Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/111343d87c749d14a07ec2f1671b756fec0a9a8b.roa
File: 111343d87c749d14a07ec2f1671b756fec0a9a8b.roa (raw, json)
Hash identifier: SLC5PP8BRnG4gtIcilZ02QWzogR/weWO4Z3+ye+/anw=
Subject key identifier: 98:89:D1:6C:B8:A7:60:30:C4:DC:DC:D6:B2:71:89:55:6C:7D:5D:BD
Certificate issuer: /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial: 1E4F44
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/111343d87c749d14a07ec2f1671b756fec0a9a8b.roa
Signing time: Tue 09 May 2023 00:19:37 +0000
ROA not before: Mon 08 May 2023 00:19:37 +0000
ROA not after: Fri 09 May 2025 00:19:37 +0000
asID: 18734
IP address blocks: 201.148.16.0/24 maxlen: 24
189.202.211.0/24 maxlen: 24
189.202.229.0/24 maxlen: 24
189.202.128.0/17 maxlen: 24
189.202.144.0/24 maxlen: 24
189.202.248.0/24 maxlen: 24
189.202.251.0/24 maxlen: 24
189.202.252.0/24 maxlen: 24
200.57.8.0/24 maxlen: 24
200.57.10.0/24 maxlen: 24
189.204.235.0/24 maxlen: 24
189.204.236.0/24 maxlen: 24
189.204.250.0/24 maxlen: 24
189.202.248.0/23 maxlen: 24
189.204.200.0/24 maxlen: 24
200.57.16.0/20 maxlen: 24
201.148.0.0/18 maxlen: 24
201.148.64.0/19 maxlen: 24
189.204.128.0/17 maxlen: 24
168.197.120.0/22 maxlen: 24
200.33.74.0/24 maxlen: 24
200.33.84.0/24 maxlen: 24
201.140.80.0/20 maxlen: 24
201.140.96.0/19 maxlen: 24
200.57.0.0/20 maxlen: 24
189.202.181.0/24 maxlen: 24
189.202.182.0/24 maxlen: 24
138.122.144.0/22 maxlen: 24
189.202.179.0/24 maxlen: 24
189.202.222.0/24 maxlen: 24
2001:1278:e::/47 maxlen: 48
2001:1278:5::/48 maxlen: 48
2001:1278:6::/47 maxlen: 48
2001:1278:8::/45 maxlen: 48
2001:1278::/32 maxlen: 48
2001:1278:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1986372 (0x1e4f44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Validity
Not Before: May 8 00:19:37 2023 GMT
Not After : May 9 00:19:37 2025 GMT
Subject: CN=111343d87c749d14a07ec2f1671b756fec0a9a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:26:e9:dc:95:0c:e1:68:35:f5:5c:8a:6a:
80:9a:80:7c:be:8d:8c:1c:f5:dc:bb:49:08:4c:7f:
ef:af:b2:46:ba:c5:14:f3:0c:ba:c2:aa:48:3d:03:
4c:01:ab:2b:24:03:f0:a0:7e:d8:5e:93:cd:e1:4b:
3d:9d:d7:a7:18:5e:cb:b1:41:bf:9d:43:fd:0e:db:
99:f6:4f:61:d0:0e:cf:e1:82:3f:5e:73:28:a0:7e:
86:c2:71:91:11:10:af:06:95:9c:2a:11:e5:ba:43:
5f:17:79:09:b8:f1:7a:53:5f:14:34:21:36:23:f6:
37:98:6c:24:62:cc:20:4c:d5:2d:36:60:d0:12:d1:
15:a6:0b:5f:d1:ee:6a:b6:8f:ff:85:9d:e2:cf:3e:
be:29:1e:f0:ba:34:cf:27:f6:3d:16:fb:fa:f8:1a:
26:d2:3b:9c:45:02:da:7b:50:42:e6:4b:d8:2d:7b:
a9:28:5a:bf:85:97:c7:db:3c:7a:8d:9c:d2:24:24:
4d:b7:00:ba:39:5a:27:9a:dd:40:71:7f:83:3a:cf:
cb:8a:5b:a8:e1:c8:1b:88:d5:1e:65:5d:32:f7:18:
d4:89:11:ac:75:e1:24:15:7d:29:1c:ef:2f:29:7b:
0a:1d:b3:f2:74:5b:7a:e1:d5:f7:1d:9c:1f:20:bc:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:89:D1:6C:B8:A7:60:30:C4:DC:DC:D6:B2:71:89:55:6C:7D:5D:BD
X509v3 Authority Key Identifier:
keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/111343d87c749d14a07ec2f1671b756fec0a9a8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.144.0/22
168.197.120.0/22
189.202.128.0/17
189.204.128.0/17
200.33.74.0/24
200.33.84.0/24
200.57.0.0/19
201.140.80.0-201.140.127.255
201.148.0.0-201.148.95.255
IPv6:
2001:1278::/32
Signature Algorithm: sha256WithRSAEncryption
9b:20:ed:50:5a:d3:26:12:a0:21:23:ee:b4:45:0a:f6:5b:da:
0e:95:0d:21:1f:ab:3c:35:84:b6:ea:ad:04:0a:72:c7:25:13:
1f:76:b3:c2:e1:39:17:54:32:72:a5:8b:b2:7b:8e:c3:40:2d:
08:d6:ea:ac:ca:87:17:62:c2:57:a0:65:d7:46:8e:ce:9b:7c:
cf:e0:e3:dc:34:06:cc:74:de:3e:26:7e:5a:bb:ba:7f:24:9c:
44:3d:dc:16:05:d3:b8:34:f2:b8:55:df:4d:5f:a1:e0:7c:a7:
cd:03:4f:cf:3a:96:44:fa:43:c0:33:b4:33:63:d2:31:55:81:
9e:93:e8:29:32:ac:ba:1e:98:47:e3:06:c2:c7:7b:a9:39:c0:
07:26:c5:56:6c:58:86:10:12:84:79:4a:4d:1e:17:d8:f3:34:
d3:43:5c:89:77:96:75:8d:8b:f9:04:f0:0b:ce:50:e1:f8:16:
06:0e:c5:d5:8f:fa:c2:30:2f:7f:c9:b9:95:9c:58:8f:7c:43:
de:35:88:8a:26:e1:ad:17:db:90:5b:77:f8:da:c7:30:27:ab:
c3:b1:c6:6f:87:89:ca:34:91:26:3f:51:10:5d:e8:5e:d5:49:
2d:b2:c7:34:af:3c:c8:5a:e8:60:f7:bc:b1:b0:3a:29:40:67:
86:d1:c4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org