Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/650a19623a813abae6b99e15bd02f9c4ae9dccb0.roa
File: 650a19623a813abae6b99e15bd02f9c4ae9dccb0.roa (raw, json)
Hash identifier: eV+6Ces2TT5N/vli8eO8zOEOaOXlpcpsWXCeVd+57FU=
Subject key identifier: 25:9A:71:E2:85:6E:FF:68:DB:62:1F:8F:69:54:DD:D2:55:CB:72:D9
Certificate issuer: /CN=b5cb84b2403a4c6769f3a9c96971e8facdd5b24f
Certificate serial: 25CBD5
Authority key identifier: 29:DA:7A:6C:6B:65:DC:88:9B:C6:0A:2C:19:E4:30:A9:4A:D8:BD:9C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5cb84b2403a4c6769f3a9c96971e8facdd5b24f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/650a19623a813abae6b99e15bd02f9c4ae9dccb0.roa
Signing time: Mon 19 Feb 2024 14:44:57 +0000
ROA not before: Mon 19 Feb 2024 14:44:57 +0000
ROA not after: Thu 19 Feb 2026 14:44:57 +0000
asID: 263687
IP address blocks: 131.161.236.0/22 maxlen: 22
131.161.236.0/23 maxlen: 23
131.161.236.0/24 maxlen: 24
131.161.237.0/24 maxlen: 24
131.161.238.0/23 maxlen: 23
131.161.238.0/24 maxlen: 24
131.161.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2477013 (0x25cbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cb84b2403a4c6769f3a9c96971e8facdd5b24f
Validity
Not Before: Feb 19 14:44:57 2024 GMT
Not After : Feb 19 14:44:57 2026 GMT
Subject: CN=650a19623a813abae6b99e15bd02f9c4ae9dccb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:2f:50:2e:90:7d:dc:6a:eb:2c:87:ee:c5:
1e:fc:b1:67:0d:ca:99:1a:1d:a3:cf:dd:cb:8a:cc:
8a:b0:9b:39:eb:48:d6:6d:44:e6:0e:1b:e9:be:2c:
ff:9b:d2:59:29:17:a2:f6:77:01:89:eb:99:5d:19:
14:6e:03:c3:dd:a7:cb:8d:84:6a:e1:27:ca:08:3d:
b7:75:f7:19:3d:d9:e9:b2:f0:8b:08:6c:6e:b5:21:
1f:8e:9f:5a:5d:5a:de:78:41:11:24:28:b6:f9:31:
8c:e4:34:ac:65:3c:ac:60:6a:b8:24:24:6e:5a:1f:
8b:51:88:0c:04:22:71:68:a3:14:fc:ac:1c:3c:d1:
ef:6a:6c:bd:4e:fb:a6:05:15:cd:da:78:00:66:e3:
1f:76:89:3b:52:4d:21:35:da:02:2a:d6:4c:84:d1:
7c:5b:61:0d:4e:ca:36:f9:d1:db:5b:f5:11:8e:db:
1c:24:18:82:d0:0d:44:04:45:59:42:45:5a:5a:a3:
c3:19:82:53:c9:03:58:a0:7b:e8:e4:1e:df:6b:8c:
9e:80:8a:ed:15:be:fb:f5:8c:9b:80:3b:99:82:3c:
51:ee:bd:04:a6:16:ab:a4:bc:97:60:e7:90:c2:7b:
48:c2:8b:02:12:c9:40:2f:5b:44:75:5c:63:62:84:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9A:71:E2:85:6E:FF:68:DB:62:1F:8F:69:54:DD:D2:55:CB:72:D9
X509v3 Authority Key Identifier:
keyid:29:DA:7A:6C:6B:65:DC:88:9B:C6:0A:2C:19:E4:30:A9:4A:D8:BD:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5cb84b2403a4c6769f3a9c96971e8facdd5b24f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/650a19623a813abae6b99e15bd02f9c4ae9dccb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3797cfdc-4e73-42c3-98d3-54f3d9dfc598/b5cb84b2403a4c6769f3a9c96971e8facdd5b24f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.236.0/22
Signature Algorithm: sha256WithRSAEncryption
81:52:39:41:5f:2d:dc:ea:e5:4a:24:71:ed:2b:c4:7f:b8:14:
dc:27:bb:c2:49:0a:c8:c2:d9:dd:47:93:9b:41:76:4b:d4:cc:
a4:99:c0:50:7b:8a:d5:01:e6:1d:d9:87:81:60:57:bc:77:c2:
9d:0e:2b:5c:ff:84:2c:ae:be:27:4d:80:a3:96:37:89:71:1c:
1e:a5:e2:85:4b:a9:16:7c:23:4a:f9:f6:60:10:62:4f:70:1b:
38:0b:8d:05:49:ae:91:97:85:49:48:86:0d:3e:55:46:1c:24:
d8:56:e1:8a:ac:16:2d:1a:26:61:1d:c9:b5:f3:3b:d2:e8:f6:
74:53:ce:ae:b5:cc:0b:70:cf:f5:dd:0e:52:48:e0:3d:c3:8b:
1a:68:68:6b:95:d2:85:ca:8d:50:b6:69:1a:23:c9:44:69:3b:
b1:c9:b7:4d:d9:25:28:da:f3:8e:34:9c:2c:49:12:f4:a1:b4:
11:a5:32:1c:45:69:4c:32:28:de:8f:ca:78:60:27:a0:44:e7:
6c:e6:c4:e0:96:aa:d3:b7:18:b6:d8:a2:50:c3:8c:51:69:9b:
33:72:89:32:b4:c3:2d:c5:0d:6c:e6:8b:84:2f:c9:d7:c1:f0:
49:1f:f8:fc:54:d0:67:45:88:a7:04:8a:6c:d8:5d:5e:b9:1c:
61:d3:ca:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:26 2024 by rpki-client on console-fra.rpki-client.org