Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/ecfd91e107c739ed0b01ee21951b13c2e5857d25.roa
File: ecfd91e107c739ed0b01ee21951b13c2e5857d25.roa (raw, json)
Hash identifier: bzaJvirnCsmpRoD1EfJWmvjqU8MaxtV3q30e/hnCWs8=
Subject key identifier: F9:53:A2:F4:86:36:B9:0E:90:9C:DC:70:FE:C2:9D:74:E4:6B:93:C7
Certificate issuer: /CN=6991426f0c0c7ac92da1d5129c9ec711a2a38a3a
Certificate serial: 0DDFAD
Authority key identifier: 55:7C:2D:2E:8D:B1:AA:A7:A7:7D:B1:29:5D:09:4A:92:0C:0D:CD:0D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/ecfd91e107c739ed0b01ee21951b13c2e5857d25.roa
Signing time: Wed 12 May 2021 20:29:00 +0000
ROA not before: Wed 12 May 2021 03:00:00 +0000
ROA not after: Fri 12 May 2023 03:00:00 +0000
asID: 52242
IP address blocks: 190.181.128.0/23 maxlen: 24
190.181.135.0/24 maxlen: 24
190.181.141.0/24 maxlen: 24
190.181.153.0/24 maxlen: 24
190.181.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 909229 (0xddfad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991426f0c0c7ac92da1d5129c9ec711a2a38a3a
Validity
Not Before: May 12 03:00:00 2021 GMT
Not After : May 12 03:00:00 2023 GMT
Subject: CN=ecfd91e107c739ed0b01ee21951b13c2e5857d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:57:f6:2c:91:27:bf:8f:5a:18:77:32:0d:70:
3d:03:e8:4c:58:62:5d:d1:f8:4d:ec:63:06:7e:a5:
86:b8:73:a0:1b:e2:4e:97:80:7d:ee:f6:8b:71:a9:
12:80:d6:91:28:7a:2f:c0:cd:92:0e:d4:fc:7f:38:
e3:3e:69:ff:1a:e2:d2:09:89:3d:e6:ae:ae:3e:d8:
58:8c:48:a6:6f:f7:9a:fe:63:39:1a:61:d4:a9:c5:
0f:b3:7a:5d:fe:26:af:1b:cb:6b:af:35:f4:fc:16:
f8:50:73:11:1a:44:04:33:7d:d6:15:34:be:6e:4a:
30:fe:cc:6c:0b:93:02:01:3e:32:d8:27:80:5d:1c:
0e:7f:f8:94:3a:71:2c:cd:76:47:00:82:57:82:2a:
c9:ef:a5:c5:d4:15:b6:1b:e9:d7:49:16:46:05:e1:
0a:8a:df:d7:ff:71:05:e3:4e:3e:1b:29:a9:de:53:
3a:a2:0a:a1:d9:c0:cc:81:70:f7:d5:94:5c:18:8d:
66:c4:32:20:56:bb:ff:99:86:82:5f:57:1d:48:16:
76:6f:cd:e2:67:b2:99:43:b6:e2:e5:bc:3e:b9:d7:
73:d1:a3:c0:ce:db:7f:ac:50:00:00:3a:a7:93:81:
26:5f:28:51:67:bf:1d:41:69:d4:a0:f8:db:c7:fa:
13:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:53:A2:F4:86:36:B9:0E:90:9C:DC:70:FE:C2:9D:74:E4:6B:93:C7
X509v3 Authority Key Identifier:
keyid:55:7C:2D:2E:8D:B1:AA:A7:A7:7D:B1:29:5D:09:4A:92:0C:0D:CD:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/ecfd91e107c739ed0b01ee21951b13c2e5857d25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4aa08e21-fb2d-48b7-82d9-f4187c4ea7a0/6991426f0c0c7ac92da1d5129c9ec711a2a38a3a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.181.128.0/23
190.181.135.0/24
190.181.141.0/24
190.181.153.0/24
190.181.162.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b0:78:ba:59:03:95:31:09:81:2b:aa:f2:71:87:3d:9a:a8:
12:2d:d4:f6:34:c5:7c:65:ce:6d:25:45:bd:c8:75:e7:b1:cf:
18:ae:25:ef:35:5f:cd:02:7f:43:be:a7:70:fa:a8:42:dd:4f:
b1:65:d2:29:7b:c2:a7:a0:0b:ce:a5:73:73:31:8d:cb:52:50:
e1:59:e9:02:da:d1:21:dd:cf:a5:bc:76:ef:21:48:81:ed:46:
d8:a3:91:c3:5d:d9:45:da:62:32:f8:04:d7:0a:b9:71:49:9d:
dc:a9:32:fc:da:8e:61:b3:88:75:a9:63:20:b4:f8:19:b5:aa:
df:47:fb:9c:5e:46:9b:4b:41:e9:c0:40:24:18:70:49:64:09:
77:97:45:dc:c6:29:26:67:9f:ee:d4:67:37:e9:41:7f:13:49:
bd:b3:6c:2c:8f:56:80:a1:91:4e:09:60:ec:e7:9f:65:e2:cf:
64:9d:c3:2e:6a:75:e8:8a:9f:9a:8d:9e:d2:e1:41:7d:7d:42:
2c:84:bb:e4:d4:3d:f3:86:aa:b0:39:d3:18:9e:8c:48:56:3c:
09:21:24:49:4b:70:b1:ee:51:78:4d:83:fb:6c:84:23:3f:e9:
0d:49:fa:f0:10:b5:12:33:86:f0:bf:eb:e7:4e:28:e6:2c:ea:
78:99:71:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:41 2024 by rpki-client on console-ams.rpki-client.org