Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/a8f270a4f617b2404c7ae0217e763d850570c018.roa
File: a8f270a4f617b2404c7ae0217e763d850570c018.roa (raw, json)
Hash identifier: pvA+CXnltmaZWHj0mj7UVt9m37HbPMIIkqSlA9xB6So=
Subject key identifier: 05:DF:59:21:61:B3:AD:19:C9:A1:5D:48:1E:B9:53:90:5B:3E:F1:BE
Certificate issuer: /CN=f2cbbb792ff42fa718619507a50663798055643b
Certificate serial: 25D837
Authority key identifier: AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/a8f270a4f617b2404c7ae0217e763d850570c018.roa
Signing time: Thu 07 Dec 2023 15:10:58 +0000
ROA not before: Thu 07 Dec 2023 15:10:57 +0000
ROA not after: Sun 07 Dec 2025 15:10:57 +0000
asID: 52308
IP address blocks: 181.114.192.0/19 maxlen: 24
138.118.36.0/22 maxlen: 24
190.108.32.0/19 maxlen: 24
190.105.176.0/20 maxlen: 24
170.84.168.0/22 maxlen: 24
181.174.128.0/19 maxlen: 24
2803:c400::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2480183 (0x25d837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cbbb792ff42fa718619507a50663798055643b
Validity
Not Before: Dec 7 15:10:57 2023 GMT
Not After : Dec 7 15:10:57 2025 GMT
Subject: CN=a8f270a4f617b2404c7ae0217e763d850570c018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:75:f6:6d:6e:d7:76:93:94:3b:b8:08:a9:
59:92:bd:31:21:11:fc:66:28:4e:7d:75:21:13:4a:
00:f4:88:29:d7:7e:0f:00:8d:01:5c:de:ab:cd:98:
9e:84:88:7a:ff:a4:0d:e7:f6:c0:ba:ca:84:52:1c:
75:21:74:27:f7:18:85:a9:96:dc:ab:de:3a:50:c1:
d6:66:6e:d8:09:33:0f:7c:02:ba:d9:36:9f:59:a1:
72:a7:dc:04:74:58:cf:fd:ae:59:a4:46:6f:c3:21:
8b:93:d6:27:b8:a0:6f:56:95:fc:06:6b:54:52:c3:
85:c0:62:c5:78:a2:52:9a:86:c1:1c:cc:ad:f4:69:
4f:0f:b0:02:dd:a0:17:3d:f2:ba:87:e0:e0:23:6c:
1e:9b:56:7a:48:5c:a3:b9:74:f8:b1:ca:94:5f:fd:
d9:82:8c:c1:5e:85:de:f7:e8:ea:7f:3a:9d:ab:2c:
4a:72:25:7e:6e:50:cc:b6:35:3f:49:34:08:b1:41:
83:3b:4e:b3:38:71:6b:2e:67:22:c7:aa:e9:db:e4:
c8:10:b7:fe:41:eb:69:59:f3:57:a1:f9:b4:ab:4f:
ab:a0:0b:67:e9:55:4a:df:90:ea:de:a6:cb:36:c9:
51:34:18:1f:f1:34:03:ff:5c:82:7c:0c:21:85:0a:
f3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DF:59:21:61:B3:AD:19:C9:A1:5D:48:1E:B9:53:90:5B:3E:F1:BE
X509v3 Authority Key Identifier:
keyid:AB:74:D3:0E:36:78:C5:A6:07:68:46:AE:AB:D0:1A:A3:0D:AB:81:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cbbb792ff42fa718619507a50663798055643b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/a8f270a4f617b2404c7ae0217e763d850570c018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/2682f7ca-66e7-47e4-abb9-511fc1c134c8/f2cbbb792ff42fa718619507a50663798055643b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.36.0/22
170.84.168.0/22
181.114.192.0/19
181.174.128.0/19
190.105.176.0/20
190.108.32.0/19
IPv6:
2803:c400::/32
Signature Algorithm: sha256WithRSAEncryption
63:35:5b:1b:f8:ee:38:65:48:a6:5c:21:62:bb:1b:19:0c:84:
94:7b:42:ea:6a:6c:62:28:4e:59:22:ad:df:41:fd:4a:90:1f:
12:15:ae:72:85:19:f1:32:ac:f8:0d:ff:0b:36:3b:b3:ef:1b:
8e:8e:56:90:a5:2b:b6:68:3c:f6:31:7b:c1:b5:48:a6:0d:9d:
ab:29:ab:a3:73:d4:f9:d3:1a:9a:26:78:61:bd:aa:c6:cb:37:
86:fb:25:22:23:f7:f3:00:50:5a:33:f9:90:84:c2:87:b9:37:
71:65:29:27:6d:05:26:d2:43:09:c7:58:12:c6:d7:f1:1a:17:
80:dc:34:c7:80:7b:f9:87:b6:aa:09:ab:ba:36:c6:eb:87:81:
a4:8c:20:38:93:ce:1a:68:8a:cd:92:33:df:6f:6e:19:c9:ce:
f5:25:6f:dd:af:46:b1:e9:4a:f2:56:81:b3:6f:7d:ae:8c:1b:
c4:df:bb:ad:f2:c9:31:61:88:19:06:0b:4b:bd:50:df:37:8c:
b4:5a:78:b7:ca:61:94:80:a7:65:1a:8a:a2:b7:18:9e:c9:09:
05:4c:8b:00:f8:a2:50:34:06:f8:d7:ba:2d:e7:7e:6b:1b:05:
4d:88:cf:53:94:4f:5e:97:bd:69:4c:e4:5b:95:6b:48:28:e4:
26:13:7e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:03 2024 by rpki-client on console-fra.rpki-client.org