Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/c00cfc389f0d55775dbb23b7dd354917aaaa5c71.roa
File: c00cfc389f0d55775dbb23b7dd354917aaaa5c71.roa (raw, json)
Hash identifier: Q206bvPRghPNNRRskx2ZWbTjz4Kxt+XDJFePIsTzlzY=
Subject key identifier: 63:B2:54:E4:7D:08:1C:0E:37:47:DF:35:03:05:5D:18:72:40:7B:72
Certificate issuer: /CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Certificate serial: 21D3E2
Authority key identifier: A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/c00cfc389f0d55775dbb23b7dd354917aaaa5c71.roa
Signing time: Wed 14 Jun 2023 20:48:32 +0000
ROA not before: Tue 13 Jun 2023 20:48:29 +0000
ROA not after: Sat 14 Jun 2025 20:48:29 +0000
asID: 52362
IP address blocks: 190.106.209.0/24 maxlen: 24
190.106.210.0/24 maxlen: 24
190.106.218.0/23 maxlen: 24
190.106.220.0/22 maxlen: 24
181.174.82.0/24 maxlen: 24
181.174.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216930 (0x21d3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12012502b7ca3b0da125f250315dfe19bfb18d5
Validity
Not Before: Jun 13 20:48:29 2023 GMT
Not After : Jun 14 20:48:29 2025 GMT
Subject: CN=c00cfc389f0d55775dbb23b7dd354917aaaa5c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:04:af:39:30:09:67:f6:3e:90:89:6d:53:
b8:d5:d0:ad:d6:4a:64:c9:14:5a:5d:c8:02:c2:b0:
47:33:c0:ea:a7:da:cf:8c:d7:58:31:99:ea:12:1a:
79:68:24:b7:8b:d2:7c:f8:b5:82:ab:1f:49:a6:35:
a4:8b:cc:19:8a:1d:fd:29:56:18:1a:86:d4:56:18:
a6:35:35:1c:47:cf:e2:50:c1:aa:a1:ee:72:42:10:
a2:00:99:81:32:8d:2b:31:90:bf:65:29:1d:28:7c:
4e:e6:eb:a0:7f:5c:82:b9:6d:17:0e:e9:7a:1d:fa:
e8:53:96:e0:e7:c1:2d:ae:4e:79:3c:05:c0:ba:6d:
58:22:79:11:92:ef:db:8d:04:0a:54:a0:46:36:3c:
99:91:e5:d8:f2:09:e6:16:9b:b5:fd:11:05:58:e0:
c7:eb:07:b1:fd:0f:a5:58:ec:09:13:86:fa:20:eb:
cd:7d:12:7b:bb:95:d5:0a:a5:f6:10:b3:b9:74:ee:
51:c0:96:62:97:dd:0e:fc:4f:9a:52:3b:28:42:28:
86:d3:12:e2:fd:07:a2:38:f3:4b:a4:86:22:4a:7d:
72:6d:0e:44:04:c0:19:85:98:16:b2:23:61:16:2a:
f0:25:78:bc:3a:e0:73:28:9e:e0:8a:1f:71:36:19:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B2:54:E4:7D:08:1C:0E:37:47:DF:35:03:05:5D:18:72:40:7B:72
X509v3 Authority Key Identifier:
keyid:A0:AA:33:C0:E5:EA:9C:31:8A:E1:96:B6:D8:72:02:35:9C:67:12:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b12012502b7ca3b0da125f250315dfe19bfb18d5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/c00cfc389f0d55775dbb23b7dd354917aaaa5c71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/599d9233-5922-446d-91c2-27acc51ffa1c/b12012502b7ca3b0da125f250315dfe19bfb18d5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.174.82.0/24
181.174.104.0/22
190.106.209.0-190.106.210.255
190.106.218.0-190.106.223.255
Signature Algorithm: sha256WithRSAEncryption
8a:7c:50:ef:72:24:42:77:b1:f1:57:ef:fd:9a:d1:af:31:e7:
35:61:62:dc:0a:09:95:e1:65:84:67:f3:e1:af:75:1a:2e:7f:
73:70:3c:45:03:c7:dd:8c:19:62:19:89:3e:03:62:ce:44:a9:
ff:e3:f0:bf:29:e9:fb:89:22:24:f5:a2:03:e5:4d:2a:d7:7a:
c8:22:6f:eb:1c:22:dc:a4:48:f2:27:65:cc:bc:ac:2f:b4:e4:
5f:0a:a8:d4:b8:9e:38:e8:da:29:d3:b1:9d:63:cd:8b:10:07:
3b:e5:f0:72:93:03:5a:1c:d8:b2:14:a5:1e:db:dd:f8:33:01:
b3:73:92:7c:f4:1b:0e:7a:b1:5f:cd:99:3a:8c:59:5b:e8:a0:
de:98:da:b2:c2:ec:b1:fc:ae:93:f9:21:d2:11:18:a3:db:20:
b7:47:32:b5:b7:b8:98:b3:62:34:41:ca:c4:2b:38:e5:4f:20:
e4:74:3c:ab:70:88:85:3c:40:1d:ae:5f:8e:33:62:6a:0c:4a:
97:d8:e6:88:82:46:da:25:f5:87:25:9d:92:09:3f:e2:fc:fe:
5d:88:e0:63:a2:20:c3:dc:b3:8d:3a:f9:f4:58:30:1e:29:cb:
34:2e:ca:af:5c:4a:99:31:cc:f3:f3:8d:a0:21:e3:03:6b:ea:
14:2e:63:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:44 2024 by rpki-client on console-fra.rpki-client.org