Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/8fbc88374f93b4cb81d5580c709ac26017924cce.roa
File: 8fbc88374f93b4cb81d5580c709ac26017924cce.roa (raw, json)
Hash identifier: hxWPVhrgKt2s/TISorrrKS+E9muZtEKFU6/0woRfQwE=
Subject key identifier: A1:58:83:1C:FD:F1:1E:C7:BC:2C:55:E7:F1:BE:96:A1:D9:D4:26:F7
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 119DE4
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/8fbc88374f93b4cb81d5580c709ac26017924cce.roa
Signing time: Thu 15 Apr 2021 23:44:54 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 265686
IP address blocks: 181.94.252.0/22 maxlen: 24
181.105.221.0/24 maxlen: 24
181.105.233.0/24 maxlen: 24
181.105.234.0/23 maxlen: 24
190.228.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1154532 (0x119de4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=8fbc88374f93b4cb81d5580c709ac26017924cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:03:2f:45:14:fc:7b:51:90:a5:90:44:0f:83:
b2:51:3b:81:d4:84:72:59:fe:0b:74:f9:46:1a:f3:
72:f4:f6:7f:ae:61:73:0e:98:be:ef:81:b2:e8:b6:
41:50:a2:14:58:19:b0:27:33:0d:49:af:49:24:c1:
a0:08:fd:44:a6:dd:07:89:09:eb:a3:cf:15:c6:5a:
92:b2:c6:70:d6:f2:bc:45:28:ce:dd:1c:f6:31:b5:
46:40:0b:3a:3e:ed:a9:a8:cf:1b:f0:d8:29:fb:67:
9f:1e:be:01:4a:70:52:0c:df:af:b1:b2:c3:d2:27:
c4:1b:62:b1:65:8c:cf:b5:c4:11:a4:12:64:b6:bd:
86:d5:63:25:c2:55:7b:24:b1:1c:92:de:e3:e1:33:
6f:5b:79:db:99:53:43:9b:bb:21:75:c0:c4:85:f5:
77:da:f6:30:1f:8e:e2:51:1b:51:1e:79:68:e0:6f:
4a:15:da:78:ca:58:ac:5d:8b:c3:ea:3f:ee:1d:3b:
09:0a:9a:25:98:90:12:f7:f4:ad:a7:0a:42:11:06:
4b:2b:16:99:86:a3:f1:a9:6e:22:ca:b3:6a:c0:3d:
42:c9:0a:dc:db:01:38:27:db:8e:96:58:9a:83:aa:
6a:7e:2e:a5:e8:7e:58:40:38:0b:cc:cb:90:0c:91:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:58:83:1C:FD:F1:1E:C7:BC:2C:55:E7:F1:BE:96:A1:D9:D4:26:F7
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/8fbc88374f93b4cb81d5580c709ac26017924cce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.94.252.0/22
181.105.221.0/24
181.105.233.0-181.105.235.255
190.228.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:39:d5:be:88:53:50:75:19:7b:82:54:01:e1:70:d1:d9:bb:
f2:7b:a9:d5:bc:b2:80:aa:b1:ee:8b:b4:e2:cb:74:4a:d8:3a:
29:3e:90:ba:68:76:20:7e:7c:0f:6b:db:35:0d:85:cb:f3:d5:
b7:97:72:62:b8:f4:8a:33:1f:b8:c6:75:60:75:c1:47:56:1c:
59:9a:d2:c1:17:11:ea:46:9e:d9:fc:ac:48:31:7b:d0:01:40:
b8:e3:79:50:03:d6:43:07:33:04:2f:cd:7c:95:ea:24:57:38:
f0:b2:96:bc:55:7d:42:c0:a1:0b:87:eb:35:8e:5c:d2:6c:fb:
38:1e:f2:ab:2c:70:5f:a3:f7:a4:4c:c3:fa:ff:f8:66:6b:11:
23:8d:c7:40:16:f2:88:79:c7:e1:09:81:64:cf:4b:06:08:73:
9f:fc:f6:5b:0a:77:24:d3:59:c1:40:0a:83:a8:35:5d:85:06:
d1:9d:71:36:d0:61:9f:6a:5f:c9:7e:6e:b8:28:69:b8:e5:ff:
b4:d5:30:74:6d:14:3d:e6:0c:5d:4a:95:61:2d:aa:61:91:db:
7b:31:d9:e4:79:94:ab:1e:45:b9:94:7f:3e:ba:3d:94:41:96:
4c:ad:70:27:a2:c6:80:f4:0a:b3:3e:fe:bd:47:61:a9:b0:8f:
11:65:6f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:42 2024 by rpki-client on console-ams.rpki-client.org