Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d64de2d5e194eeaf2a74abc81c2f6042643548c6.roa
File: d64de2d5e194eeaf2a74abc81c2f6042643548c6.roa (raw, json)
Hash identifier: rcCIjzESuiWHG7NELmo6baOBJxx/DNmG8IywP3gNcbA=
Subject key identifier: A0:8C:A7:24:79:E6:EA:D7:F8:19:87:4A:01:DB:42:B8:9F:0B:57:6F
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 0D26B4
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d64de2d5e194eeaf2a74abc81c2f6042643548c6.roa
Signing time: Fri 27 Aug 2021 18:48:43 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 18345
IP address blocks: 181.214.51.0/24 maxlen: 24
191.101.211.0/24 maxlen: 24
181.214.23.0/24 maxlen: 24
181.214.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 861876 (0xd26b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=d64de2d5e194eeaf2a74abc81c2f6042643548c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:43:a6:4f:07:c1:a4:80:e4:bd:53:15:34:
57:1f:aa:6e:ce:31:03:5b:0f:45:be:31:1c:9c:c3:
d0:a4:5d:f4:05:a3:61:84:06:00:c0:ef:f2:4e:87:
71:6b:04:50:3a:74:80:6f:4d:82:22:67:8d:7a:bf:
ec:39:5c:9c:a1:8a:65:c8:40:5e:0c:26:6f:e4:62:
d9:74:5e:86:03:5a:23:e4:55:75:d2:8d:88:47:0f:
21:46:48:51:06:6f:e9:b3:96:3b:be:02:7a:a0:d9:
f1:01:41:0a:02:ff:f4:4b:9f:f5:3c:0f:e4:5e:12:
2a:7d:e6:74:eb:e2:08:a2:bd:04:3e:93:70:9f:7a:
64:3e:ef:b5:43:7c:97:51:4c:57:cf:cc:b4:d5:68:
63:73:7b:08:9a:22:3c:21:2a:98:fb:ff:bd:b8:3c:
cf:3f:8f:89:f2:05:90:f4:0d:64:99:2d:03:15:10:
f8:a8:32:b7:e3:ad:4b:73:3b:b8:11:11:2d:79:f4:
b9:b9:2f:71:0a:42:c5:d3:6c:25:2c:c2:cf:48:d9:
91:ff:ba:e5:c0:a5:47:2b:78:62:05:2f:21:70:ef:
7a:e0:f4:b3:c8:db:df:a8:ee:7f:b8:79:82:ac:14:
cb:9f:53:75:3d:30:94:dc:53:b2:24:cd:f3:c4:a5:
4c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8C:A7:24:79:E6:EA:D7:F8:19:87:4A:01:DB:42:B8:9F:0B:57:6F
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/d64de2d5e194eeaf2a74abc81c2f6042643548c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.23.0/24
181.214.51.0/24
181.214.104.0/24
191.101.211.0/24
Signature Algorithm: sha256WithRSAEncryption
18:fa:6d:2d:23:ef:87:e9:77:f8:bd:fe:1d:f6:00:9f:cb:86:
71:7f:3a:31:29:c2:31:38:60:c0:37:94:d7:5d:e2:73:3a:25:
5d:d1:75:61:c2:a2:c3:89:d5:e7:32:e7:a8:95:a4:bf:c6:61:
94:d9:46:c0:55:cf:d4:42:83:64:5c:48:4a:d1:2d:06:40:bb:
37:94:dd:f3:6e:99:fe:99:3d:87:6c:b5:bd:c9:1f:6e:f2:d8:
11:96:37:51:13:4c:c5:ff:9a:dd:04:f9:0a:16:62:6b:27:6b:
af:40:f7:cd:55:bc:07:17:28:be:e6:01:ec:b3:0b:7c:a4:63:
20:35:5b:4e:94:1a:49:c5:0c:1c:bd:92:02:a4:b9:33:3f:5e:
b1:c1:1e:c6:4c:9d:38:8a:04:55:96:6b:25:20:ba:40:4d:92:
6e:e1:16:97:3b:7f:23:65:46:ac:b7:e8:8b:4b:0b:c0:fa:55:
86:d6:46:cc:7b:d6:22:61:d9:70:20:bc:9c:cb:21:5c:1c:83:
62:72:39:32:6f:19:2d:5b:25:2b:67:79:87:77:a4:28:01:ad:
2e:64:45:a5:95:02:e6:20:aa:23:94:5a:25:db:2c:68:c6:66:
97:45:91:0d:07:79:2c:5c:6f:ea:47:e6:f0:50:91:c8:77:56:
aa:52:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org