Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/285572252cf219f8d9648f4975dd38a757952862.roa
File: 285572252cf219f8d9648f4975dd38a757952862.roa (raw, json)
Hash identifier: 34oR7jomCMzk4CwRhKB9fX0cma8a9YCVubzjQ3rxJSM=
Subject key identifier: 35:1E:11:6C:9E:9F:63:AC:52:77:13:F2:A0:72:79:A5:D9:84:64:B3
Certificate issuer: /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial: 271C5A
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/285572252cf219f8d9648f4975dd38a757952862.roa
Signing time: Thu 01 Feb 2024 15:49:34 +0000
ROA not before: Thu 01 Feb 2024 15:49:33 +0000
ROA not after: Sun 01 Feb 2026 15:49:33 +0000
asID: 27651
IP address blocks: 190.151.0.0/17 maxlen: 24
200.111.0.0/16 maxlen: 24
200.7.16.0/20 maxlen: 21
200.11.64.0/19 maxlen: 24
200.11.96.0/21 maxlen: 24
200.72.0.0/16 maxlen: 24
186.67.0.0/16 maxlen: 24
152.231.64.0/18 maxlen: 24
2800:300::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2563162 (0x271c5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
Validity
Not Before: Feb 1 15:49:33 2024 GMT
Not After : Feb 1 15:49:33 2026 GMT
Subject: CN=285572252cf219f8d9648f4975dd38a757952862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:b6:be:2d:e3:7e:8c:32:56:70:f6:e5:bb:
ee:c6:53:ad:fc:23:6a:c8:28:9e:64:ae:4d:2d:af:
53:aa:a4:33:04:22:2b:70:26:05:c2:18:4d:58:35:
8f:4c:b4:6b:af:64:77:d1:f3:0a:cf:fa:7e:fd:1d:
d5:a0:b9:75:b2:d1:14:97:10:c6:7f:b2:e6:e0:98:
44:db:a3:c9:3e:75:38:2c:26:cb:bb:00:74:b4:90:
b1:63:db:5c:b3:00:6c:44:24:7e:ca:34:e4:22:63:
65:f2:4f:3d:75:ef:5e:61:e1:88:56:4a:b9:4a:00:
32:da:c4:e0:03:7a:a1:50:b3:d7:7b:8e:48:b9:0c:
ff:94:df:3c:e2:bc:ed:f2:3a:95:08:64:22:80:4b:
1c:df:53:3d:11:3b:a0:67:ec:14:56:41:61:22:fd:
35:83:c6:b9:56:87:41:8b:47:b3:74:ed:43:f7:b5:
44:ca:c3:58:52:9d:10:58:54:2f:47:de:2f:da:76:
ae:86:4c:3a:d9:be:d2:d4:f3:c7:b8:ab:8d:d3:49:
be:1d:57:36:bd:e0:67:af:de:1e:ac:c1:0f:cc:2a:
fb:27:9c:38:ba:ea:f9:ff:73:98:0e:e5:0f:47:f8:
5f:24:3f:ba:9a:3a:f8:89:11:ad:69:6b:81:cb:18:
46:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1E:11:6C:9E:9F:63:AC:52:77:13:F2:A0:72:79:A5:D9:84:64:B3
X509v3 Authority Key Identifier:
keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/285572252cf219f8d9648f4975dd38a757952862.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.64.0/18
186.67.0.0/16
190.151.0.0/17
200.7.16.0/20
200.11.64.0-200.11.103.255
200.72.0.0/16
200.111.0.0/16
IPv6:
2800:300::/32
Signature Algorithm: sha256WithRSAEncryption
3b:13:31:60:ff:3a:2f:fb:94:b5:1e:3d:af:07:7d:aa:85:d2:
d6:8f:f6:ef:61:73:c9:1e:00:c1:71:db:38:b7:e5:27:5b:7a:
0b:37:e1:0f:23:2c:5c:7f:82:a8:21:b6:54:dc:7e:6f:4a:8b:
f0:08:2f:1d:47:17:40:3c:d3:15:1e:8a:57:f6:d7:9e:71:a1:
c0:8e:b3:a9:20:07:85:92:9d:6f:40:3f:fc:5a:8d:75:3b:90:
52:9d:75:54:f1:19:52:13:f3:a1:1e:f2:46:dc:cd:44:4f:76:
87:5e:b5:9b:6f:89:cf:56:5e:84:31:2f:f4:53:d3:e2:eb:15:
1c:36:38:1a:38:b2:2f:88:70:0e:0f:c0:d4:f0:94:4d:b8:6a:
ca:33:53:19:b5:64:07:22:50:7a:e6:d1:94:f2:3e:fd:3d:80:
39:87:09:2f:2a:c4:ff:f0:27:e6:1d:aa:06:79:36:24:68:0b:
e7:fc:43:f0:b0:dd:5a:87:ef:0d:71:e2:79:c0:2d:2c:d6:28:
2a:89:76:b3:20:26:3f:b4:21:69:ed:d0:d9:aa:19:11:e4:a2:
15:a6:98:b4:77:cd:1e:3e:55:a1:c0:13:a1:83:c9:24:df:66:
e1:73:c9:33:13:19:c9:46:58:02:c8:23:7b:1c:0f:64:2e:55:
5b:5f:a2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:20 2024 by rpki-client on console-ams.rpki-client.org