Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/ed0bddf1d650a1450160a6828d06cb613cb6f0ab.roa
File: ed0bddf1d650a1450160a6828d06cb613cb6f0ab.roa (raw, json)
Hash identifier: 3RsITi7NVheV/KC0rgLes/cYJQuQm7lhSLZRy01vaAE=
Subject key identifier: AC:9F:39:0A:15:4C:E5:32:4C:BD:85:EE:A6:99:9D:99:5A:A4:55:0C
Certificate issuer: /CN=425b31fb70180b4aa636c240ebd5276c722716f7
Certificate serial: 1E8732
Authority key identifier: D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/ed0bddf1d650a1450160a6828d06cb613cb6f0ab.roa
Signing time: Tue 17 Jan 2023 23:22:54 +0000
ROA not before: Wed 07 Apr 2021 03:00:00 +0000
ROA not after: Sun 09 Apr 2023 03:00:00 +0000
asID: 262589
IP address blocks: 179.1.160.0/20 maxlen: 24
190.94.176.0/20 maxlen: 24
190.94.176.0/24 maxlen: 24
190.94.177.0/24 maxlen: 24
190.94.178.0/24 maxlen: 24
190.94.179.0/24 maxlen: 24
190.94.182.0/24 maxlen: 24
190.94.186.0/24 maxlen: 24
190.94.187.0/24 maxlen: 24
190.94.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000690 (0x1e8732)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425b31fb70180b4aa636c240ebd5276c722716f7
Validity
Not Before: Apr 7 03:00:00 2021 GMT
Not After : Apr 9 03:00:00 2023 GMT
Subject: CN=ed0bddf1d650a1450160a6828d06cb613cb6f0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:be:07:75:f8:6f:78:01:5f:d8:df:d2:0e:
89:97:d2:86:98:5e:9e:32:60:23:f3:40:71:f9:1e:
e7:db:02:de:b8:36:0c:b2:a7:9f:04:6b:d8:c6:cf:
b0:1e:a8:98:b8:56:a4:4f:8b:5c:e9:5d:2e:e3:33:
48:44:31:48:c1:b6:43:0d:34:82:3a:59:87:5b:46:
b5:ac:37:df:0e:d1:3b:0e:da:0d:7e:89:45:dc:73:
df:f2:23:be:80:ab:05:42:0c:8d:c9:02:1b:b9:74:
df:59:23:06:43:42:3c:7a:5e:0d:bf:8e:36:22:6e:
b2:98:55:88:02:b9:2b:b1:79:d9:86:a9:1b:37:e6:
11:17:9a:52:a8:d1:4d:2a:a2:a1:ee:8b:9e:05:37:
af:83:c3:34:3b:81:e6:b4:20:4f:e4:f8:40:81:4d:
0a:15:08:aa:db:3d:2a:1d:9c:67:80:ae:cf:9c:17:
f8:fa:7c:c8:b5:6d:78:5e:b3:e6:a0:f2:21:8a:08:
e0:fb:ce:0a:f9:26:2e:b4:d3:05:b2:21:6a:c5:fa:
77:25:f1:be:9f:99:0f:fc:94:cd:f4:8a:a4:f2:ad:
ab:ec:7f:8e:d9:6a:73:26:5c:83:5f:c9:b2:1f:62:
62:03:44:f6:fd:bf:d1:ee:33:f7:ec:1b:03:6c:a0:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9F:39:0A:15:4C:E5:32:4C:BD:85:EE:A6:99:9D:99:5A:A4:55:0C
X509v3 Authority Key Identifier:
keyid:D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/ed0bddf1d650a1450160a6828d06cb613cb6f0ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/425b31fb70180b4aa636c240ebd5276c722716f7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.1.160.0/20
190.94.176.0/20
Signature Algorithm: sha256WithRSAEncryption
45:f5:7e:c8:1c:f9:fc:f9:ed:d6:d8:aa:bd:f4:41:a0:a5:ec:
67:9c:34:89:fb:be:e7:a9:4c:73:20:04:58:a0:ac:eb:c2:03:
46:83:35:51:03:2a:49:8c:22:03:c4:7c:1f:ba:9a:41:37:93:
88:a0:d7:45:73:0f:fb:41:d0:31:f9:20:67:6a:84:1e:69:6d:
21:f0:5c:fd:46:cd:63:29:46:af:dc:2a:6d:19:2b:de:a0:47:
d8:9c:44:57:45:e2:60:52:91:e0:ad:b9:74:cf:d0:4c:87:9c:
c5:41:5c:d9:af:30:7e:55:77:8f:fe:94:38:b9:69:33:31:6d:
79:24:f6:7b:62:11:82:53:b6:27:88:a3:38:29:12:cf:47:aa:
48:55:3e:44:b4:a4:42:c8:d6:14:1e:d1:e4:be:ef:ee:b4:16:
35:36:da:f3:14:74:f0:4b:3e:72:a0:c4:1d:ea:8c:8b:ad:d6:
99:53:45:28:c1:c1:c3:63:1e:d7:73:41:ac:7b:ac:c4:ed:dd:
83:bd:d4:0a:38:15:89:0f:c7:df:d8:b1:27:93:14:8b:c0:98:
88:88:f4:6a:a0:9c:6c:bf:f9:0a:f9:b9:dd:53:a8:6f:fb:59:
ae:e5:09:ab:ca:aa:d8:e2:95:69:fc:ae:d6:76:28:fa:6a:78:
9c:23:e6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-ams.rpki-client.org