Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/ee0a94e00fe1270a82801feeb2afeefe83729882.roa
File: ee0a94e00fe1270a82801feeb2afeefe83729882.roa (raw, json)
Hash identifier: aZ4fEQxVqilK4xJqaxtRhIVszkefU6ggi4Nn6jXjPxY=
Subject key identifier: 84:4C:ED:70:B2:F7:61:5F:15:7D:B1:29:F2:FD:1A:7F:11:7F:D9:33
Certificate issuer: /CN=d21f7315b565f88e18de69169de5a1119c25988f
Certificate serial: 0D346F
Authority key identifier: 9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/ee0a94e00fe1270a82801feeb2afeefe83729882.roa
Signing time: Wed 24 Mar 2021 14:45:26 +0000
ROA not before: Wed 24 Mar 2021 14:45:26 +0000
ROA not after: Tue 24 Mar 2026 14:45:26 +0000
asID: 52468
IP address blocks: 186.148.108.0/22 maxlen: 24
186.148.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865391 (0xd346f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21f7315b565f88e18de69169de5a1119c25988f
Validity
Not Before: Mar 24 14:45:26 2021 GMT
Not After : Mar 24 14:45:26 2026 GMT
Subject: CN=ee0a94e00fe1270a82801feeb2afeefe83729882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:14:2c:0b:56:3f:48:3a:46:b4:ea:57:46:
81:7e:74:53:4c:e9:c6:ba:fc:2d:cb:11:a1:23:f3:
d3:46:4e:90:6d:ba:a1:35:70:a1:8c:cf:7e:37:16:
ff:9d:b7:51:74:18:8f:ff:6c:c1:6c:14:f5:38:38:
a6:05:d5:2c:13:8c:52:5f:b4:d7:b6:c6:f3:89:fb:
2a:3b:fa:40:ba:52:4e:5d:d9:cc:43:66:48:13:0c:
44:82:89:98:52:96:f3:25:94:7d:62:e4:dc:1a:f3:
67:89:a5:c5:62:fc:cf:a2:99:c5:19:dd:84:95:c8:
74:6d:42:6f:c2:30:83:c8:db:1a:31:a4:bd:fd:11:
2d:e4:20:49:11:0f:f0:58:aa:0d:3e:d7:3a:d3:e4:
92:ad:50:69:db:fb:67:39:ea:d0:94:b9:5a:50:c7:
b8:08:e3:b3:ee:80:bf:97:17:55:33:87:e7:9f:c2:
62:f5:ca:2c:bc:0c:b7:9e:8d:7f:4f:0d:3f:ed:7e:
69:d9:e9:e3:d8:5f:f6:a3:42:59:47:b1:7d:4d:f3:
d1:40:da:e9:fb:04:3d:63:0d:80:87:69:b3:40:2a:
66:9b:e0:e4:4a:3b:4f:ae:b8:b2:3b:51:cd:b9:fb:
f4:9a:ef:5a:ce:67:df:62:c9:92:35:2a:6c:f6:c8:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:4C:ED:70:B2:F7:61:5F:15:7D:B1:29:F2:FD:1A:7F:11:7F:D9:33
X509v3 Authority Key Identifier:
keyid:9A:0B:7E:6F:2B:9E:A4:D9:78:9C:53:3D:D2:BE:7E:AD:01:C6:2D:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d21f7315b565f88e18de69169de5a1119c25988f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/ee0a94e00fe1270a82801feeb2afeefe83729882.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7026ef52-79b0-4fc9-b4fe-006e1d7be606/d21f7315b565f88e18de69169de5a1119c25988f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.148.105.0/24
186.148.108.0/22
Signature Algorithm: sha256WithRSAEncryption
45:76:74:68:0f:ae:42:85:9c:fd:30:1d:f4:06:11:29:ee:cc:
3d:73:b7:ea:5b:3e:55:78:a4:7a:09:7a:71:ea:8a:20:a1:4c:
80:9d:d4:85:a1:1a:ad:fc:88:95:a3:32:04:66:04:e4:b9:ec:
6b:5b:97:22:90:79:0e:24:8e:78:9b:a9:cf:b5:37:a0:45:10:
92:e6:da:0b:35:9b:8d:a1:1c:65:c1:7b:d7:cf:cc:af:d4:7e:
5a:b9:07:2b:99:b6:75:53:e5:da:aa:66:57:1f:55:b7:b9:14:
4f:fc:ec:94:7d:e7:9d:6c:3e:62:64:05:98:38:66:74:88:0e:
25:c4:ca:b4:c5:7c:78:62:ae:aa:38:56:ee:78:ea:b7:38:9d:
ac:dd:e2:81:1c:f7:bc:d8:46:c5:f5:dc:ce:0c:b9:b0:44:e1:
76:bb:ad:cc:05:35:64:2f:31:c1:99:8f:37:4d:b7:59:a5:ee:
37:45:43:fc:10:8a:7d:9d:2c:13:fe:50:87:fc:d3:54:fc:d8:
4b:8b:de:73:1c:88:da:2a:e0:18:bb:0f:45:79:96:d3:2e:d1:
84:69:07:65:f5:d4:75:c9:76:71:f1:98:27:78:ed:2e:32:0d:
8b:88:56:fb:b9:ca:56:99:36:cd:67:a6:32:09:9e:fd:8f:d6:
99:99:d0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-ams.rpki-client.org