Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/29a58b361f6bb3592706fb8d0a8a01fe65c941ae.roa
File: 29a58b361f6bb3592706fb8d0a8a01fe65c941ae.roa (raw, json)
Hash identifier: AB99KwMDxbgqHHbkiCLv9AYJ5jxLT7AakxmUBN8ba28=
Subject key identifier: DA:0A:F6:51:84:FC:32:1C:E0:AE:85:EB:FA:82:D4:C3:79:2B:63:DF
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 267258
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/29a58b361f6bb3592706fb8d0a8a01fe65c941ae.roa
Signing time: Sun 16 Apr 2023 21:12:36 +0000
ROA not before: Sat 15 Apr 2023 21:11:49 +0000
ROA not after: Wed 16 Apr 2025 21:11:49 +0000
asID: 52444
IP address blocks: 181.15.97.0/24 maxlen: 24
181.15.98.0/23 maxlen: 24
181.15.100.0/24 maxlen: 24
186.153.126.0/23 maxlen: 24
181.10.140.0/23 maxlen: 24
181.10.142.0/24 maxlen: 24
190.136.11.0/24 maxlen: 24
186.125.161.0/24 maxlen: 24
181.15.195.0/24 maxlen: 24
186.125.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2519640 (0x267258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Apr 15 21:11:49 2023 GMT
Not After : Apr 16 21:11:49 2025 GMT
Subject: CN=29a58b361f6bb3592706fb8d0a8a01fe65c941ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:50:e0:86:9b:ae:e9:bf:db:67:09:c1:e4:
5e:f0:66:ca:57:a1:e1:53:56:98:3e:e7:fd:30:f1:
16:69:0c:bd:3a:4b:05:7b:7a:37:5f:0f:0c:80:f8:
80:4d:32:01:42:dc:4b:16:cf:7a:c9:8f:c4:09:ff:
75:34:30:bd:81:6a:3f:1f:ad:56:9e:4d:99:98:60:
aa:9b:99:fa:0a:64:e8:9a:15:63:f9:48:d5:06:f3:
7c:2d:04:dc:f4:de:a1:39:9f:39:a3:ed:78:1d:95:
9d:5f:b3:ab:59:bd:1f:c4:15:81:ce:b2:c0:5b:4e:
c2:cf:9f:05:4a:43:67:a5:c8:49:9f:c5:90:f3:32:
88:bb:f0:16:fd:72:b9:cf:d3:87:24:80:14:9d:05:
06:06:7d:5b:90:7a:84:74:50:eb:fc:1e:5d:9f:7d:
1e:d4:28:d7:07:42:13:42:bb:73:12:47:63:c9:bf:
a7:78:b7:64:8b:51:d1:aa:18:03:f2:68:6a:d0:66:
cc:b2:a3:67:bc:76:6d:bc:06:f0:d4:56:b4:f1:83:
2f:20:f2:22:f6:3f:cc:f3:f1:64:73:9f:3d:fc:ac:
5d:5e:00:6f:4e:b2:bd:68:ab:00:65:c9:40:73:56:
28:96:32:21:21:c6:be:a3:a6:6a:fb:60:1f:ee:34:
86:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0A:F6:51:84:FC:32:1C:E0:AE:85:EB:FA:82:D4:C3:79:2B:63:DF
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/29a58b361f6bb3592706fb8d0a8a01fe65c941ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.10.140.0-181.10.142.255
181.15.97.0-181.15.100.255
181.15.195.0/24
186.125.62.0/23
186.125.161.0/24
186.153.126.0/23
190.136.11.0/24
Signature Algorithm: sha256WithRSAEncryption
56:1c:e5:d7:df:67:9c:90:30:dc:e1:31:57:81:9b:86:22:0c:
f7:81:49:31:44:80:c5:69:f5:54:e8:81:fd:77:23:ac:88:80:
4d:d9:41:32:1e:11:ec:11:f4:c5:b3:4e:17:27:5e:b1:31:61:
c5:c4:88:7a:5f:28:67:84:ff:17:c4:0a:36:39:ce:ad:3e:5d:
8b:8d:54:44:fd:0e:17:3c:40:39:a1:3a:87:c9:d7:3d:73:7a:
f3:87:eb:1b:a8:65:c2:cb:e3:eb:11:cc:0e:4e:18:0b:48:e3:
29:b0:85:29:32:dd:c3:0b:58:38:f3:c3:6b:a3:ae:6a:a4:c0:
e5:2c:d4:8b:2b:14:e5:6a:d4:80:a2:54:2b:27:0b:a3:ca:52:
c5:c9:69:fd:ae:de:dd:e2:fc:de:86:89:7a:c0:de:b4:52:68:
66:d2:69:11:22:e8:c4:dd:6b:7b:10:85:ed:ad:77:f1:cf:27:
f7:ce:f7:b2:6e:91:3e:32:cd:d7:04:ea:61:69:d4:92:22:44:
55:f0:85:94:e2:fb:5c:f8:50:82:f4:fc:20:e1:09:09:8f:e0:
e2:3c:65:a8:59:d1:fd:83:6d:4d:2a:2f:2b:ae:43:b0:38:a2:
69:0b:18:c5:7b:79:4f:34:fc:46:ef:40:97:09:53:ac:07:8b:
83:ff:dc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org