Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/a9ce102d572b3e7ac7bbab7afd6cf427f78dfad0.roa
File: a9ce102d572b3e7ac7bbab7afd6cf427f78dfad0.roa (raw, json)
Hash identifier: B/s27VXmA+aV7+rgdAB7peNIVLx41TH+2IXAIenPxec=
Subject key identifier: B0:1C:F1:65:6E:C6:33:12:0B:24:7C:42:D7:A1:FA:90:D9:B0:75:A4
Certificate issuer: /CN=e8fb249d4f9466e3a1a3e886e27e824279d45530
Certificate serial: 15FE26
Authority key identifier: 0E:08:35:B8:43:89:E5:7E:56:5B:87:9F:46:02:15:46:A7:18:54:08
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fb249d4f9466e3a1a3e886e27e824279d45530.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/a9ce102d572b3e7ac7bbab7afd6cf427f78dfad0.roa
Signing time: Thu 29 Feb 2024 01:42:24 +0000
ROA not before: Thu 29 Feb 2024 01:42:24 +0000
ROA not after: Sun 01 Mar 2026 01:42:24 +0000
asID: 264850
IP address blocks: 168.90.196.0/22 maxlen: 22
170.83.176.0/22 maxlen: 22
138.186.136.0/22 maxlen: 22
200.10.32.0/20 maxlen: 20
138.0.240.0/22 maxlen: 22
2803:6180::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1441318 (0x15fe26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8fb249d4f9466e3a1a3e886e27e824279d45530
Validity
Not Before: Feb 29 01:42:24 2024 GMT
Not After : Mar 1 01:42:24 2026 GMT
Subject: CN=a9ce102d572b3e7ac7bbab7afd6cf427f78dfad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:a6:57:e5:3d:5f:2a:26:32:92:42:22:e9:
82:e6:5b:70:9a:97:0b:53:d8:07:47:b0:16:f1:6b:
fc:d5:d9:e1:72:5f:56:d5:5b:ba:f0:c1:7e:a3:00:
5d:43:84:6e:4a:fe:cf:0e:9d:a7:94:c5:a0:2d:25:
45:68:04:26:d2:4f:e9:9e:4b:8e:52:23:96:15:24:
18:d1:04:55:62:2f:8f:50:13:7a:03:11:80:0d:72:
c7:67:69:55:12:40:90:47:4f:33:a7:fe:ad:10:80:
0e:a4:a5:ad:bd:78:a9:40:7d:1d:0e:72:f5:3a:f4:
c5:72:d9:69:b0:32:9d:ca:7d:01:5a:ec:af:0a:06:
c3:22:ed:b8:08:5e:60:6f:34:aa:2f:8d:f6:80:10:
2f:8d:ea:e1:56:db:4d:59:8b:b7:4a:6e:9f:9b:e1:
17:05:0b:4c:6a:33:19:8d:89:3e:c9:83:40:c1:b3:
23:13:6e:81:4e:0e:77:38:36:7d:12:68:cc:af:66:
d9:0c:a8:68:a6:df:4f:47:e4:e2:fd:f9:9d:84:47:
b4:54:9f:17:73:fd:9c:34:21:2d:d0:d5:27:86:9e:
d8:fa:f3:17:21:df:49:0d:42:80:e9:b0:3e:8a:0a:
11:29:0e:b2:45:ee:e1:e5:3e:02:32:f6:94:be:e7:
2d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1C:F1:65:6E:C6:33:12:0B:24:7C:42:D7:A1:FA:90:D9:B0:75:A4
X509v3 Authority Key Identifier:
keyid:0E:08:35:B8:43:89:E5:7E:56:5B:87:9F:46:02:15:46:A7:18:54:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8fb249d4f9466e3a1a3e886e27e824279d45530.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/a9ce102d572b3e7ac7bbab7afd6cf427f78dfad0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/66147017-4549-4a27-a86b-d462b3811610/e8fb249d4f9466e3a1a3e886e27e824279d45530.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.240.0/22
138.186.136.0/22
168.90.196.0/22
170.83.176.0/22
200.10.32.0/20
IPv6:
2803:6180::/32
Signature Algorithm: sha256WithRSAEncryption
1b:99:ab:47:b5:40:3a:ca:34:c1:4f:86:81:16:8f:97:f0:83:
c2:10:37:eb:e4:99:24:61:5a:2a:30:6a:e9:3b:c2:65:78:c3:
17:ad:f3:4d:33:42:35:3d:fb:4e:6c:2a:e5:e5:3b:19:d0:df:
59:d4:b3:3a:b1:d6:a1:0d:92:eb:cc:a9:f0:f0:5d:ce:ed:fc:
6d:39:b1:a8:b2:e7:59:f5:fa:f6:44:58:25:8e:34:74:d4:49:
fb:85:77:6d:3f:9d:26:05:a8:38:17:a5:73:1f:6e:0e:07:54:
16:65:af:43:9e:e9:4b:f9:aa:55:44:e6:fc:e7:16:1f:4d:da:
a3:da:c9:78:30:7a:ce:b9:8c:ce:71:54:fb:04:1c:21:90:bf:
0b:72:93:3e:aa:6f:72:a7:a4:30:98:55:1a:39:4d:00:35:d0:
98:69:bf:7c:6c:93:d7:a1:7d:db:0f:9b:da:8f:26:61:1e:a9:
30:d9:2d:df:1c:6a:c2:ae:87:9d:67:1a:ee:81:31:e3:c5:4c:
fb:93:79:7a:30:a0:96:07:aa:62:61:f6:ea:94:74:be:5d:b8:
87:b6:af:48:74:9b:9a:40:41:39:dd:bd:f2:99:4f:bc:53:0e:
21:79:0f:fa:52:32:6e:e5:14:e4:15:f0:7d:9c:ee:e9:7e:f6:
0d:43:fb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:37 2024 by rpki-client on console-ams.rpki-client.org