Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9953d4a2ae965cbe62b2f8f925d0608c022b027c.roa
File: 9953d4a2ae965cbe62b2f8f925d0608c022b027c.roa (raw, json)
Hash identifier: p0p9k/g7QG/wyJZ2iiRohtz2BchbrTEYBdre7qP+6WQ=
Subject key identifier: C5:0E:FE:2D:54:2E:1B:78:74:8E:C0:4D:D0:49:A4:6E:EF:CA:19:84
Certificate issuer: /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial: 220AD1
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9953d4a2ae965cbe62b2f8f925d0608c022b027c.roa
Signing time: Wed 19 Apr 2023 18:45:01 +0000
ROA not before: Tue 18 Apr 2023 18:45:00 +0000
ROA not after: Sat 19 Apr 2025 18:45:00 +0000
asID: 28000
IP address blocks: 168.121.184.0/22 maxlen: 24
170.247.168.0/22 maxlen: 24
200.10.61.0/24 maxlen: 24
200.10.62.0/23 maxlen: 24
200.7.84.0/23 maxlen: 24
179.0.156.0/22 maxlen: 24
200.7.87.0/24 maxlen: 24
2001:13c7:7010::/46 maxlen: 48
2801:1b8::/44 maxlen: 48
2001:13c7:7001::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2230993 (0x220ad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Validity
Not Before: Apr 18 18:45:00 2023 GMT
Not After : Apr 19 18:45:00 2025 GMT
Subject: CN=9953d4a2ae965cbe62b2f8f925d0608c022b027c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:19:e0:03:00:ef:67:08:71:f8:ef:5e:c4:
f7:22:b2:df:17:ef:5e:a5:62:e5:75:60:c3:a8:94:
8b:80:1c:96:8e:97:e4:d5:22:0a:86:0f:ee:d5:1d:
4a:a1:14:c2:ff:b0:58:fb:b9:bb:69:5e:15:cf:e9:
6d:3e:7e:19:68:a6:a5:e4:09:54:10:58:76:ed:19:
15:01:c1:ac:ee:23:95:bd:6a:e8:52:7a:f8:70:4f:
b7:e9:97:1d:1d:c5:87:23:c2:d6:71:fb:7c:bf:13:
4d:02:88:95:95:11:0f:11:03:12:6b:bf:e6:69:b8:
9d:b6:85:5e:b3:93:49:23:19:1b:00:70:a3:49:44:
40:c5:a0:35:ac:68:e7:75:cd:0a:2d:16:ba:fe:f7:
33:c7:8b:a0:f5:5a:55:7b:e2:8b:d4:ad:5c:44:96:
e3:54:cc:f1:b2:f6:a3:d7:4d:87:3d:87:64:f6:c2:
05:10:53:50:30:7a:65:51:12:61:38:97:61:18:17:
2f:46:68:a7:63:c2:5f:ab:f7:56:20:64:c1:6c:4b:
cb:6b:84:09:d1:e1:34:3f:d9:dd:ae:8c:bd:77:6f:
0c:76:28:65:9b:ff:a9:f0:8c:9c:56:9d:04:33:3b:
0b:77:7e:33:8d:4e:cc:73:4b:27:ec:06:05:e9:d6:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0E:FE:2D:54:2E:1B:78:74:8E:C0:4D:D0:49:A4:6E:EF:CA:19:84
X509v3 Authority Key Identifier:
keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9953d4a2ae965cbe62b2f8f925d0608c022b027c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.184.0/22
170.247.168.0/22
179.0.156.0/22
200.7.84.0/23
200.7.87.0/24
200.10.61.0-200.10.63.255
IPv6:
2001:13c7:7001::/48
2001:13c7:7010::/46
2801:1b8::/44
Signature Algorithm: sha256WithRSAEncryption
8d:b7:65:27:bc:e1:70:fa:58:ba:a1:94:1f:89:c8:97:7f:29:
6a:3e:7f:41:a1:0f:96:ba:50:34:c4:a8:17:09:89:3b:93:56:
c7:db:7a:1c:00:af:71:af:32:61:92:e8:12:29:8d:0c:b0:dd:
ed:80:65:e1:6a:20:08:3d:da:44:ce:ee:3e:29:c8:2d:80:7a:
64:62:d1:e1:5c:8f:6b:ad:15:23:f8:db:6e:43:7e:2b:f5:9f:
4d:19:70:9d:fd:c8:97:41:99:20:9c:a4:18:ca:8e:30:46:5c:
c2:9a:6d:6d:1f:cb:01:7c:d4:74:ca:61:83:d7:30:95:ed:c3:
76:11:8a:37:20:9c:e9:c2:02:4a:5b:b6:56:c9:3a:10:1d:d7:
c4:7e:d0:fb:7e:a9:37:6a:6b:6e:a6:5b:9e:4e:94:57:8f:cb:
d1:e3:b1:dc:be:af:64:a5:32:c1:9b:af:f8:ca:35:74:18:87:
0e:2a:4d:f0:f9:3c:d0:2c:ae:e6:a2:66:43:5e:8e:da:fb:fb:
4c:f6:2b:57:c0:08:b9:ab:4a:18:de:ec:be:f3:6b:ed:b1:16:
01:ab:af:9d:0f:7f:ae:42:3b:5f:c6:cf:08:a9:53:05:13:28:
c8:39:82:38:77:be:fa:c8:c2:a7:3c:ff:13:72:9e:33:9f:b2:
18:89:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 19:07:25 2024 by rpki-client on console-fra.rpki-client.org