Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/1df12b96861e312a14e092e195cc3ab76f7ce575.roa
File: 1df12b96861e312a14e092e195cc3ab76f7ce575.roa (raw, json)
Hash identifier: jSYVSZA/SthCDpIKmO4eGZ/PqXGGjcVe7wgapUbCYyQ=
Subject key identifier: 92:62:B0:D6:E2:3B:27:07:BD:33:40:75:F2:A6:F3:1D:63:90:69:50
Certificate issuer: /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial: 08DA77
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/1df12b96861e312a14e092e195cc3ab76f7ce575.roa
Signing time: Wed 30 Aug 2023 17:31:46 +0000
ROA not before: Tue 29 Aug 2023 17:31:45 +0000
ROA not after: Sat 30 Aug 2025 17:31:45 +0000
asID: 3816
IP address blocks: 186.121.64.0/19 maxlen: 20
181.192.128.0/17 maxlen: 17
186.121.96.0/20 maxlen: 20
186.121.0.0/18 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 580215 (0x8da77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Validity
Not Before: Aug 29 17:31:45 2023 GMT
Not After : Aug 30 17:31:45 2025 GMT
Subject: CN=1df12b96861e312a14e092e195cc3ab76f7ce575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3c:ff:f1:06:df:86:14:69:92:30:3e:fa:a3:
55:62:a2:c6:a2:ff:fb:fb:1a:c1:8e:12:eb:c6:7e:
d4:bb:fe:3e:c3:ea:24:1c:39:7d:51:9a:93:c2:8a:
51:64:25:c9:34:c9:30:14:87:de:a5:eb:f1:ce:75:
5e:ae:5e:2b:34:67:c1:db:de:50:52:b6:2d:30:00:
2f:59:36:11:c5:2e:14:94:2e:c7:cb:76:f3:ec:0b:
58:61:e6:f2:aa:72:ed:37:5a:7b:ff:6d:b1:ee:b8:
86:e3:41:82:0a:14:bd:3a:5c:94:a0:0b:9e:d3:c6:
41:dc:47:17:01:2d:cc:b0:2d:85:d0:78:84:e3:c4:
84:da:cd:c3:ad:b3:b8:d0:62:a2:a3:29:9f:96:69:
43:53:16:3c:21:9d:62:83:34:19:1e:43:a2:c2:62:
47:07:4b:0a:6c:9e:47:76:14:64:30:5b:74:8d:17:
8c:99:9f:da:43:c2:45:0e:9d:4e:5f:30:3d:88:0a:
81:04:96:d0:ef:d8:72:bc:55:36:bd:2e:e3:6c:3f:
79:60:c9:d4:9c:fd:88:ed:aa:b6:fe:d7:9f:2d:87:
ca:a5:50:cf:88:81:3a:15:32:b6:30:ea:63:37:fc:
43:30:1e:df:df:b8:51:c7:39:8d:79:a1:b5:92:40:
23:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:62:B0:D6:E2:3B:27:07:BD:33:40:75:F2:A6:F3:1D:63:90:69:50
X509v3 Authority Key Identifier:
keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/1df12b96861e312a14e092e195cc3ab76f7ce575.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.192.128.0/17
186.121.0.0-186.121.111.255
Signature Algorithm: sha256WithRSAEncryption
12:62:cf:7a:77:95:d0:8b:ad:1b:02:a5:24:14:c5:64:50:61:
d2:7b:57:d0:99:69:cd:50:2d:fe:b3:a1:4d:ee:13:93:d1:7b:
65:a5:70:12:0a:f1:08:74:ce:3c:12:10:80:21:90:19:b9:14:
9c:7c:25:35:71:60:39:f5:b7:45:e9:83:f3:b4:59:d7:eb:18:
93:ec:c7:16:25:4d:a5:a6:d4:57:92:a4:10:e4:b3:77:70:70:
16:0e:a8:09:77:55:a3:36:65:ef:d7:3f:fc:fc:97:e6:60:ec:
1a:8a:70:b8:f2:80:bf:90:5f:31:ab:61:cc:0f:97:1b:14:b7:
18:d1:28:85:9c:c1:16:f0:71:67:8e:58:50:b9:6a:54:49:c6:
dc:18:4a:26:59:1a:38:cd:10:bc:7a:46:21:8c:17:3d:f1:de:
19:74:46:11:47:0b:7b:28:bc:2f:b1:3d:ee:53:78:26:c8:f6:
45:15:50:2f:7e:92:37:d2:79:87:d2:70:64:22:3b:46:ae:0e:
67:90:7c:4b:82:9c:63:b6:4b:0e:10:75:e8:64:4f:2f:75:17:
a2:eb:03:74:7a:48:5d:fd:42:d1:05:60:7c:58:b9:a6:fe:50:
fe:22:a6:62:54:24:1a:20:50:a1:0a:dd:d7:81:0e:b4:64:86:
54:7e:38:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:41 2024 by rpki-client on console-ams.rpki-client.org