Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/d336f54fa3fd1ca7427361b33bd5993c8f3ae613.roa
File: d336f54fa3fd1ca7427361b33bd5993c8f3ae613.roa (raw, json)
Hash identifier: 4LB1jRkZgIA1mT7GOQbXShwhiUny4uKdC+J7102ruAA=
Subject key identifier: EE:0D:91:4C:92:52:BA:CE:8A:17:CF:15:F6:70:E5:6D:0A:4B:8E:38
Certificate issuer: /CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Certificate serial: 0BB9EA
Authority key identifier: 7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/d336f54fa3fd1ca7427361b33bd5993c8f3ae613.roa
Signing time: Wed 24 Mar 2021 14:34:05 +0000
ROA not before: Wed 24 Mar 2021 14:34:05 +0000
ROA not after: Tue 24 Mar 2026 14:34:05 +0000
asID: 52439
IP address blocks: 131.161.201.0/24 maxlen: 24
131.161.202.0/23 maxlen: 24
143.208.52.0/22 maxlen: 24
170.82.224.0/22 maxlen: 24
179.63.244.0/22 maxlen: 24
190.113.244.0/22 maxlen: 24
201.218.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 768490 (0xbb9ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
Validity
Not Before: Mar 24 14:34:05 2021 GMT
Not After : Mar 24 14:34:05 2026 GMT
Subject: CN=d336f54fa3fd1ca7427361b33bd5993c8f3ae613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:2a:ea:55:60:d3:48:dd:17:15:67:5b:08:
69:55:0d:f1:82:ee:41:d3:d3:c8:5a:de:3c:5b:9b:
fc:7b:50:f1:ca:dd:31:0c:16:58:c4:e9:cd:28:b8:
76:35:f2:ef:b0:bb:0a:da:d2:da:25:df:5b:1a:01:
96:a0:ee:af:03:63:8c:cd:20:4a:be:83:9b:b1:ed:
59:8e:d2:17:c0:bf:db:58:91:51:59:f1:7b:ff:48:
2c:10:9e:bf:67:6c:2e:55:94:c2:a8:5d:d7:7d:70:
5b:4b:d2:15:95:69:85:b4:42:ab:e2:b2:c1:dc:69:
a4:e0:d5:cb:57:bd:bc:68:22:ab:9e:28:8d:dd:0b:
da:f2:81:6c:52:d1:d9:8b:22:57:23:58:29:e3:8a:
31:a3:e3:21:4a:19:b6:15:81:01:7d:b2:29:1d:cc:
d1:a5:b7:d2:d3:37:d7:76:92:d2:af:0f:ca:7a:b0:
7f:3e:26:08:d3:05:9e:18:e0:c8:d5:01:e9:6b:d4:
2c:ca:92:90:2e:b7:85:2d:16:e1:38:8a:a5:dd:a7:
f8:eb:b9:f8:57:55:7e:08:16:71:39:62:35:22:07:
b6:4e:4c:aa:56:c9:9e:5f:f6:0b:e0:f2:12:f6:29:
97:40:f0:19:1c:1a:12:91:85:47:f0:2a:2c:23:a1:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0D:91:4C:92:52:BA:CE:8A:17:CF:15:F6:70:E5:6D:0A:4B:8E:38
X509v3 Authority Key Identifier:
keyid:7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/d336f54fa3fd1ca7427361b33bd5993c8f3ae613.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.201.0-131.161.203.255
143.208.52.0/22
170.82.224.0/22
179.63.244.0/22
190.113.244.0/22
201.218.128.0/19
Signature Algorithm: sha256WithRSAEncryption
6c:62:60:5b:1c:d4:b3:67:29:e6:9b:db:23:04:c7:52:9a:7b:
b3:72:4f:45:70:1c:28:c6:02:c0:aa:2e:b6:e2:94:b2:6b:4c:
b4:48:31:3a:e7:7f:58:de:47:bb:7a:03:ad:6b:9f:1e:a3:f2:
6b:88:89:6c:78:3d:2a:8b:a9:f9:e4:dd:ef:f3:ed:ba:a5:23:
ff:c5:7a:b6:a7:65:83:ce:8d:1c:b7:fe:56:f5:cb:d2:80:6c:
e2:d8:8c:8b:b3:35:37:5a:0b:2b:73:03:18:13:59:36:4f:fa:
6d:3c:71:4f:37:b4:29:96:df:19:a5:7e:6a:f9:1e:5d:63:fb:
e7:2a:b2:ff:c3:e9:7c:67:97:e2:23:59:45:e3:d5:24:ac:0f:
af:f8:a7:ab:85:10:52:5d:39:5c:e2:e1:4c:19:7c:af:5b:25:
0f:c0:6a:d1:b9:23:5b:76:29:b0:22:35:ea:63:0e:02:af:2f:
97:96:54:2c:30:ba:44:45:2f:82:53:53:fb:2e:20:ca:e8:da:
3e:e6:97:bc:8e:a3:20:28:25:ab:98:40:56:fe:5b:7f:1c:97:
61:e3:10:f3:e0:6e:98:70:83:97:fa:2c:55:d9:10:b7:b2:da:
09:6c:20:5c:76:b2:34:d1:df:84:28:96:1e:39:31:e9:71:05:
db:4a:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org