Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/48f45f2ce31bdb997a1e0052eb7b65230aed4081.roa
File: 48f45f2ce31bdb997a1e0052eb7b65230aed4081.roa (raw, json)
Hash identifier: kJhrR8Hb4LXW3R47GCAHkRmK5ugpcbFG8X605sr0GhI=
Subject key identifier: 6A:0C:0E:7E:F0:20:9D:CF:7A:E6:7D:F8:E4:3C:38:2E:77:97:24:F6
Certificate issuer: /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial: 21DB03
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/48f45f2ce31bdb997a1e0052eb7b65230aed4081.roa
Signing time: Wed 14 Jun 2023 20:48:34 +0000
ROA not before: Tue 13 Jun 2023 20:48:29 +0000
ROA not after: Sat 14 Jun 2025 20:48:29 +0000
asID: 23243
IP address blocks: 186.189.192.0/20 maxlen: 24
186.189.208.0/22 maxlen: 24
186.189.213.0/24 maxlen: 24
186.189.214.0/24 maxlen: 24
186.189.216.0/24 maxlen: 24
186.189.218.0/23 maxlen: 24
186.189.220.0/22 maxlen: 24
181.174.83.0/24 maxlen: 24
181.174.84.0/22 maxlen: 24
181.174.88.0/22 maxlen: 24
181.174.92.0/24 maxlen: 24
181.174.94.0/23 maxlen: 24
181.174.96.0/22 maxlen: 24
181.174.100.0/24 maxlen: 24
181.189.133.0/24 maxlen: 24
181.189.134.0/23 maxlen: 24
181.189.136.0/21 maxlen: 24
181.174.102.0/23 maxlen: 24
181.174.108.0/22 maxlen: 24
181.174.112.0/21 maxlen: 24
181.174.120.0/22 maxlen: 24
181.174.125.0/24 maxlen: 24
181.174.126.0/23 maxlen: 24
190.106.193.0/24 maxlen: 24
190.106.194.0/23 maxlen: 24
190.106.196.0/22 maxlen: 24
190.106.200.0/21 maxlen: 24
190.106.208.0/24 maxlen: 24
190.106.211.0/24 maxlen: 24
190.106.212.0/22 maxlen: 24
190.106.216.0/23 maxlen: 24
181.174.64.0/20 maxlen: 24
181.174.80.0/23 maxlen: 24
200.49.160.0/19 maxlen: 24
2803:c800::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2218755 (0x21db03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Validity
Not Before: Jun 13 20:48:29 2023 GMT
Not After : Jun 14 20:48:29 2025 GMT
Subject: CN=48f45f2ce31bdb997a1e0052eb7b65230aed4081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:e2:5e:9e:d3:ec:8b:77:ef:03:87:49:36:
ee:ab:0e:a5:5c:d0:5d:e8:04:13:ce:d8:ac:29:a2:
d2:ab:d3:ae:ac:9b:7e:50:c1:51:ed:81:88:95:04:
75:e9:36:d1:56:51:91:ea:56:4c:b2:8c:59:56:b5:
d5:2f:39:e0:f9:16:37:23:d2:b8:da:26:d3:c9:81:
f0:1e:f3:ae:ef:69:50:f2:67:03:0d:a6:ff:ac:15:
69:49:91:7f:e4:54:9f:40:43:51:06:76:e1:b6:16:
d5:d3:64:ed:dd:e3:91:8c:d9:43:07:3e:26:c8:83:
1c:57:5b:2e:73:3a:92:36:d4:93:d0:6f:e8:6e:82:
8c:b5:ea:32:40:d0:02:22:ca:be:55:2f:19:c0:4a:
b2:59:8f:49:79:b7:57:cf:38:14:0b:a6:50:1d:b9:
79:62:a4:cc:b5:ed:2f:7a:18:60:c9:5c:12:3a:b1:
9c:9e:5c:6e:58:cc:e6:35:fa:c8:91:ed:3b:50:e2:
c3:be:dd:b6:ba:ad:15:1c:2a:c3:45:d1:e5:fd:a3:
02:34:90:fb:5d:08:79:77:46:e8:5f:ed:fb:7a:22:
f8:bd:47:f2:f3:cb:53:ac:88:93:51:32:73:43:2f:
a9:21:dd:35:da:f0:67:99:7f:40:ee:96:d3:f3:1b:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0C:0E:7E:F0:20:9D:CF:7A:E6:7D:F8:E4:3C:38:2E:77:97:24:F6
X509v3 Authority Key Identifier:
keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/48f45f2ce31bdb997a1e0052eb7b65230aed4081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.174.64.0-181.174.81.255
181.174.83.0-181.174.92.255
181.174.94.0-181.174.100.255
181.174.102.0/23
181.174.108.0-181.174.123.255
181.174.125.0-181.174.127.255
181.189.133.0-181.189.143.255
186.189.192.0-186.189.211.255
186.189.213.0-186.189.214.255
186.189.216.0/24
186.189.218.0-186.189.223.255
190.106.193.0-190.106.208.255
190.106.211.0-190.106.217.255
200.49.160.0/19
IPv6:
2803:c800::/32
Signature Algorithm: sha256WithRSAEncryption
98:35:5b:f2:ca:55:54:54:44:84:e8:ea:39:25:48:18:a2:4f:
7c:f5:57:5d:df:49:87:9e:45:91:f4:e6:59:c0:5a:70:5a:3a:
a6:dc:1e:c4:8c:da:dd:18:d4:30:dc:a6:0e:e6:7a:e4:be:df:
5f:dd:a6:16:87:0e:92:7f:ae:56:ff:57:76:da:e8:4e:09:c7:
1c:3d:59:3d:8e:ab:cc:bb:93:fd:a4:e4:62:b6:03:02:a8:45:
d1:b8:a1:a8:13:a9:06:af:ac:86:6b:30:0e:10:85:e2:fb:36:
ee:12:62:f6:21:12:95:4e:73:73:e6:89:74:b4:81:f4:44:99:
c1:4b:55:9c:7f:67:d0:a0:0b:bc:01:d5:09:01:ba:6b:fe:21:
d9:8b:41:ab:79:92:8d:76:4f:e8:67:a1:5b:a6:39:1c:20:a9:
ef:36:11:1a:78:00:49:d4:d8:a9:f7:c5:90:d1:62:07:63:08:
0a:eb:aa:4d:98:b7:f2:7c:59:5f:74:1a:96:eb:9f:03:9d:a2:
72:ac:fc:99:20:47:1f:f0:c2:02:3a:3e:36:15:90:e7:05:09:
3d:02:6d:78:a4:15:c3:c3:d3:16:f6:fa:1a:67:aa:85:ae:ee:
9f:e7:ab:07:dd:fa:2d:42:f4:59:0a:e5:9c:b5:22:1b:5f:2e:
94:f4:60:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:46 2024 by rpki-client on console-ams.rpki-client.org