Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/b6e3517be95ae113dfab6b372c370fdb7e3e7439.roa
File: b6e3517be95ae113dfab6b372c370fdb7e3e7439.roa (raw, json)
Hash identifier: MR3539xJYvMHSL+o5SjctxsF9j3NIHGp8vm4MbObXi8=
Subject key identifier: E4:53:7C:38:29:B7:44:BD:92:2E:33:32:83:0A:72:F9:2D:EF:11:8A
Certificate issuer: /CN=703bede159efdf3fd85e6b49bded6c79dc525307
Certificate serial: 23ADC0
Authority key identifier: 79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/b6e3517be95ae113dfab6b372c370fdb7e3e7439.roa
Signing time: Mon 25 Sep 2023 15:28:12 +0000
ROA not before: Sun 24 Sep 2023 15:28:11 +0000
ROA not after: Thu 25 Sep 2025 15:28:11 +0000
asID: 27891
IP address blocks: 150.187.148.0/24 maxlen: 24
150.187.178.0/24 maxlen: 24
150.189.48.0/21 maxlen: 21
150.187.141.0/24 maxlen: 24
150.187.142.0/24 maxlen: 24
150.187.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2338240 (0x23adc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703bede159efdf3fd85e6b49bded6c79dc525307
Validity
Not Before: Sep 24 15:28:11 2023 GMT
Not After : Sep 25 15:28:11 2025 GMT
Subject: CN=b6e3517be95ae113dfab6b372c370fdb7e3e7439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:98:69:b8:40:90:eb:3a:f0:1b:0c:db:dc:c6:
4a:27:e3:07:32:0e:c4:88:bc:d8:15:6c:f1:6e:0c:
5a:22:0f:0b:47:57:67:0c:e4:1b:00:3b:d4:6e:fd:
89:bd:cf:cc:62:f0:7b:a7:cc:ba:b9:dd:59:86:ae:
f0:bc:93:e9:5d:f2:1e:9c:cb:46:a3:ef:d3:7c:20:
29:75:7e:87:ab:e2:3f:f0:e6:dd:b5:79:3d:bf:1a:
6b:12:8d:da:06:e7:5c:17:21:9b:ac:ec:a5:08:5f:
e7:1e:36:ad:03:1d:dd:68:05:60:c2:48:8d:56:c6:
17:67:6e:2f:30:6f:55:bb:99:b2:2f:66:b3:c2:76:
51:c6:8b:87:2e:3f:7a:c4:e3:6e:68:50:ae:7e:91:
1a:fa:97:cb:0a:ff:fb:d4:e5:6d:27:2b:40:a8:c4:
46:27:ee:84:d6:67:fa:6e:cc:89:ec:94:1c:28:49:
52:b0:9d:16:78:29:79:14:5d:77:27:5e:dd:f1:55:
c1:80:ed:cd:6a:49:92:2e:c1:eb:e7:e1:a3:41:08:
16:48:92:3c:e4:fc:b8:08:fc:f5:f7:40:84:20:f2:
d0:29:8f:2b:90:69:74:86:83:97:d8:66:16:11:74:
49:79:d8:e4:21:f8:93:d0:3e:e7:66:8e:f8:d4:c9:
89:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:53:7C:38:29:B7:44:BD:92:2E:33:32:83:0A:72:F9:2D:EF:11:8A
X509v3 Authority Key Identifier:
keyid:79:AC:9F:BD:47:3B:40:BC:06:D0:F0:51:2E:42:4D:ED:6B:2A:88:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/703bede159efdf3fd85e6b49bded6c79dc525307.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/b6e3517be95ae113dfab6b372c370fdb7e3e7439.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9b6bc150-defb-419a-aaa1-a5a359542a85/703bede159efdf3fd85e6b49bded6c79dc525307.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.187.141.0-150.187.142.255
150.187.145.0/24
150.187.148.0/24
150.187.178.0/24
150.189.48.0/21
Signature Algorithm: sha256WithRSAEncryption
22:2e:57:e0:ae:d2:95:a9:39:ac:15:bd:f1:cb:cb:34:a6:21:
b2:4f:5b:fa:01:6d:0a:32:78:0c:12:a3:60:ca:81:c1:c6:1c:
47:2a:d8:61:56:8b:3b:d9:1d:62:13:a3:fe:f6:26:a3:01:4a:
61:99:c9:ae:5f:ab:b3:16:bd:ab:67:92:18:f5:34:e7:5d:14:
4d:fb:3f:32:de:f4:63:7a:ee:26:e4:42:41:bc:51:66:8e:dc:
b8:76:ff:7d:76:32:39:04:76:33:91:a4:8f:a2:42:14:7a:13:
2a:a7:15:21:c2:1e:2f:0b:e6:17:ff:cb:4e:15:1d:d6:6e:4e:
c4:41:74:7c:e9:a2:f4:95:a7:4f:1d:54:36:9e:17:46:7b:95:
c3:e9:4c:04:b0:6d:7f:ed:9f:4b:07:eb:cd:78:4d:cb:f1:b1:
2d:ca:35:63:8e:89:39:a3:63:ce:ff:36:00:02:a1:3c:4c:5c:
dd:ea:24:6e:40:f4:9b:d6:23:20:05:54:2c:1e:a3:3b:9f:79:
e5:56:5c:5c:54:50:b2:a3:94:97:97:a5:9f:dd:16:53:9e:7c:
47:e5:c0:24:63:eb:21:1b:a1:79:04:1c:1b:53:aa:cd:27:8a:
6f:2d:1c:56:82:41:b7:4c:07:15:de:e0:04:7c:4a:f5:c7:26:
26:34:3d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:42 2024 by rpki-client on console-ams.rpki-client.org