Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e5562c0-2858-459f-992d-0d5201218600/d28e3336fc48025f21c3aa682a1095287c37ffc4.roa
File: d28e3336fc48025f21c3aa682a1095287c37ffc4.roa (raw, json)
Hash identifier: bf+Ws8sexmWjD9yJBE4wwH4MZNQ0jIy2aXJQ95Rw03s=
Subject key identifier: 66:8D:B0:A6:34:3B:AB:75:4A:D0:77:69:A6:E3:68:11:A0:31:4F:59
Certificate issuer: /CN=cbad518d599bf9b6a5667130c010c70d326a5f9d
Certificate serial: 1DCD1B
Authority key identifier: 52:52:3D:FA:87:CA:58:5F:FA:87:B3:2C:E2:6B:5E:08:E8:05:78:64
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbad518d599bf9b6a5667130c010c70d326a5f9d.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9e5562c0-2858-459f-992d-0d5201218600/d28e3336fc48025f21c3aa682a1095287c37ffc4.roa
Signing time: Tue 28 Mar 2023 08:30:02 +0000
ROA not before: Mon 27 Mar 2023 08:30:02 +0000
ROA not after: Wed 26 Mar 2025 08:30:02 +0000
asID: 27930
IP address blocks: 131.221.24.0/22 maxlen: 24
190.14.216.0/21 maxlen: 24
2803:b80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1953051 (0x1dcd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbad518d599bf9b6a5667130c010c70d326a5f9d
Validity
Not Before: Mar 27 08:30:02 2023 GMT
Not After : Mar 26 08:30:02 2025 GMT
Subject: CN=d28e3336fc48025f21c3aa682a1095287c37ffc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:1d:29:d0:6a:e0:02:a3:98:33:cb:88:03:
5e:cf:7f:29:e3:32:ca:3c:23:ec:a9:f4:6d:ae:1a:
3b:64:e1:62:97:21:09:82:da:a4:b5:89:22:aa:af:
81:61:d5:c3:20:bb:93:a1:e7:bb:40:23:c3:40:15:
24:9e:dc:14:8f:01:a8:f1:ba:ab:5b:d2:59:ed:4f:
65:54:c5:41:1a:f9:92:ab:95:20:fc:16:bb:55:03:
3f:e2:67:32:ec:4a:ab:fd:3f:64:b7:6b:7a:38:ea:
3e:55:5d:b0:8f:13:7e:17:9d:1c:61:39:9d:49:6f:
d8:50:9c:a3:d6:ee:15:46:74:4c:f6:e2:af:a7:a8:
c7:d2:f5:a9:40:0e:c1:84:ee:39:9a:76:92:59:b4:
9d:a7:7b:51:90:80:56:2e:f9:81:ac:3e:0b:77:b6:
d5:1b:7b:e8:24:f6:45:60:61:a5:6a:3e:e2:01:12:
12:22:96:58:15:4e:4a:e6:03:a2:3a:a7:17:0f:9b:
5b:fe:88:a7:82:87:18:07:5f:37:e2:a2:86:b1:a9:
c4:47:d3:39:09:90:16:34:8f:59:bb:34:23:13:14:
4b:1a:4d:76:44:90:9d:d3:f5:aa:6f:3e:c2:00:e0:
33:38:6d:99:1d:23:fd:97:4f:b0:d3:8e:50:5f:6e:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8D:B0:A6:34:3B:AB:75:4A:D0:77:69:A6:E3:68:11:A0:31:4F:59
X509v3 Authority Key Identifier:
keyid:52:52:3D:FA:87:CA:58:5F:FA:87:B3:2C:E2:6B:5E:08:E8:05:78:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbad518d599bf9b6a5667130c010c70d326a5f9d.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e5562c0-2858-459f-992d-0d5201218600/d28e3336fc48025f21c3aa682a1095287c37ffc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9e5562c0-2858-459f-992d-0d5201218600/cbad518d599bf9b6a5667130c010c70d326a5f9d.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.24.0/22
190.14.216.0/21
IPv6:
2803:b80::/32
Signature Algorithm: sha256WithRSAEncryption
61:97:e0:81:46:0d:1d:f9:4b:bf:21:a6:32:30:6d:cb:1a:ef:
7c:1a:e5:1c:22:03:1e:2c:8a:0e:2c:20:f3:47:09:b1:11:48:
63:b3:0e:56:6f:8c:2d:af:23:c1:d1:92:bf:c9:e7:b4:cf:f8:
bc:a9:a5:6b:84:0b:f3:4f:9f:e5:77:08:f1:f0:c2:56:45:96:
25:db:b8:a5:0f:42:8b:3a:bf:aa:db:f4:f5:44:3f:33:1a:da:
22:98:3c:3f:3c:a6:4b:4b:19:45:c2:6a:89:51:8f:bc:1b:ea:
09:66:1a:a9:4a:39:72:a9:93:84:9b:4f:d2:1e:5b:a3:b1:2a:
43:fa:d7:b6:a0:ec:d7:80:a4:8a:89:83:38:28:c9:56:a1:77:
87:cc:39:c7:1c:c1:4f:12:17:11:6e:0c:3d:94:56:d3:75:0c:
21:15:c1:09:d5:19:6b:36:62:ad:39:15:bb:61:a8:47:09:c0:
e9:fe:d0:6f:59:d5:e4:09:f1:b8:c6:ce:59:75:23:af:68:51:
08:36:ef:df:9f:a7:24:12:57:bb:60:96:c8:14:18:e7:c9:36:
6f:01:37:3a:f9:1c:c2:15:f3:f5:d2:df:ae:b4:b5:f0:90:ab:
67:63:4d:d1:8e:60:f3:21:32:5f:ff:22:0f:f6:67:93:d9:a5:
8d:22:2c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:25 2024 by rpki-client on console-fra.rpki-client.org