Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/cc176bee57afc718f30d22639273eb7aa4bab6ef.roa
File: cc176bee57afc718f30d22639273eb7aa4bab6ef.roa (raw, json)
Hash identifier: 0fIAlWv9KQetlJ/TI81y5JtQtGcK/5BSO7egsICg7gw=
Subject key identifier: E3:41:D9:37:6E:F7:7F:46:7A:11:53:49:52:66:D7:93:77:CD:E6:14
Certificate issuer: /CN=99a6fc41bdae0a6a4945c4018c1d95c871e31e3c
Certificate serial: 1EF602
Authority key identifier: 11:80:E3:67:E8:52:18:E4:8E:D9:F4:9E:83:F1:05:C6:71:33:C9:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/cc176bee57afc718f30d22639273eb7aa4bab6ef.roa
Signing time: Mon 04 Mar 2024 21:11:52 +0000
ROA not before: Mon 04 Mar 2024 21:11:52 +0000
ROA not after: Wed 04 Mar 2026 21:11:52 +0000
asID: 262216
IP address blocks: 190.113.224.0/21 maxlen: 21
190.113.224.0/24 maxlen: 24
190.113.225.0/24 maxlen: 24
190.113.226.0/24 maxlen: 24
190.113.227.0/24 maxlen: 24
190.113.228.0/24 maxlen: 24
190.113.229.0/24 maxlen: 24
190.113.230.0/24 maxlen: 24
190.113.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2029058 (0x1ef602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a6fc41bdae0a6a4945c4018c1d95c871e31e3c
Validity
Not Before: Mar 4 21:11:52 2024 GMT
Not After : Mar 4 21:11:52 2026 GMT
Subject: CN=cc176bee57afc718f30d22639273eb7aa4bab6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fb:e5:57:56:3b:5d:fc:89:13:ac:15:76:74:
78:65:cd:da:fd:26:3c:52:9e:69:ff:4c:a8:55:0d:
72:17:94:a3:9a:d1:3d:d2:04:38:bd:db:c4:d2:d7:
99:2d:2a:85:84:7d:0c:6e:d0:cd:5d:49:bd:04:68:
89:6e:03:bf:1c:86:f6:5c:a8:76:e3:66:70:a8:1e:
8f:a9:5d:f1:2a:3e:e7:43:92:39:3f:22:fc:99:9b:
e8:46:14:e5:f3:0a:dc:42:cd:96:5a:67:a7:fb:cd:
4b:ce:39:19:31:ec:84:1f:53:b1:9c:54:a8:8f:5f:
35:7f:0c:0c:60:6e:16:56:57:96:f9:2c:23:69:c0:
2c:9b:93:85:e1:5b:e5:fc:a4:9b:b4:d5:59:de:bf:
8e:23:3c:80:85:a8:49:d4:b4:8b:d9:b7:58:48:77:
cd:82:5f:86:9f:2e:59:59:61:fe:2f:97:e6:17:2a:
bb:a2:e0:b8:2d:b8:7f:2c:66:fa:d9:c5:3e:07:bf:
9f:6c:37:99:80:e3:47:ea:10:a4:4d:ed:da:d5:59:
c9:5c:cd:97:71:fa:aa:19:05:69:e6:b7:ca:9b:08:
ae:b3:c4:05:a2:95:5f:b2:25:a7:a6:4e:c8:74:7a:
ec:eb:c6:06:a0:df:31:7b:f1:a1:a8:84:a8:d2:17:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:41:D9:37:6E:F7:7F:46:7A:11:53:49:52:66:D7:93:77:CD:E6:14
X509v3 Authority Key Identifier:
keyid:11:80:E3:67:E8:52:18:E4:8E:D9:F4:9E:83:F1:05:C6:71:33:C9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/cc176bee57afc718f30d22639273eb7aa4bab6ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/912a6a61-dc53-42e8-a2a9-3c31282cbdff/99a6fc41bdae0a6a4945c4018c1d95c871e31e3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.113.224.0/21
Signature Algorithm: sha256WithRSAEncryption
0f:be:b4:1c:4c:dd:74:ba:cf:4a:a8:8a:36:36:6e:a5:01:d4:
bc:9f:1e:bb:e8:05:24:72:93:2e:e5:d3:ce:c3:d5:9d:3a:1e:
86:d0:95:e9:ff:22:18:6b:59:9b:39:65:66:0c:c1:be:6c:ff:
39:4a:d2:2d:7b:68:bf:d1:4c:bb:9c:0c:15:e8:ff:d5:4d:5d:
0c:13:4e:ef:8a:58:dd:0b:5a:36:96:81:eb:42:48:1f:4c:a0:
5e:9e:8b:c9:27:b6:45:9d:0d:78:78:c1:04:65:cf:8e:8c:33:
c3:20:50:77:2c:8a:51:0e:64:40:78:30:95:31:7a:b6:a7:d3:
7d:ef:a3:ff:a9:a5:51:30:da:c3:f6:d0:a0:9b:e8:76:c1:14:
df:a0:7b:e0:8a:2e:d0:42:83:37:ad:9e:ad:86:14:d5:38:db:
72:33:5b:cd:08:07:e2:0d:89:08:11:35:6e:cb:9c:68:90:c6:
05:f1:3d:14:ff:6c:3a:f6:89:4c:ec:28:49:6c:98:e7:24:6e:
a0:0d:66:f5:22:6d:f3:50:88:02:71:41:6c:9e:c5:db:a0:2f:
fd:da:5a:df:8f:ed:64:6c:5e:b2:a1:97:d8:bb:da:2d:f8:63:
d9:6b:f8:ed:73:ed:f9:1b:e1:d4:13:82:4e:85:6c:41:44:72:
00:7b:ad:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:40 2024 by rpki-client on console-ams.rpki-client.org