Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ceb7742b5475e40797b71ea1536e6247a8634f70.roa
File: ceb7742b5475e40797b71ea1536e6247a8634f70.roa (raw, json)
Hash identifier: qLuE82pCbtZYv1Whskfvp4rwnhcVqB/TCSJt2DLO9vI=
Subject key identifier: 9B:D5:F5:7B:3E:8B:90:39:67:4B:D9:31:A8:DD:C8:AD:06:DF:EB:09
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 07BB87
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ceb7742b5475e40797b71ea1536e6247a8634f70.roa
Signing time: Mon 05 Apr 2021 14:23:42 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 9009
IP address blocks: 179.61.201.0/24 maxlen: 24
179.61.131.0/24 maxlen: 24
191.101.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506759 (0x7bb87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=ceb7742b5475e40797b71ea1536e6247a8634f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ed:f7:62:01:17:2b:42:12:00:43:c6:9c:12:
29:62:ae:46:40:e4:b6:ee:b8:60:61:7e:43:a9:1d:
42:c7:50:23:96:69:4c:7a:19:0c:02:58:07:c1:54:
6b:60:fc:de:90:ed:dd:d4:93:1e:13:89:76:45:78:
98:13:e7:2a:75:7d:0f:92:12:c4:76:47:54:32:f9:
b1:40:85:c8:86:7e:38:a5:d3:e9:df:23:15:84:ca:
d8:12:3c:b3:54:9d:ce:ae:a5:4f:73:e4:75:08:6e:
f3:ee:d9:54:e7:6a:fd:24:51:62:54:2b:5a:98:ff:
c5:8f:dd:f4:fe:5f:2c:bc:15:f6:80:f3:5e:8f:44:
27:62:b3:77:a2:78:fe:56:ab:db:02:16:c9:51:1d:
0c:30:a1:0b:56:2b:d0:ab:1d:16:5d:31:70:5f:34:
cc:9a:f4:3f:5b:6a:48:48:bc:02:a5:74:79:9b:96:
7f:79:86:df:bb:6f:30:75:97:9a:77:12:49:aa:19:
c7:84:69:71:47:57:00:73:c4:f3:84:19:de:3f:f3:
fd:71:d5:52:29:5a:d6:ca:be:3e:95:0c:16:cd:94:
b0:82:16:4c:fd:90:ae:d2:2c:3a:5c:15:c0:65:53:
dd:4b:48:54:3e:5f:57:eb:2b:11:c8:a5:93:90:a9:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D5:F5:7B:3E:8B:90:39:67:4B:D9:31:A8:DD:C8:AD:06:DF:EB:09
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ceb7742b5475e40797b71ea1536e6247a8634f70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.131.0/24
179.61.201.0/24
191.101.23.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a0:40:ea:1c:d5:4e:7f:cf:1b:7e:4d:6a:fa:3c:22:7f:b4:
30:8b:22:4a:3d:5f:ed:eb:7f:bf:5d:08:f0:7c:dd:be:b1:fc:
d5:16:58:54:c9:9e:35:e1:29:06:9b:41:65:61:40:ea:6a:5b:
90:62:f7:33:eb:ec:2f:35:29:b3:95:8a:62:29:45:d3:c5:73:
a4:96:b9:85:45:85:c0:bd:77:93:87:93:04:be:25:81:68:b4:
7e:1d:8e:a1:d5:3b:53:07:5c:b9:bb:1f:f1:96:c1:0b:5c:cb:
87:00:09:5c:24:50:fb:48:3a:f2:d2:8b:bf:83:89:fc:ea:4e:
a3:14:38:82:70:fc:ef:0c:26:28:7f:92:09:cd:47:21:91:65:
74:36:2a:f8:17:cf:7d:94:60:b5:b3:a6:13:a4:fe:c4:e9:3a:
80:de:c8:12:a5:92:d2:87:30:90:1d:f2:a9:fa:40:79:a3:b8:
67:a9:4c:d7:ae:83:33:df:4d:ba:0e:72:3b:cf:8f:86:51:28:
c5:bd:ce:e4:05:93:39:0e:b8:ec:79:fd:5d:5e:66:46:fc:4c:
20:66:5d:2c:5e:f5:ae:9a:c1:f1:54:03:6c:a7:4e:23:e4:29:
7f:bc:d1:bc:10:d7:85:a7:00:c2:85:7d:18:36:0b:2f:4f:d3:
5a:c6:b8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:11 2023 by rpki-client on console-fra.rpki-client.org