Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/6839c80737429f8f9a15bf6054e68fb16d30f5db.roa
File: 6839c80737429f8f9a15bf6054e68fb16d30f5db.roa (raw, json)
Hash identifier: OTVatsEjRhxOrmuAvtBvFXdWgILNjPNSlYhAZ7iArU8=
Subject key identifier: 70:60:27:D0:0A:C0:CC:86:00:F7:3B:6E:79:FC:51:61:8E:BC:87:6A
Certificate issuer: /CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
Certificate serial: 231C09
Authority key identifier: C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/6839c80737429f8f9a15bf6054e68fb16d30f5db.roa
Signing time: Wed 02 Aug 2023 18:09:51 +0000
ROA not before: Tue 01 Aug 2023 18:09:50 +0000
ROA not after: Sat 02 Aug 2025 18:09:50 +0000
asID: 262220
IP address blocks: 190.7.112.0/20 maxlen: 24
167.250.120.0/22 maxlen: 24
181.225.80.0/24 maxlen: 24
179.51.113.0/24 maxlen: 24
179.51.117.0/24 maxlen: 29
179.51.121.0/24 maxlen: 24
191.102.0.0/20 maxlen: 24
2803:6700:3000::/40 maxlen: 48
2800:b40::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2300937 (0x231c09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b
Validity
Not Before: Aug 1 18:09:50 2023 GMT
Not After : Aug 2 18:09:50 2025 GMT
Subject: CN=6839c80737429f8f9a15bf6054e68fb16d30f5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4e:dd:08:f0:bf:3d:c1:d7:78:41:2b:2a:d6:
9c:7c:16:bf:56:81:fe:dc:c3:c6:84:8c:ca:d7:bf:
7d:4e:e7:c1:52:c9:b2:14:f7:e4:ea:e9:15:be:90:
21:eb:7d:8a:df:5b:62:65:e5:cc:31:f7:30:15:c9:
bb:2c:24:90:f4:11:49:e6:e2:6f:95:3c:41:3b:65:
d2:88:47:d1:ca:43:2d:90:0a:58:68:c8:a1:cc:c1:
95:33:26:3d:27:79:a9:1d:38:7d:1f:61:55:38:8a:
16:26:54:3e:87:3f:fa:0b:ad:c8:32:54:a8:64:27:
d7:c5:c5:0b:96:05:42:ac:7b:20:f1:b7:a2:52:69:
6b:e2:72:0d:8c:5d:a4:74:1d:38:c8:2b:7f:37:2e:
49:3f:77:25:13:c2:34:aa:fe:f9:89:34:14:1e:b9:
10:04:63:f7:b6:07:3c:04:fe:8f:ca:84:99:18:31:
66:9b:be:4f:ac:fe:1e:dc:13:7d:c7:10:b5:a4:f6:
a5:e7:1b:51:98:2c:1c:68:3b:93:4a:99:3a:53:b0:
27:01:f9:04:1a:6c:22:07:c6:0d:f6:50:e9:9c:d6:
d0:04:c1:1b:c1:f4:89:18:cc:a1:a7:72:13:64:42:
43:5d:66:4c:eb:cd:af:ed:de:ea:5e:7e:8e:5c:1f:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:60:27:D0:0A:C0:CC:86:00:F7:3B:6E:79:FC:51:61:8E:BC:87:6A
X509v3 Authority Key Identifier:
keyid:C6:04:49:3B:FF:C3:07:89:21:D3:5E:06:41:B2:53:0C:47:7D:0C:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/6839c80737429f8f9a15bf6054e68fb16d30f5db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6b412625-33c0-4dfc-89aa-c6479ade913b/f3b9a4e06fcbd0ca9dfc518a114b8ada140fc71b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.120.0/22
179.51.113.0/24
179.51.117.0/24
179.51.121.0/24
181.225.80.0/24
190.7.112.0/20
191.102.0.0/20
IPv6:
2800:b40::/32
2803:6700:3000::/40
Signature Algorithm: sha256WithRSAEncryption
06:2d:23:20:fb:fc:72:dc:6b:4b:dc:39:a4:5e:00:0f:b0:a8:
be:72:d6:1f:37:a7:c3:02:cb:6a:e9:5c:ec:0b:af:b5:34:c6:
2a:5b:39:60:8e:77:a0:8a:ce:5b:cd:33:a0:59:ac:a8:33:f7:
f5:65:3b:3c:c3:5c:53:2d:e7:4f:04:6f:17:1f:e6:82:3b:91:
f1:35:18:ae:e7:38:04:f4:44:01:75:ed:fd:76:1e:d7:17:56:
f9:66:63:21:a6:f3:e3:c3:c9:76:21:d6:fa:d1:35:ce:da:1a:
c2:35:ad:6e:df:67:91:fa:57:8c:4e:aa:a9:df:c6:69:2d:ba:
57:40:78:20:73:40:58:7f:61:e1:a3:86:6e:63:47:1d:63:f0:
a8:5a:fb:58:62:1b:6b:e9:9d:32:21:af:10:2c:3f:b9:34:50:
18:e2:55:25:f4:42:94:84:e9:80:bb:bf:12:f2:ec:43:d0:d2:
4e:fd:b0:50:af:b3:b6:41:38:1c:a8:e7:c1:c3:22:74:19:33:
f6:06:da:77:28:da:24:9a:ca:38:e2:be:c3:66:7b:45:fe:97:
6b:cf:1c:58:16:36:5c:22:70:5b:3f:ac:95:5d:ca:ca:93:4c:
a0:37:e8:63:ee:1b:7b:74:65:8f:42:61:bd:6d:f8:41:10:a8:
7d:e8:8a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:49 2024 by rpki-client on console-fra.rpki-client.org