Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e87a0f6-055e-4863-ad1b-e293caa242b5/8b1164738ff0d1eab296f02253902741f208cadc.roa
File: 8b1164738ff0d1eab296f02253902741f208cadc.roa (raw, json)
Hash identifier: tDn61M4CD4HxHXve5h7m3jTUtFQK7O3os0bGSEHzMJ0=
Subject key identifier: CD:BC:CE:53:5F:90:A2:6B:F2:30:F3:B2:27:5C:7A:43:C6:1C:2F:D5
Certificate issuer: /CN=f66cc03791db423a5a679953b1acf1bf35bafe4a
Certificate serial: 0D617E
Authority key identifier: E8:D2:71:1B:4A:9A:7B:D3:BC:1D:15:06:6B:54:B1:91:67:CC:02:F6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f66cc03791db423a5a679953b1acf1bf35bafe4a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8e87a0f6-055e-4863-ad1b-e293caa242b5/8b1164738ff0d1eab296f02253902741f208cadc.roa
Signing time: Wed 24 Mar 2021 14:33:18 +0000
ROA not before: Wed 24 Mar 2021 14:33:18 +0000
ROA not after: Tue 24 Mar 2026 14:33:18 +0000
asID: 262213
IP address blocks: 168.197.88.0/22 maxlen: 24
181.225.140.0/22 maxlen: 24
181.225.144.0/21 maxlen: 24
190.6.120.0/21 maxlen: 24
190.112.48.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876926 (0xd617e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f66cc03791db423a5a679953b1acf1bf35bafe4a
Validity
Not Before: Mar 24 14:33:18 2021 GMT
Not After : Mar 24 14:33:18 2026 GMT
Subject: CN=8b1164738ff0d1eab296f02253902741f208cadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d1:fd:f7:57:2e:32:68:5b:55:04:ea:ca:e8:
26:dc:d1:6d:36:6e:51:87:d8:e3:46:d0:ee:56:22:
41:8a:d4:c1:b6:5f:ce:20:06:ab:85:5a:d4:71:bf:
08:0f:bb:eb:10:cb:16:45:3c:15:bb:66:b6:a0:a9:
4d:28:45:7b:08:03:a7:07:01:91:a7:29:60:c4:b9:
27:c7:3b:30:4e:e7:89:51:5d:bb:83:65:dc:49:c1:
e0:e6:b0:ee:a4:e0:86:3a:a9:80:8f:d4:f3:fc:2e:
d1:eb:02:7d:6f:c2:89:e3:d3:88:27:11:ee:66:6b:
e6:13:36:81:01:ac:7a:b9:91:e5:86:ff:06:af:af:
26:ef:c7:2b:f0:16:67:33:26:2a:8f:a0:96:5a:87:
9e:d8:8f:37:78:b8:b7:74:a8:a7:6e:b3:0e:cc:6f:
e8:97:99:fe:65:b9:d3:fc:10:8f:07:f5:77:62:0d:
af:d4:ad:80:9f:bf:79:28:f8:fc:5c:91:ff:c1:0b:
08:ab:40:7e:5a:1c:13:b5:39:fe:67:2a:7b:53:6e:
52:be:3f:58:82:aa:7d:82:93:a0:0e:a7:99:2b:6b:
c9:b5:a9:04:e5:b7:c4:23:bb:0e:5a:ca:f5:c2:ee:
98:49:16:10:00:d7:04:43:bb:90:0d:e1:d9:16:9a:
85:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BC:CE:53:5F:90:A2:6B:F2:30:F3:B2:27:5C:7A:43:C6:1C:2F:D5
X509v3 Authority Key Identifier:
keyid:E8:D2:71:1B:4A:9A:7B:D3:BC:1D:15:06:6B:54:B1:91:67:CC:02:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f66cc03791db423a5a679953b1acf1bf35bafe4a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e87a0f6-055e-4863-ad1b-e293caa242b5/8b1164738ff0d1eab296f02253902741f208cadc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8e87a0f6-055e-4863-ad1b-e293caa242b5/f66cc03791db423a5a679953b1acf1bf35bafe4a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.197.88.0/22
181.225.140.0-181.225.151.255
190.6.120.0/21
190.112.48.0/22
Signature Algorithm: sha256WithRSAEncryption
66:de:92:6c:69:83:78:a4:ed:c2:1a:12:e3:f0:c1:dc:3a:2f:
9b:11:72:63:38:0f:8a:f8:2e:6f:8c:b9:34:f1:69:92:5d:04:
29:f9:74:57:0f:93:e6:b4:7a:04:47:cd:7d:13:24:a1:ba:51:
a9:02:1d:34:3b:ea:7b:29:96:25:57:1b:22:f1:1f:af:3d:a8:
d0:dd:43:55:ca:5d:b2:47:21:b8:d6:59:20:87:37:05:3c:4a:
d8:0e:53:25:66:03:b2:47:01:58:21:76:cc:5d:2a:fd:28:b7:
59:57:1c:66:da:8c:c4:61:87:e3:fb:a9:73:7d:77:34:a0:b9:
2b:9d:02:34:54:68:76:91:dd:04:ee:7b:73:c1:63:a5:61:b8:
5e:21:7d:a6:66:6c:55:b7:48:92:c4:14:79:be:db:1a:07:d6:
db:11:18:cc:05:1e:0a:c0:b2:91:cb:b3:23:59:99:53:bd:26:
03:45:88:bf:d3:35:be:65:e5:f8:96:bd:fc:d9:5c:15:83:ad:
da:f6:5a:a8:ad:35:d3:86:ea:eb:05:7d:a3:d9:3a:25:fc:65:
51:f6:fe:e3:47:a6:19:21:b8:ae:ba:8a:1b:4c:74:8d:d4:02:
4e:1f:3f:13:79:44:b0:ff:44:c0:ec:b9:03:51:f8:37:43:91:
0d:76:da:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org