Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f47499f854cb662a4164ce5786f67c2010ca837f.roa
File: f47499f854cb662a4164ce5786f67c2010ca837f.roa (raw, json)
Hash identifier: gPEm04TG2Ea9isC4hcB6V0olyuua+36j8tnnZcpqTM8=
Subject key identifier: 04:17:99:2A:BD:10:04:EC:2B:A2:4C:9E:7E:6D:9F:56:B0:84:8D:2E
Certificate issuer: /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial: 13D999
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f47499f854cb662a4164ce5786f67c2010ca837f.roa
Signing time: Wed 12 May 2021 15:18:44 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 27895
IP address blocks: 181.94.197.0/24 maxlen: 24
181.94.208.0/23 maxlen: 24
181.94.210.0/24 maxlen: 24
181.94.212.0/22 maxlen: 24
181.94.216.0/21 maxlen: 24
181.94.224.0/21 maxlen: 24
181.94.232.0/22 maxlen: 24
181.94.236.0/23 maxlen: 24
181.94.238.0/24 maxlen: 24
181.94.241.0/24 maxlen: 24
181.94.242.0/23 maxlen: 24
181.94.244.0/22 maxlen: 24
181.94.248.0/23 maxlen: 24
181.94.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300889 (0x13d999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=f47499f854cb662a4164ce5786f67c2010ca837f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:f2:58:c8:cf:1b:c4:cd:09:96:a5:a0:c6:
d9:a0:e4:cb:32:1b:57:3b:0a:5d:eb:bf:d8:bd:b8:
76:c4:32:df:0a:64:9b:1d:ca:64:dc:25:c4:f2:e5:
bd:87:56:f1:12:d8:5c:4a:47:3a:00:27:e8:16:f2:
80:c6:82:c3:b3:24:d3:a9:96:ac:e7:00:20:7e:b2:
98:af:5e:f8:a2:33:dc:9c:69:d2:6c:bb:27:de:b1:
2e:02:0b:f6:26:28:5c:01:ce:a7:e5:49:f6:c8:17:
57:48:95:0f:a1:0b:c8:22:b2:2c:57:3b:b5:5f:c6:
c1:d0:3a:6d:aa:98:36:32:8b:5c:7f:26:c9:48:8a:
2f:8e:b6:86:a0:8d:ed:78:f2:cd:10:33:ed:88:d0:
37:6f:1b:fa:ec:f2:6e:da:37:f8:b6:57:fa:ca:31:
7b:7d:9a:f6:8e:3f:fb:3e:39:5d:4e:b0:75:bd:b8:
e6:8c:56:b1:ae:c1:26:dd:8c:5f:90:15:87:7c:d1:
58:25:b2:3d:e6:8b:57:be:5e:fb:ae:84:3e:e1:35:
38:ea:6c:f1:42:3c:d7:6d:08:c1:64:f3:75:e4:30:
27:30:6b:bc:04:3b:97:55:b6:52:ac:9f:30:44:bd:
b6:9e:81:56:04:64:f9:bc:85:8a:8d:d9:55:2f:22:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:17:99:2A:BD:10:04:EC:2B:A2:4C:9E:7E:6D:9F:56:B0:84:8D:2E
X509v3 Authority Key Identifier:
keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f47499f854cb662a4164ce5786f67c2010ca837f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.94.197.0/24
181.94.208.0-181.94.210.255
181.94.212.0-181.94.238.255
181.94.241.0-181.94.250.255
Signature Algorithm: sha256WithRSAEncryption
79:1d:48:3d:74:8f:86:19:0f:44:14:b1:ef:20:6f:29:18:50:
75:db:c9:4a:9b:d3:74:82:27:bf:4b:39:cd:a4:d4:c6:94:50:
ab:d3:b4:00:b8:18:bd:ac:b6:ce:c1:23:4a:d5:9a:fc:31:a5:
91:3e:b7:d3:f5:ae:b2:24:90:71:0f:a9:70:8a:dd:01:8c:9c:
ee:5c:fb:af:90:1a:d5:b7:08:04:c2:8c:0a:c6:37:d6:ba:d5:
2a:ec:a1:69:02:97:ff:2c:e1:c9:f7:81:17:b1:80:a1:55:d7:
55:a2:9f:0e:21:20:d6:5e:86:4e:72:73:a5:f9:a9:63:1b:96:
44:0d:69:be:b6:cf:72:1f:c8:9d:b9:a6:e8:0c:bc:c1:e7:13:
99:f0:b7:07:fa:ac:95:5a:e1:29:e4:58:87:f0:18:65:3d:68:
a7:d7:51:53:99:ac:60:94:a0:2c:28:1c:a5:d0:9c:01:74:1d:
bf:37:cc:3b:8d:34:5c:5a:15:a3:4c:60:1e:d0:2a:d5:8d:6f:
07:01:9d:d0:c4:e0:09:6b:e7:ca:f0:f1:90:af:7c:45:4c:b2:
02:f9:f8:3f:d4:41:f2:36:12:66:14:a5:97:32:81:73:9c:b7:
e5:0b:27:78:e7:07:0e:f4:25:b4:7d:71:5d:5f:c3:3c:4d:7c:
6b:58:5e:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org