Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74ff42ae-66b9-4626-861f-7be7373ed857/ece0012ff6357ba4039131cd8c011e23ceb7461f.roa
File: ece0012ff6357ba4039131cd8c011e23ceb7461f.roa (raw, json)
Hash identifier: FW5bigHI21vO9B96flSd31NomICpRI6x01JRjFJK+gE=
Subject key identifier: 06:A1:08:52:29:76:6C:DA:D9:5F:C5:BE:E1:46:A4:64:9E:E8:00:93
Certificate issuer: /CN=feee3e454749ca0f5cea578d7d1753869e8123c1
Certificate serial: 12094B
Authority key identifier: D9:DA:B0:56:77:76:D3:CF:CE:1B:3C:6C:D3:D8:91:A8:C2:59:BE:96
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/feee3e454749ca0f5cea578d7d1753869e8123c1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/74ff42ae-66b9-4626-861f-7be7373ed857/ece0012ff6357ba4039131cd8c011e23ceb7461f.roa
Signing time: Sat 18 Nov 2023 07:30:01 +0000
ROA not before: Sat 18 Nov 2023 07:30:01 +0000
ROA not after: Mon 17 Nov 2025 07:30:01 +0000
asID: 16531
IP address blocks: 131.0.236.0/22 maxlen: 24
200.52.128.0/20 maxlen: 24
200.76.96.0/20 maxlen: 24
200.76.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1182027 (0x12094b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feee3e454749ca0f5cea578d7d1753869e8123c1
Validity
Not Before: Nov 18 07:30:01 2023 GMT
Not After : Nov 17 07:30:01 2025 GMT
Subject: CN=ece0012ff6357ba4039131cd8c011e23ceb7461f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:ea:8d:b9:73:4d:4a:c9:b6:4f:e9:43:98:
4a:b4:8e:cc:24:44:a5:d4:3f:d9:9a:5a:8c:e7:8b:
7b:cb:05:b0:72:b5:02:70:86:5f:22:f1:f6:c7:61:
af:16:8c:e8:ce:0b:f7:cf:f2:50:64:1f:ee:9e:a5:
5c:06:94:76:2d:05:ca:f8:d6:99:84:ff:1e:8b:0d:
e5:7d:8e:24:0a:bf:54:0c:ea:62:8f:c4:58:f2:1e:
f1:53:d6:b4:13:eb:a3:64:d6:8a:31:03:82:9f:0d:
9f:c4:32:fc:37:38:4b:50:f2:0f:79:78:bc:95:5e:
a1:07:d4:3e:95:a9:b6:89:fb:0b:9d:3a:cb:b8:dc:
4e:c8:8e:43:c8:c6:c8:09:b5:79:91:3c:2a:72:3a:
da:61:f1:4d:d1:e2:3a:6e:46:0b:72:f6:23:6e:b2:
f8:95:4e:86:46:82:dd:d0:a7:8f:28:fe:38:88:b1:
c3:7f:59:18:b1:59:b8:43:27:96:0b:37:03:5e:44:
43:a6:89:98:20:85:5e:cf:d4:3f:c7:64:5e:7b:40:
ca:24:c2:df:ed:30:49:09:a0:ec:bd:e1:3c:4f:33:
5c:a2:a2:e2:54:2b:bc:f6:3f:7b:96:b3:8b:dc:f2:
d8:69:37:d8:58:2e:15:d1:06:9d:7c:d0:72:c6:11:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A1:08:52:29:76:6C:DA:D9:5F:C5:BE:E1:46:A4:64:9E:E8:00:93
X509v3 Authority Key Identifier:
keyid:D9:DA:B0:56:77:76:D3:CF:CE:1B:3C:6C:D3:D8:91:A8:C2:59:BE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/feee3e454749ca0f5cea578d7d1753869e8123c1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74ff42ae-66b9-4626-861f-7be7373ed857/ece0012ff6357ba4039131cd8c011e23ceb7461f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/74ff42ae-66b9-4626-861f-7be7373ed857/feee3e454749ca0f5cea578d7d1753869e8123c1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.0.236.0/22
200.52.128.0/20
200.76.96.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:81:56:09:a3:54:36:96:2b:15:e6:21:02:43:77:57:7d:41:
83:5e:7e:15:c9:21:81:d7:a4:fb:a8:e2:ca:db:ed:02:7a:b1:
be:c3:80:75:a2:f1:2e:ba:f9:05:d0:73:d3:ef:1b:9f:be:1a:
e4:31:56:72:55:fd:84:a3:af:34:da:8b:e6:f2:85:ea:0b:ec:
17:8d:82:18:ca:1a:19:f0:3f:a8:c7:52:24:d0:64:38:96:c5:
2e:0e:de:b9:5e:49:16:d2:27:b5:5d:26:ab:5e:c9:cc:c7:1e:
13:1e:15:36:0f:3a:5c:f5:cc:46:3e:d8:de:10:76:ba:e3:41:
f9:fe:84:1d:f8:d1:14:a2:a6:5f:07:e6:8c:0f:fb:bf:7d:3a:
88:2a:a2:0c:d4:4a:f7:76:26:92:60:7b:27:7d:87:5b:c9:91:
ae:89:4c:d3:03:4a:37:4e:af:8b:56:31:b5:0d:ae:7f:b1:9d:
b2:9e:28:92:8d:85:8c:71:aa:b9:6c:42:e0:a7:8a:ef:15:8f:
b7:d1:71:8b:fb:5d:58:27:13:83:6b:9a:c3:bc:fb:79:4d:cb:
42:43:b9:37:26:e0:96:46:84:b7:9c:05:c0:da:02:45:01:c1:
63:1e:24:1e:75:29:9e:b2:80:5d:7a:0a:78:f6:ce:8b:61:1d:
d3:92:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:38 2024 by rpki-client on console-ams.rpki-client.org