Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/0afe43f259264e928fd8660e2c2b374c1f9ee9f7.roa
File: 0afe43f259264e928fd8660e2c2b374c1f9ee9f7.roa (raw, json)
Hash identifier: XjjYUCFP2BC2VWReaniONLC2M6ascAQJC/bHE8b8gE0=
Subject key identifier: 25:85:A7:3B:FD:96:5C:F4:7F:B3:50:1E:7B:78:D3:60:0C:ED:0C:70
Certificate issuer: /CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Certificate serial: 27C900
Authority key identifier: 34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/0afe43f259264e928fd8660e2c2b374c1f9ee9f7.roa
Signing time: Wed 31 Jan 2024 21:00:12 +0000
ROA not before: Wed 31 Jan 2024 21:00:11 +0000
ROA not after: Sat 31 Jan 2026 21:00:11 +0000
asID: 52228
IP address blocks: 186.15.0.0/17 maxlen: 24
186.15.128.0/19 maxlen: 24
186.15.160.0/20 maxlen: 24
186.15.176.0/21 maxlen: 24
186.159.220.0/22 maxlen: 24
186.159.224.0/19 maxlen: 24
186.159.128.0/18 maxlen: 24
186.159.192.0/20 maxlen: 24
186.159.208.0/21 maxlen: 24
186.159.216.0/23 maxlen: 24
2803:6000::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2607360 (0x27c900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d666fc96c87b713c1f1fc6b289e51fae298a9ff
Validity
Not Before: Jan 31 21:00:11 2024 GMT
Not After : Jan 31 21:00:11 2026 GMT
Subject: CN=0afe43f259264e928fd8660e2c2b374c1f9ee9f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:e1:0a:75:47:da:73:30:a6:a0:09:28:d4:
ae:08:07:13:ee:12:d5:45:b1:52:bd:7a:11:69:5e:
21:9a:92:4d:0f:2f:82:20:ba:c1:41:d2:2b:21:59:
4a:36:b4:8a:1a:03:d2:8f:b2:f4:ee:31:b5:5b:f3:
4d:1d:6f:9c:e0:e9:5e:ff:c9:ff:60:68:4f:e6:a4:
02:ab:e1:14:30:0b:dd:e5:7f:fe:61:b7:7a:37:71:
d2:2e:84:40:bb:af:b9:b5:4c:92:00:93:92:79:c7:
21:23:0d:09:f2:1c:eb:41:71:d7:33:cb:ac:c7:5c:
e3:87:43:5f:30:80:67:d8:44:64:da:ea:a4:68:1f:
ec:bc:49:1e:3c:49:30:22:97:2d:9e:a7:e2:fe:3f:
84:8d:81:3a:11:32:1d:7d:7c:1b:00:8a:60:bc:ab:
fa:d6:58:d1:80:fd:86:27:89:7a:b4:df:29:73:ec:
2a:56:89:58:ab:67:e5:d9:8a:cb:62:e7:0c:14:62:
d9:ea:ef:f0:18:c2:03:fc:a3:8b:57:ae:50:fa:59:
ea:d7:7a:eb:b3:fa:b1:25:ca:8d:d9:b9:d4:d6:f5:
e8:5e:e8:0f:c2:0c:02:ba:8c:02:0b:12:d2:69:52:
cc:0c:fe:49:06:0a:12:85:c7:04:9b:0c:10:d3:5d:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:85:A7:3B:FD:96:5C:F4:7F:B3:50:1E:7B:78:D3:60:0C:ED:0C:70
X509v3 Authority Key Identifier:
keyid:34:46:15:53:3D:37:E7:7E:E5:71:C9:D2:95:48:61:E8:2C:FE:CF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/0afe43f259264e928fd8660e2c2b374c1f9ee9f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/25054c0f-198a-47c6-b112-152e3460238c/7d666fc96c87b713c1f1fc6b289e51fae298a9ff.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.15.0.0-186.15.183.255
186.159.128.0-186.159.217.255
186.159.220.0-186.159.255.255
IPv6:
2803:6000::/32
Signature Algorithm: sha256WithRSAEncryption
91:01:08:0c:60:d2:1c:f0:05:4e:cd:44:d7:78:38:87:ca:4a:
9f:56:9e:bf:77:e9:d6:ba:f6:d8:a8:ff:b9:41:e5:89:e3:0b:
0b:10:2c:fb:a8:1b:34:da:1c:65:3f:96:f8:a1:0c:58:d4:ca:
f8:b7:97:c1:9e:54:1b:87:44:64:2c:a9:bd:19:8b:81:a0:61:
d6:ff:95:e7:48:c3:d0:74:56:4e:32:c6:c4:b7:bc:ac:9f:bd:
f8:1b:d6:25:d7:cd:87:40:c9:f4:ae:33:a6:0c:e7:6b:a5:70:
1f:e5:c8:9d:09:0e:28:91:75:ce:a2:9e:9a:08:5c:5d:d5:25:
25:d2:ed:c6:3a:14:bf:84:74:1d:3f:d2:88:4e:ec:3d:a5:70:
ba:0b:6b:c9:c8:78:1b:82:2f:b6:41:70:e2:bb:ac:69:d3:49:
4b:5b:9e:e7:7e:8e:97:c2:23:4d:bf:c6:0b:59:b6:4d:15:c7:
6c:ac:80:49:d4:91:ed:7e:36:87:ea:51:86:7b:d3:18:9b:68:
68:58:5c:9d:3e:ce:31:00:90:3c:bc:e9:2f:30:0d:ab:ef:77:
0c:71:0b:96:74:3a:0d:d7:e8:09:0f:12:4c:65:10:02:ec:85:
76:fb:a8:80:5e:9d:20:3e:36:3c:bb:d1:f1:49:0d:0a:58:0a:
ba:05:79:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:24 2024 by rpki-client on console-fra.rpki-client.org