.0/22 maxlen: 24
191.96.160.0/22 maxlen: 24
191.96.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423136 (0x674e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 14:33:29 2021 GMT
Not After : Mar 24 14:33:29 2026 GMT
Subject: CN=c221293a2ce9a160f6f37f5dadfc4ba3bb2623d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:ea:e3:19:a5:55:de:7f:b1:01:88:be:e4:
8a:cc:31:69:20:68:32:bb:78:77:8f:25:cc:8f:47:
29:9c:ec:dc:20:a0:25:ac:79:3d:18:45:be:e4:f1:
66:58:2b:31:07:4d:60:14:62:99:0d:81:73:35:85:
90:65:62:2d:41:ec:35:0a:53:62:b5:27:c4:8a:63:
64:9c:a8:62:3a:3d:bc:cd:ac:57:c0:de:38:f3:a3:
8c:66:42:2b:18:4f:48:22:9f:0d:bc:52:9b:c0:15:
14:79:f9:09:c3:66:da:cc:ac:28:85:78:44:6d:02:
19:83:b5:38:be:3e:ee:38:4f:a5:bc:69:44:b3:be:
89:b4:d9:64:dc:54:b5:3d:9a:d0:d8:1b:cb:b9:9f:
c4:83:4a:f5:b5:6f:04:2f:64:25:b1:5b:5a:d7:cc:
ed:c6:9d:d6:df:ff:fb:26:43:06:d7:63:08:3f:12:
f2:12:4f:16:fc:e2:95:cd:64:a5:d5:58:4d:40:42:
3e:de:50:b7:a1:e1:d1:bf:b3:fd:06:b8:08:83:38:
6d:a9:a6:f8:9e:e0:4c:74:12:15:a2:5c:be:10:91:
bd:df:68:65:3f:90:33:51:97:4c:57:4e:12:3a:ac:
15:3c:f2:2e:1d:68:e5:87:d6:91:91:ff:e5:e0:01:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FA:99:9E:F4:B2:1E:E4:B5:DA:A0:5B:E5:77:15:57:5D:8D:7B:B0
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/c221293a2ce9a160f6f37f5dadfc4ba3bb2623d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.96.88.0/22
191.96.124.0/22
191.96.160.0/22
Signature Algorithm: sha256WithRSAEncryption
11:ca:dd:8c:c3:71:26:aa:64:05:4d:e8:d4:16:a6:6f:65:0c:
79:e4:71:a0:5e:22:34:eb:59:62:36:d6:43:48:71:13:94:36:
33:db:1e:77:c8:e9:db:68:c0:ec:e4:93:14:5f:56:8b:d4:d0:
4c:5d:0d:e9:66:00:4e:02:72:87:a6:28:e5:ff:08:82:3f:1b:
0b:5a:45:4b:73:ba:16:88:92:35:d2:53:eb:88:7b:24:b9:a8:
36:2a:7d:77:8d:9b:90:38:c1:28:62:9b:0b:f7:93:70:ee:91:
f9:27:9e:43:27:5f:1e:95:bb:4c:f6:35:bd:b1:38:e5:86:82:
74:31:22:d6:05:24:32:52:fe:08:79:c3:80:71:d2:64:fb:01:
8b:d5:57:d4:fd:84:48:1b:db:73:bc:ec:b9:c8:a2:ca:80:45:
89:5e:1a:c5:f3:50:a4:6b:28:75:c9:4d:0b:f5:de:98:ec:9a:
4b:82:41:8b:31:a6:10:c5:e1:7a:2d:19:1e:2e:d4:ed:ed:8e:
2f:5e:54:aa:27:75:ae:aa:1a:ed:ef:64:0d:71:c1:41:94:15:
83:f2:e3:42:6a:0d:0f:6c:3f:13:6c:ce:71:15:29:17:3c:50:
03:b7:ff:2c:32:4e:10:75:90:df:07:01:62:fd:40:0c:17:0f:
cc:8b:25:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:03 2024 by rpki-client on console-ams.rpki-client.org