Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/15b4dffd39581370b7d44c4fd8235c5bacfe4136.roa
File: 15b4dffd39581370b7d44c4fd8235c5bacfe4136.roa (raw, json)
Hash identifier: EtIM5VLnW2issyJ6TXlEAs/mp9dZEp+krWRSXpubyTw=
Subject key identifier: 69:D1:2A:8E:02:AF:71:59:16:C7:23:12:F1:21:04:9B:43:01:BE:D5
Certificate issuer: /CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Certificate serial: 1FD689
Authority key identifier: AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/15b4dffd39581370b7d44c4fd8235c5bacfe4136.roa
Signing time: Tue 25 Apr 2023 22:04:23 +0000
ROA not before: Mon 24 Apr 2023 22:04:20 +0000
ROA not after: Fri 25 Apr 2025 22:04:20 +0000
asID: 30167
IP address blocks: 201.174.30.0/23 maxlen: 24
201.174.245.0/24 maxlen: 24
201.174.43.0/24 maxlen: 24
201.174.44.0/24 maxlen: 24
201.174.100.0/24 maxlen: 24
201.174.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2086537 (0x1fd689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
Validity
Not Before: Apr 24 22:04:20 2023 GMT
Not After : Apr 25 22:04:20 2025 GMT
Subject: CN=15b4dffd39581370b7d44c4fd8235c5bacfe4136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:ca:2a:de:35:45:51:7c:de:3b:59:2a:c9:
8a:b6:0a:a3:cf:4f:b9:0a:ac:42:34:65:63:7f:46:
d5:20:7c:c7:ae:74:be:74:19:58:d8:ba:03:a8:41:
da:b2:a1:00:32:02:36:9f:e9:61:da:65:b3:55:14:
5d:2a:85:83:99:df:c4:13:ad:0f:4a:c9:b6:07:c0:
d2:31:e3:e2:28:e6:0e:10:18:3e:30:c7:c1:96:a1:
bd:41:7e:e3:d5:88:3e:3b:23:b3:ee:05:aa:36:f0:
26:c3:17:10:a6:9f:55:3a:ae:07:09:2d:e7:0f:9d:
ba:01:ca:92:85:8f:99:3c:e0:a4:ca:0e:de:9d:99:
f1:fb:00:b6:42:c6:5d:15:79:2b:34:27:14:80:eb:
ff:65:84:1b:61:51:68:47:11:df:14:a6:e3:26:53:
18:66:f8:30:f7:74:c3:0a:7d:05:53:bb:2e:18:c8:
31:08:a2:69:98:0c:26:67:ce:c3:ec:4b:cd:50:0f:
38:3d:81:98:6b:a7:04:1e:88:f3:1a:cc:56:e4:36:
f3:ea:0e:aa:8f:bf:73:ec:c0:56:10:9a:ee:25:81:
89:27:30:5a:1b:02:45:0b:c1:29:59:a8:57:a7:2c:
c2:5a:b6:92:f9:81:95:82:ea:2c:24:c7:2b:70:b8:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D1:2A:8E:02:AF:71:59:16:C7:23:12:F1:21:04:9B:43:01:BE:D5
X509v3 Authority Key Identifier:
keyid:AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/15b4dffd39581370b7d44c4fd8235c5bacfe4136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.174.30.0/23
201.174.43.0-201.174.44.255
201.174.100.0/24
201.174.106.0/24
201.174.245.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b6:db:1b:6a:9c:7a:83:2b:74:e2:fb:cf:2b:52:19:54:8d:
6d:28:a1:f9:64:ca:0d:07:db:af:ae:48:71:9d:76:ab:49:96:
82:24:d8:b1:14:d4:49:71:16:0f:58:41:e9:ed:f5:68:24:3f:
a6:9b:43:39:d0:15:16:4c:9e:ef:a4:6a:56:67:5e:d3:10:c0:
1f:79:a0:b8:d6:b1:69:c7:40:e1:2e:2a:96:cc:09:ff:eb:3f:
56:b1:58:0d:de:37:78:9f:87:26:5a:59:48:49:f4:dd:6c:7d:
57:96:67:37:95:83:c6:b1:19:ad:df:6f:91:14:0e:8f:d5:cb:
2c:e4:62:dd:de:80:a6:14:06:45:45:29:73:9b:47:00:51:2a:
94:10:69:a7:b0:e2:c1:ee:e2:b7:8c:94:eb:c9:32:17:2a:73:
08:1a:67:a2:c3:10:2c:a0:38:78:9a:f8:18:5c:c6:69:89:b4:
50:d2:80:4f:59:8a:2f:d3:e9:ec:75:e7:37:32:38:13:9d:db:
bb:0f:c2:5e:6b:ab:f2:34:17:fc:1d:47:54:d8:a8:92:81:de:
08:ee:56:28:65:55:87:1f:d9:dd:13:63:97:06:3f:0b:b0:ab:
2d:19:da:9e:2d:5b:4a:1a:8d:66:ab:cb:b8:97:e6:d0:ce:af:
bb:8b:5f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org