Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f2270cd49258a5ff99f4528e002b63f2b5742766.roa
File: f2270cd49258a5ff99f4528e002b63f2b5742766.roa (raw, json)
Hash identifier: XgHGlzFgkJG2X7jtWay9q2bopuH4WUOe9U35nfq/lQU=
Subject key identifier: 0C:67:7D:88:D9:3E:46:52:A0:42:BD:8B:9D:BA:02:F7:CE:F0:39:C1
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 06016D
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f2270cd49258a5ff99f4528e002b63f2b5742766.roa
Signing time: Wed 24 Mar 2021 14:33:34 +0000
ROA not before: Wed 24 Mar 2021 14:33:29 +0000
ROA not after: Tue 24 Mar 2026 14:33:29 +0000
asID: 61317
IP address blocks: 179.61.128.0/17 maxlen: 24
181.214.0.0/15 maxlen: 24
191.96.0.0/16 maxlen: 24
191.101.0.0/16 maxlen: 24
2803:80::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393581 (0x6016d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 14:33:29 2021 GMT
Not After : Mar 24 14:33:29 2026 GMT
Subject: CN=f2270cd49258a5ff99f4528e002b63f2b5742766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:33:4a:0d:5f:94:a7:b6:a8:da:08:b2:57:b5:
76:d1:a0:5f:d1:c4:4e:f0:26:ee:9f:77:97:e3:a4:
1c:ef:bf:a0:06:9f:7a:db:74:c7:69:87:e5:7a:df:
e2:08:ef:77:48:30:41:93:13:45:97:30:c0:dd:bd:
93:4d:92:91:31:d4:79:0f:ad:6a:e5:8a:aa:55:5d:
e6:98:06:c0:49:b7:6f:82:4f:bc:f1:3c:9a:ab:d0:
cc:63:d1:03:69:7a:23:b1:26:d6:26:c5:90:f7:cc:
34:37:fc:74:10:87:5c:f5:6f:cc:d7:91:86:ef:15:
27:14:cb:f0:eb:ba:7f:e0:85:8c:61:2e:6e:2a:5f:
55:73:65:2e:e0:02:af:65:ca:5a:aa:15:23:92:a8:
9f:61:d0:48:86:09:81:ec:68:bc:f7:9e:3a:7b:41:
24:91:96:6a:91:a8:bd:cd:64:f3:86:e2:82:78:59:
bf:e6:dd:56:12:ae:7c:d3:a6:53:54:dd:ff:04:7c:
1f:81:e5:87:a3:bd:07:cf:ad:92:6c:14:4b:2a:a1:
b2:f4:de:63:03:8c:19:fd:df:0c:18:af:ee:4d:13:
a6:d3:86:ac:81:a3:53:ef:52:7c:4d:45:07:8a:5d:
23:23:d1:4e:95:6f:85:85:67:f3:46:54:07:e1:0d:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:67:7D:88:D9:3E:46:52:A0:42:BD:8B:9D:BA:02:F7:CE:F0:39:C1
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f2270cd49258a5ff99f4528e002b63f2b5742766.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.61.128.0/17
181.214.0.0/15
191.96.0.0/16
191.101.0.0/16
IPv6:
2803:80::/32
Signature Algorithm: sha256WithRSAEncryption
9f:0c:4f:2d:06:41:25:c2:a9:75:ec:ec:cd:b8:ba:8b:85:a6:
b7:ba:8b:25:6c:7a:b3:52:cd:ee:fd:68:02:c8:06:d4:a8:c0:
93:c4:77:20:90:e7:d6:ca:fd:17:af:83:1b:b3:ee:8b:e0:be:
81:f8:3a:02:8c:17:6d:b1:48:01:d2:98:83:78:9c:66:ab:a7:
0e:f5:7d:44:45:26:c9:f6:9c:21:2b:36:f2:0c:32:b4:ec:58:
19:92:9c:dc:c2:99:03:35:8b:b4:41:ad:f7:65:b4:41:89:97:
e9:76:c8:fc:c1:c5:66:cc:11:0c:4c:f0:ff:c4:a4:43:ab:be:
18:d8:d6:bb:ab:54:1d:65:d2:97:64:56:96:ea:eb:df:9f:be:
08:67:f2:5a:e6:ae:5a:49:ef:08:e2:7e:ca:e7:ed:87:36:33:
e0:56:6b:d7:6c:34:db:14:59:9d:d4:ee:a2:8c:5d:41:84:c0:
e5:8d:8c:06:1f:0a:d5:db:73:2b:1b:51:89:77:33:ba:0b:2c:
a5:80:31:2c:a5:23:eb:ad:68:05:b7:82:d2:8b:56:8b:4a:84:
96:c4:dc:ee:e3:5c:91:41:8a:c2:49:2a:4f:b4:50:74:8f:f0:
b1:bd:86:a5:66:e1:81:e5:05:86:71:3f:24:16:a6:6c:c0:2a:
8e:1b:ae:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org