Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/e4647d6daf563a92b31bfa6f1f3a329905079973.roa
File: e4647d6daf563a92b31bfa6f1f3a329905079973.roa (raw, json)
Hash identifier: hmjt6E4lSI+D/iBs3YplLbw+Kfpdi2NyjLyUKZPN59c=
Subject key identifier: 7F:49:3E:85:E7:D7:4C:F4:48:EA:3A:FE:D5:FB:C6:33:87:73:E0:7E
Certificate issuer: /CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
Certificate serial: 238F39
Authority key identifier: 20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/e4647d6daf563a92b31bfa6f1f3a329905079973.roa
Signing time: Sat 02 Sep 2023 16:40:22 +0000
ROA not before: Fri 01 Sep 2023 16:40:22 +0000
ROA not after: Tue 02 Sep 2025 16:40:22 +0000
asID: 263244
IP address blocks: 186.0.180.0/22 maxlen: 24
170.247.140.0/22 maxlen: 24
190.106.32.0/21 maxlen: 24
131.72.132.0/22 maxlen: 24
2800:cb0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2330425 (0x238f39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
Validity
Not Before: Sep 1 16:40:22 2023 GMT
Not After : Sep 2 16:40:22 2025 GMT
Subject: CN=e4647d6daf563a92b31bfa6f1f3a329905079973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:0d:f3:87:fa:5e:1a:32:ad:81:cc:96:22:
0c:68:f7:9f:56:40:7d:7b:c2:50:08:9f:a9:8b:45:
7c:d2:cc:9d:03:3c:7a:64:0b:2e:78:1d:08:76:02:
54:ea:cf:b1:e4:03:d1:0a:49:07:ce:ca:55:5e:e1:
f1:d9:7e:4a:ae:38:15:2f:21:9c:4b:37:bc:e3:aa:
d6:ce:ba:13:f0:f0:59:4e:e7:93:2b:c9:11:2b:d0:
cd:17:d1:21:f2:67:ad:74:bd:31:26:68:65:36:ba:
20:3f:08:81:6d:b0:66:b5:7e:2b:9b:9b:bb:c7:9d:
67:ae:6a:39:35:38:aa:c6:3b:30:14:00:2a:34:52:
f9:d8:bd:62:25:ef:87:bf:a1:2a:ff:ff:85:c4:4c:
34:18:8b:b1:a3:d4:2e:4c:89:fc:c0:53:b1:0a:9c:
5c:40:10:37:6b:dc:1f:4d:b3:13:ea:8f:65:e6:d3:
07:cb:f4:e4:74:75:d7:e1:a5:30:ff:55:af:4d:a2:
5e:a0:8f:e2:f3:a8:2f:f3:2a:47:17:d5:68:c6:69:
6f:1f:ff:7d:56:f5:f8:2a:96:4d:13:1d:ef:76:8a:
b6:6b:4b:1a:6c:09:24:99:e3:62:95:f1:17:0f:5c:
1e:4e:4c:b3:49:0d:9d:04:30:e7:c9:81:f0:a0:a7:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:49:3E:85:E7:D7:4C:F4:48:EA:3A:FE:D5:FB:C6:33:87:73:E0:7E
X509v3 Authority Key Identifier:
keyid:20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/e4647d6daf563a92b31bfa6f1f3a329905079973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/5cc9dbf17ab87f53456274667413bf07a4f85fc9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.132.0/22
170.247.140.0/22
186.0.180.0/22
190.106.32.0/21
IPv6:
2800:cb0::/32
Signature Algorithm: sha256WithRSAEncryption
81:6b:e5:9b:3d:47:ee:db:55:9a:9a:27:d9:2c:55:af:09:6c:
11:5f:bf:87:b2:4d:01:9d:5d:7b:a1:d0:87:b7:fd:d9:64:ce:
f0:18:b5:2e:2c:ea:6c:3c:5e:80:d1:d9:c0:c0:78:e5:86:de:
07:5b:02:20:ec:d1:fe:3c:31:c8:a2:ee:fa:5b:9c:1a:59:b9:
16:af:36:41:8d:2d:80:e6:ef:10:d6:10:29:01:a1:cb:9f:8b:
2f:79:a7:ce:db:40:7f:d3:29:ec:06:2f:71:d8:8e:11:ef:ca:
8f:83:d9:38:3e:c1:49:b0:4f:5f:c0:c7:d1:6b:71:5e:7f:40:
f3:ea:58:12:8f:79:52:51:49:3c:a5:be:3e:e7:2d:97:42:3f:
80:b0:b8:84:c3:4f:ec:c3:a1:db:7c:c5:19:19:ed:bb:e6:30:
0a:46:7c:b0:11:50:9c:c7:e4:97:ed:ad:6e:67:90:f3:49:88:
aa:a6:ce:18:eb:14:56:48:47:7c:5e:ca:2c:8d:84:66:25:dd:
e6:ba:dc:50:44:f5:30:83:b2:85:0d:72:f0:dd:0b:74:f2:f9:
d2:f6:f2:58:b2:01:35:2f:52:a9:8e:f4:02:e2:b5:22:f0:01:
a0:45:df:69:c1:8d:85:e2:96:cb:a2:32:2d:36:d7:10:10:21:
c2:cc:27:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org