Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3f8070cc-6648-4467-a7a0-3cf27e412c37/eb34743e247a7c92e7c0def8dec81ee257d37577.roa
File: eb34743e247a7c92e7c0def8dec81ee257d37577.roa (raw, json)
Hash identifier: Jlu80f5bAzZUkP4B1fe8jvIE+coLunWM4hL9bkb3T7w=
Subject key identifier: 74:1F:71:21:23:93:10:BC:9A:C5:17:1D:4C:09:1D:47:69:DD:33:5E
Certificate issuer: /CN=6888ea401829b521f341a745ae20cf56ff8b19b3
Certificate serial: 0CC400
Authority key identifier: 0E:48:E0:E6:53:2E:F9:75:76:BF:46:D1:19:68:EC:36:3F:0E:0B:CC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6888ea401829b521f341a745ae20cf56ff8b19b3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3f8070cc-6648-4467-a7a0-3cf27e412c37/eb34743e247a7c92e7c0def8dec81ee257d37577.roa
Signing time: Wed 24 Mar 2021 14:33:50 +0000
ROA not before: Wed 24 Mar 2021 14:33:50 +0000
ROA not after: Tue 24 Mar 2026 14:33:50 +0000
asID: 20015
IP address blocks: 200.71.192.0/24 maxlen: 24
200.71.193.0/24 maxlen: 24
200.71.194.0/24 maxlen: 24
200.71.195.0/24 maxlen: 24
200.71.196.0/24 maxlen: 24
200.71.197.0/24 maxlen: 24
200.71.198.0/24 maxlen: 24
200.71.199.0/24 maxlen: 24
200.71.200.0/24 maxlen: 24
200.71.201.0/24 maxlen: 24
200.71.202.0/24 maxlen: 24
200.71.203.0/24 maxlen: 24
200.71.204.0/24 maxlen: 24
200.71.205.0/24 maxlen: 24
200.71.206.0/24 maxlen: 24
200.71.207.0/24 maxlen: 24
200.71.208.0/24 maxlen: 24
200.71.209.0/24 maxlen: 24
200.71.210.0/24 maxlen: 24
200.71.211.0/24 maxlen: 24
200.71.212.0/24 maxlen: 24
200.71.213.0/24 maxlen: 24
200.71.214.0/24 maxlen: 24
200.71.215.0/24 maxlen: 24
200.71.216.0/24 maxlen: 24
200.71.217.0/24 maxlen: 24
200.71.218.0/24 maxlen: 24
200.71.219.0/24 maxlen: 24
200.71.220.0/24 maxlen: 24
200.71.221.0/24 maxlen: 24
200.71.222.0/24 maxlen: 24
200.71.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 836608 (0xcc400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6888ea401829b521f341a745ae20cf56ff8b19b3
Validity
Not Before: Mar 24 14:33:50 2021 GMT
Not After : Mar 24 14:33:50 2026 GMT
Subject: CN=eb34743e247a7c92e7c0def8dec81ee257d37577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:62:06:64:66:44:d0:e2:a3:55:8e:5b:1e:89:
cc:dc:44:cc:20:a8:1b:1f:2a:a8:4b:69:f4:a2:16:
1e:53:26:2e:b3:c8:59:e3:9f:fa:cd:3d:19:a2:2a:
bc:c3:de:b1:33:27:65:11:27:57:99:2e:c1:ef:6e:
4c:1a:f6:5a:d6:8d:8c:9f:45:0e:9b:08:8b:81:23:
74:b4:20:6f:50:1a:e9:e8:07:11:0a:11:ae:f3:25:
79:f8:7a:34:8a:de:ea:15:c0:c4:7c:47:d7:c7:8d:
b2:7d:95:f0:34:37:74:af:2d:65:86:6a:c8:31:e7:
46:d7:a2:3b:43:4a:59:94:1d:ec:df:d1:52:8b:47:
ad:65:0d:79:60:c4:29:61:21:78:ca:df:59:35:9c:
c6:9a:b4:3f:e0:a3:dc:f6:c8:34:2e:a1:e6:34:50:
4d:62:51:fb:7a:cd:2b:fb:c4:80:17:21:fa:ec:7e:
dd:b6:99:99:a4:7b:11:6e:63:fe:3f:05:2d:2a:7c:
95:7f:58:22:11:c8:45:a0:71:74:48:69:28:23:d7:
df:b6:76:be:95:71:b1:d3:14:ac:c3:13:84:26:8d:
bc:e8:45:04:64:7d:bd:57:a1:1e:bd:89:d7:83:8b:
bf:70:04:f0:34:33:3e:8d:72:34:29:27:76:e8:71:
62:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1F:71:21:23:93:10:BC:9A:C5:17:1D:4C:09:1D:47:69:DD:33:5E
X509v3 Authority Key Identifier:
keyid:0E:48:E0:E6:53:2E:F9:75:76:BF:46:D1:19:68:EC:36:3F:0E:0B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6888ea401829b521f341a745ae20cf56ff8b19b3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3f8070cc-6648-4467-a7a0-3cf27e412c37/eb34743e247a7c92e7c0def8dec81ee257d37577.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3f8070cc-6648-4467-a7a0-3cf27e412c37/6888ea401829b521f341a745ae20cf56ff8b19b3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.71.192.0/19
Signature Algorithm: sha256WithRSAEncryption
75:cf:c6:f7:55:c7:d1:09:f9:ce:1e:97:ae:83:65:7a:23:c4:
30:21:4f:c4:85:5b:10:b0:4d:6c:dd:d0:39:45:bb:30:cf:df:
8c:64:08:f7:50:0f:3d:4e:6b:bf:21:c3:a6:80:7d:d1:87:ba:
27:be:2e:ed:3d:dd:20:0a:de:b4:c7:f1:43:ca:80:3c:5b:2e:
14:61:12:e9:13:20:8b:29:9e:dc:3f:b7:8e:a4:d7:85:61:fc:
2a:68:c9:81:7f:8e:6d:36:1d:4e:e2:9a:bc:c5:48:eb:75:58:
b3:08:d8:c9:75:a2:3c:c7:ec:b6:49:b9:09:0a:cd:43:2a:fa:
66:9c:32:26:5a:e6:61:5b:c2:0f:52:c1:04:ed:bc:46:7a:3f:
21:10:9e:8a:fd:43:92:bf:b8:de:5c:63:e6:c3:9e:ce:e8:47:
58:d9:0f:f5:f4:c4:a4:2d:63:70:1c:03:f1:04:46:73:a0:53:
84:f3:68:7c:5e:e2:04:33:2d:9b:62:b7:46:8d:93:a3:75:49:
87:58:e6:4e:76:8f:a0:6b:3a:fc:64:ce:d5:b1:22:fe:a0:1c:
a9:39:b9:fd:96:1f:34:e7:11:aa:e9:c4:05:7c:cd:5d:00:75:
1e:94:69:26:e4:d2:88:72:85:29:61:6e:d1:0d:fa:d2:74:22:
86:c7:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:20 2024 by rpki-client on console-ams.rpki-client.org