Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/b482fdd02f583976a26f10ca0b7036efc9ed8229.roa
File: b482fdd02f583976a26f10ca0b7036efc9ed8229.roa (raw, json)
Hash identifier: ln8Y9g+Rld+ynuWAFPacs/EbCkkh/w0bwzsPnjqoML8=
Subject key identifier: 12:F3:7B:63:63:CD:89:5C:78:45:CF:70:2D:1A:7D:86:CA:9C:1D:80
Certificate issuer: /CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Certificate serial: 254012
Authority key identifier: 4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/b482fdd02f583976a26f10ca0b7036efc9ed8229.roa
Signing time: Tue 02 Jan 2024 15:20:55 +0000
ROA not before: Tue 02 Jan 2024 15:20:54 +0000
ROA not after: Fri 02 Jan 2026 15:20:54 +0000
asID: 52436
IP address blocks: 168.181.208.0/22 maxlen: 24
168.196.32.0/22 maxlen: 24
138.97.176.0/22 maxlen: 24
207.248.124.0/22 maxlen: 24
179.42.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2441234 (0x254012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6663fb5d62a6c45845d461b066de1127b3e069
Validity
Not Before: Jan 2 15:20:54 2024 GMT
Not After : Jan 2 15:20:54 2026 GMT
Subject: CN=b482fdd02f583976a26f10ca0b7036efc9ed8229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:8f:c6:1b:fb:fe:9b:9a:9f:1a:a8:73:fb:
74:47:72:33:8b:c4:f5:67:95:46:d2:58:11:0d:53:
5d:2c:c3:d1:bd:ff:ed:d4:05:19:77:9a:74:78:26:
be:32:c3:07:b1:b1:c0:74:3e:b4:5c:48:9c:2b:f5:
d3:48:a5:41:0b:b6:0d:e3:98:ba:75:ab:82:39:c6:
e9:34:7d:81:de:46:52:6d:0b:09:5d:29:32:b9:cd:
49:ae:1d:43:0b:78:fa:0f:7d:a7:df:ed:70:3b:0d:
1e:aa:3e:07:03:b8:d5:fc:82:cd:10:73:e6:81:5c:
45:35:83:94:63:a2:fd:6e:a2:1d:39:40:7b:db:57:
2a:6b:61:58:4e:f1:44:17:20:f7:f1:58:8a:3d:0c:
3d:5b:41:fb:f3:cc:32:85:12:e7:49:38:a6:39:78:
76:ef:39:25:6b:e1:49:93:b3:3c:12:80:37:7e:ad:
51:86:35:8d:fb:ad:60:9a:9f:03:d9:50:2d:35:76:
ad:65:15:fb:0e:42:9a:e4:e2:e9:26:fa:2e:6e:20:
f3:dc:22:bc:e7:f1:aa:c0:b1:e7:30:8d:d9:40:fb:
2d:26:6a:a7:79:ba:1c:f6:52:e6:40:bf:0a:20:9c:
ab:ab:68:9a:f6:47:3f:c6:39:17:d2:d4:56:b7:c2:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F3:7B:63:63:CD:89:5C:78:45:CF:70:2D:1A:7D:86:CA:9C:1D:80
X509v3 Authority Key Identifier:
keyid:4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/b482fdd02f583976a26f10ca0b7036efc9ed8229.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/9e6663fb5d62a6c45845d461b066de1127b3e069.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.176.0/22
168.181.208.0/22
168.196.32.0/22
179.42.168.0/22
207.248.124.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:99:81:93:cc:10:75:63:39:74:24:85:4c:7a:3e:94:a9:53:
02:51:26:f6:b0:35:43:22:cd:e3:54:ac:87:5a:62:73:02:c4:
9e:8c:fb:41:39:98:96:60:f6:e8:f4:54:8b:0f:d7:96:69:d6:
b7:53:59:c0:f5:d4:7d:ed:bc:07:bd:d7:e7:5e:ac:5c:64:4a:
de:96:4d:30:05:bb:db:61:60:c5:ce:d8:6d:c9:70:8e:85:49:
b3:aa:8c:20:03:df:39:f6:62:f3:ea:77:bb:6d:1f:8a:b9:16:
05:38:b8:98:b9:df:a7:ca:df:b9:81:21:aa:99:9f:bc:b0:8d:
08:22:88:a7:cc:ff:fc:1d:ce:93:8a:4c:7f:65:6e:98:d4:ae:
45:3d:c1:2f:cc:80:28:9e:f6:14:e8:83:6f:f4:63:a5:c0:f1:
ac:c0:2e:ef:4f:d3:41:30:84:79:94:08:0e:12:1e:0b:d8:69:
0a:a4:da:7c:55:7e:9a:b5:bd:ff:f5:c1:bb:1a:bd:70:57:f2:
c9:4f:a8:b6:36:7a:88:22:0f:00:93:f0:eb:49:bb:3b:57:2d:
48:58:db:14:44:00:54:b2:63:43:98:a3:9c:f9:61:58:0c:db:
f4:dc:09:2b:69:d5:09:f1:39:85:dd:18:2c:04:48:b3:52:85:
92:7c:23:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org