Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fe1d02a0329ee295b07541539f533917090ee459.roa
File: fe1d02a0329ee295b07541539f533917090ee459.roa (raw, json)
Hash identifier: mCF/FbBbc0pvJicxUraE+trfQZPYTtDzrEFXLOQeSoI=
Subject key identifier: 67:18:7C:C1:11:73:E2:12:C4:1F:B3:49:9D:A1:AC:A2:40:8D:58:21
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 1245D8
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fe1d02a0329ee295b07541539f533917090ee459.roa
Signing time: Fri 10 Dec 2021 21:31:20 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 210277
IP address blocks: 181.214.194.0/24 maxlen: 24
181.214.195.0/24 maxlen: 24
181.214.196.0/24 maxlen: 24
181.214.232.0/24 maxlen: 24
181.215.210.0/24 maxlen: 24
181.214.127.0/24 maxlen: 24
181.214.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1197528 (0x1245d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=fe1d02a0329ee295b07541539f533917090ee459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fd:f5:b1:a4:84:4a:ce:7d:86:68:23:a3:14:
68:75:cc:3f:85:7e:34:75:fa:e9:0d:fc:a1:ff:cb:
11:18:cb:00:12:82:6e:dc:32:3a:7b:8b:f7:b7:92:
5d:98:e1:18:89:fa:67:a7:00:ac:89:43:23:33:96:
a1:f3:7c:a3:29:e4:f7:19:51:0b:66:bd:71:cf:5e:
a4:08:b8:2b:1d:cc:05:6d:69:01:b1:43:7a:3e:84:
7d:fc:3f:84:20:57:21:ba:5a:72:5f:9f:1a:f5:01:
7a:d8:52:06:ef:55:c5:7d:68:41:82:48:0b:a8:4f:
25:fb:c8:4f:35:4d:e4:63:de:76:05:4b:5b:28:08:
86:bd:9b:3b:61:f1:e8:a8:82:82:51:a0:47:91:bb:
45:eb:bd:23:af:58:07:03:cc:6a:54:e1:a5:69:d1:
e9:86:36:4d:ba:1d:3d:a0:43:ef:a9:2f:f5:79:b2:
b7:0a:fc:5d:10:e2:6d:6b:3d:28:f0:db:b0:01:6e:
58:dd:07:71:37:7b:10:b2:9c:1d:8b:e8:23:60:2f:
0a:81:6a:8c:fb:8d:aa:46:4c:cb:03:95:00:7e:48:
b6:a3:d1:07:1f:93:8b:e5:a2:0a:06:e8:a1:f3:5f:
1d:65:33:63:91:34:50:e9:91:04:96:05:ac:3d:d5:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:18:7C:C1:11:73:E2:12:C4:1F:B3:49:9D:A1:AC:A2:40:8D:58:21
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/fe1d02a0329ee295b07541539f533917090ee459.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.29.0/24
181.214.127.0/24
181.214.194.0-181.214.196.255
181.214.232.0/24
181.215.210.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8b:84:e2:2b:55:f0:ae:0d:46:b8:cb:1f:62:5c:ca:1e:ba:
53:63:e6:7a:8a:77:f7:e2:97:13:22:19:82:1a:82:e7:b6:59:
a7:5b:45:c4:76:c4:70:45:e1:00:b4:57:f6:06:86:3f:e8:ea:
1d:0d:09:8a:60:49:b3:4d:a8:c5:80:07:eb:0f:6c:7a:01:bc:
1e:07:07:c7:e1:97:18:38:5a:5b:98:50:ca:76:8a:1a:3a:d9:
f2:ac:00:33:5d:1d:0b:c4:df:d3:2a:9c:5c:6b:62:c2:b7:9d:
a3:b9:a2:95:db:55:ce:37:0f:fa:6c:05:0e:b9:34:0e:4b:d2:
03:ef:95:f9:f8:2c:08:66:6d:e2:00:4b:4d:ef:8e:83:a3:7a:
03:99:e4:4b:5d:f5:44:98:a8:89:4e:58:52:50:81:c3:3c:f7:
50:be:38:fa:21:3b:0d:ed:c0:30:99:f1:cf:d7:aa:d9:2b:9f:
30:27:43:f4:21:88:92:0b:d1:4a:19:98:48:70:35:18:c8:38:
17:80:ef:63:00:e9:97:95:22:19:cc:54:fb:b8:2b:d4:3a:a5:
64:b4:76:e1:77:37:13:65:2a:93:ed:61:e0:86:a2:fe:37:9e:
2c:89:f5:ed:86:8a:31:80:a6:f6:e5:3b:d2:28:2a:84:3c:74:
a7:b7:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:27 2023 by rpki-client on console-ams.rpki-client.org