Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/68de9a4e87816427940aacbd90901dd76d668026.roa
File: 68de9a4e87816427940aacbd90901dd76d668026.roa (raw, json)
Hash identifier: oAROiGnLd1BBJg0oyxyJr3V/1hNocl3osEpcHrW2Yhg=
Subject key identifier: 53:2D:8C:1E:06:A0:3B:81:2A:78:EA:FD:96:7F:EF:1B:DE:5D:B2:57
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2D862C
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/68de9a4e87816427940aacbd90901dd76d668026.roa
Signing time: Thu 07 Dec 2023 12:42:05 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 265686
IP address blocks: 181.105.233.0/24 maxlen: 24
181.94.252.0/22 maxlen: 24
181.105.234.0/23 maxlen: 24
190.228.177.0/24 maxlen: 24
200.43.0.0/22 maxlen: 22
181.105.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2983468 (0x2d862c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=68de9a4e87816427940aacbd90901dd76d668026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:73:4a:51:1c:7d:01:a9:fe:5b:a5:9a:75:
b3:08:1e:16:64:54:4f:1a:04:f4:64:92:39:b6:88:
65:84:d5:5b:6d:08:87:ef:2f:b6:32:cb:56:12:70:
31:9e:77:94:47:17:9d:52:1e:d2:6b:00:69:5a:ec:
60:ce:f5:42:d8:f9:4a:56:41:59:de:d6:1e:be:10:
6c:93:42:9d:22:b6:66:c5:c8:3a:dc:ad:4d:81:ee:
3a:20:f1:df:96:51:f3:71:cf:22:97:81:b4:66:61:
73:be:b2:82:1b:2a:55:17:25:b7:c5:a5:f6:a8:33:
14:86:0c:83:38:5d:86:b0:de:4c:33:20:b1:ea:ae:
8d:84:3c:16:7f:c5:7c:a6:b7:4f:eb:12:e6:b2:34:
28:98:2d:4c:f9:57:5d:68:fa:dc:51:d8:c8:93:f5:
e3:e8:ff:1d:45:6b:87:7a:dd:b2:ba:58:25:4f:cc:
ec:cf:74:06:b3:0a:35:b9:47:68:65:f7:aa:62:9c:
0f:d5:ce:d6:95:db:85:4e:ca:c9:1b:1b:7f:95:4f:
d0:3a:dd:fe:08:9a:1e:05:e4:e4:75:cf:9e:e1:cc:
b1:7e:9a:0b:48:b9:69:62:fc:d2:77:4a:6b:44:13:
1e:cc:fa:dc:c2:01:56:a7:d5:6d:c0:d6:fe:db:1c:
1f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2D:8C:1E:06:A0:3B:81:2A:78:EA:FD:96:7F:EF:1B:DE:5D:B2:57
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/68de9a4e87816427940aacbd90901dd76d668026.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.94.252.0/22
181.105.221.0/24
181.105.233.0-181.105.235.255
190.228.177.0/24
200.43.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:9c:3e:c6:6c:e8:da:a1:7f:8a:3d:b0:d3:c6:2a:87:7c:9d:
1d:f4:22:8f:95:54:db:21:f6:bb:85:6c:cf:c8:d2:4e:40:db:
65:4e:31:c3:ad:64:88:f6:be:f4:8c:72:a0:1d:b2:1b:d5:6e:
e4:19:5d:a2:d7:07:89:c3:72:3c:b7:73:28:59:ac:48:8d:02:
23:cc:92:33:1d:04:cc:9c:68:e3:a8:d2:f5:1f:78:cb:c8:1b:
fd:60:e5:7f:37:45:e9:39:56:85:4b:92:50:57:95:71:22:9a:
62:be:53:19:7b:91:db:50:23:2b:03:33:e9:6b:37:4a:c8:88:
d8:1f:2a:c0:e2:0e:6a:83:6c:ec:33:35:ed:b3:86:90:aa:2d:
b4:b6:c8:5d:a7:e6:70:92:78:de:87:ee:5f:60:ac:04:6f:35:
d6:ae:09:40:e9:d7:45:1a:d1:db:51:2d:bb:a4:80:39:74:bc:
17:31:f6:82:71:d5:b2:80:71:9f:24:35:7c:6c:6a:d0:2a:0c:
17:1b:fc:c2:fe:8c:3d:f6:94:23:26:ba:67:9e:65:f6:1e:ca:
5e:e1:67:26:cd:fa:fe:dc:52:47:c9:2d:21:55:60:f5:e2:ff:
25:ac:c3:bd:69:ca:76:39:60:ff:45:67:13:0f:74:96:39:31:
ff:c4:c0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org