Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/ef56808975f0ce8c071b014e40f1dbad6809614c.roa
File: ef56808975f0ce8c071b014e40f1dbad6809614c.roa (raw, json)
Hash identifier: Ne3ezlHkBTfD0fsN8bClgBA5vmVDVN10FjQ8Gbmok1E=
Subject key identifier: 64:E4:E7:BF:34:10:E1:02:37:B1:2F:6B:DA:BA:BB:3B:8E:E2:F9:A8
Certificate issuer: /CN=429f210b98677033fc9a53a0399f1ebe43c09997
Certificate serial: 0CAA3F
Authority key identifier: 46:E3:01:7B:00:E8:72:F1:93:B3:E8:09:E9:FF:C3:4E:C4:0F:31:B3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429f210b98677033fc9a53a0399f1ebe43c09997.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/ef56808975f0ce8c071b014e40f1dbad6809614c.roa
Signing time: Wed 24 Mar 2021 14:45:15 +0000
ROA not before: Wed 24 Mar 2021 14:45:15 +0000
ROA not after: Tue 24 Mar 2026 14:45:15 +0000
asID: 11556
IP address blocks: 186.72.0.0/14 maxlen: 24
190.32.0.0/14 maxlen: 24
201.224.0.0/14 maxlen: 24
2800:350::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 830015 (0xcaa3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429f210b98677033fc9a53a0399f1ebe43c09997
Validity
Not Before: Mar 24 14:45:15 2021 GMT
Not After : Mar 24 14:45:15 2026 GMT
Subject: CN=ef56808975f0ce8c071b014e40f1dbad6809614c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9c:5e:a3:e0:23:65:0d:b4:a9:62:9c:a6:81:
c0:02:15:1b:88:5c:35:9d:cc:28:bf:7b:c8:f4:fe:
c3:9d:56:c8:fe:a2:1f:d1:d6:c5:67:0b:e5:2c:33:
5c:b6:b9:76:15:73:74:40:b0:3d:20:6b:f5:21:d1:
9c:43:9d:c5:bb:c4:05:93:dd:34:11:ab:22:ad:d3:
28:06:d7:97:17:98:39:2b:a6:84:cb:7a:bc:98:d3:
ad:08:7b:eb:11:40:d5:a1:14:32:ee:bb:3f:90:e8:
8b:58:c5:fc:52:22:cd:2f:d8:4b:45:a2:45:97:3a:
66:42:a3:5e:a6:95:82:19:d5:6b:b2:62:5f:db:e3:
d1:c7:4f:40:c8:f5:a8:13:d6:40:7d:a0:22:b1:11:
0c:58:31:25:38:bd:90:3c:ac:b8:8e:04:61:15:f2:
1f:2a:7a:84:42:e1:10:d7:d9:04:00:8d:46:70:69:
a6:53:ac:8a:ec:61:07:3e:4c:c8:4b:20:8e:23:88:
15:48:32:c0:35:25:83:c8:b5:e9:46:57:5e:8a:13:
9a:4d:23:54:16:ce:80:66:e8:82:f8:53:79:ed:1b:
8d:40:a4:44:2e:60:c0:14:ce:e1:e6:80:13:fb:8a:
c9:cf:02:b7:24:2b:21:3d:a4:25:aa:98:8f:d0:32:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:E7:BF:34:10:E1:02:37:B1:2F:6B:DA:BA:BB:3B:8E:E2:F9:A8
X509v3 Authority Key Identifier:
keyid:46:E3:01:7B:00:E8:72:F1:93:B3:E8:09:E9:FF:C3:4E:C4:0F:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429f210b98677033fc9a53a0399f1ebe43c09997.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/ef56808975f0ce8c071b014e40f1dbad6809614c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/27695a54-5c8d-418a-9632-37d186379da2/429f210b98677033fc9a53a0399f1ebe43c09997.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.72.0.0/14
190.32.0.0/14
201.224.0.0/14
IPv6:
2800:350::/29
Signature Algorithm: sha256WithRSAEncryption
19:92:32:f1:a3:c7:18:4f:49:da:28:72:79:b3:fa:d4:cf:8b:
c0:2f:dd:9f:e9:20:0a:a8:f0:c4:7c:cc:c9:52:ef:e7:5c:97:
89:66:fb:11:14:46:fd:86:4c:55:ed:92:64:d2:83:45:5d:28:
ed:7c:60:75:b4:bb:7b:b1:75:07:ba:35:2c:da:0d:9c:76:11:
c0:2f:aa:f8:a6:5e:2d:fe:26:9a:97:43:cc:73:c9:45:78:fe:
ac:03:b7:e1:90:12:61:28:f4:fd:2c:df:d5:3b:ad:7f:d7:01:
1d:52:3f:86:fc:6d:9c:94:2a:66:18:28:06:3a:2c:72:09:a3:
67:3c:e1:be:de:9e:00:5c:36:28:94:6e:47:0d:6c:ae:01:33:
6a:ba:b6:79:76:ce:a4:a8:0e:47:42:c1:38:fe:a0:a7:8c:e8:
e1:ea:23:fe:58:63:1e:61:66:08:ac:d8:66:01:11:5b:08:e8:
96:3c:88:66:bb:83:e9:6c:2c:93:28:5e:f5:6b:b7:ef:6d:6f:
98:c2:84:d5:a7:64:27:9e:59:4c:3d:4b:16:87:70:97:17:64:
48:67:b4:de:24:cc:d9:20:09:ac:2c:82:06:d3:31:e6:3d:6e:
10:70:85:59:f2:cf:56:82:a8:f3:b0:51:23:32:a6:3c:78:0a:
89:11:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-ams.rpki-client.org