Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/1b9f52db3be244862dec17fbc571f00dab80f77f.roa
File: 1b9f52db3be244862dec17fbc571f00dab80f77f.roa (raw, json)
Hash identifier: gnhBuZJEiOF3LLsyzZjZs/5ZV0TJdxg4aFFuC9r8pOo=
Subject key identifier: BE:36:74:74:02:4F:28:13:8A:D2:BE:71:AA:AD:57:E5:94:FE:75:68
Certificate issuer: /CN=9b3d6002276e2295200c85a66129c42e4d483c34
Certificate serial: 0D87A6
Authority key identifier: 30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/1b9f52db3be244862dec17fbc571f00dab80f77f.roa
Signing time: Wed 24 Mar 2021 22:50:46 +0000
ROA not before: Wed 24 Mar 2021 22:47:59 +0000
ROA not after: Fri 24 Mar 2023 22:47:59 +0000
asID: 264668
IP address blocks: 167.250.180.0/23 maxlen: 23
200.24.128.0/20 maxlen: 22
200.24.128.0/22 maxlen: 24
200.24.132.0/22 maxlen: 24
200.24.136.0/22 maxlen: 24
200.24.140.0/22 maxlen: 24
200.24.144.0/20 maxlen: 22
200.24.144.0/22 maxlen: 24
200.24.148.0/22 maxlen: 24
200.24.152.0/22 maxlen: 24
200.24.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886694 (0xd87a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3d6002276e2295200c85a66129c42e4d483c34
Validity
Not Before: Mar 24 22:47:59 2021 GMT
Not After : Mar 24 22:47:59 2023 GMT
Subject: CN=1b9f52db3be244862dec17fbc571f00dab80f77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:50:2a:ad:f9:09:54:b4:6a:5c:22:c2:21:fb:
2f:16:8a:1d:5d:45:d8:ee:58:b1:bc:37:6b:31:52:
4b:d1:f3:3b:db:e6:4c:15:3a:0d:a1:b8:6b:1c:b7:
67:16:18:c8:38:65:22:81:f1:d0:c5:02:b2:a1:c8:
03:e1:25:7b:2f:a8:f4:df:25:a0:3e:5c:4a:c1:84:
52:c5:c4:be:8a:cd:6f:6e:b3:71:a3:22:bb:85:ca:
98:7f:6d:0b:e6:c0:24:b3:08:02:09:d3:bd:51:31:
be:03:a2:25:4b:f8:1f:c9:c6:6f:16:53:39:40:6f:
e1:96:15:c1:23:b8:16:e8:63:5c:ec:00:c6:49:7b:
77:69:d4:ef:98:0b:cc:07:8d:4c:2f:9b:80:9e:d3:
33:66:4e:fa:8c:80:18:c9:3f:ce:9c:94:12:cd:bf:
fb:3e:eb:fe:dd:73:cb:65:ae:25:58:86:91:c8:d5:
fc:71:e7:49:06:20:89:41:11:33:50:4e:00:88:68:
f2:dd:4f:6d:f1:33:c2:18:05:ce:b6:ad:85:d9:2d:
51:f0:81:1f:c3:d6:40:d5:8e:a0:6c:2d:71:f2:d1:
1b:61:4e:7c:49:f5:a7:af:48:6e:6c:d7:63:07:bc:
e8:65:5a:04:3e:44:e3:0d:1a:bf:6f:59:54:90:06:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:36:74:74:02:4F:28:13:8A:D2:BE:71:AA:AD:57:E5:94:FE:75:68
X509v3 Authority Key Identifier:
keyid:30:21:FB:0B:72:5D:F2:BC:EB:41:C8:0F:BA:80:CB:82:38:60:F9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b3d6002276e2295200c85a66129c42e4d483c34.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/1b9f52db3be244862dec17fbc571f00dab80f77f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a263dc57-e11c-4608-9af2-bdfb16e216dc/9b3d6002276e2295200c85a66129c42e4d483c34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.250.180.0/23
200.24.128.0/19
Signature Algorithm: sha256WithRSAEncryption
13:ff:45:6d:37:a8:48:cc:5a:2b:f6:8c:f3:03:25:82:fe:a3:
de:93:a6:79:64:a3:c1:90:6c:33:5a:3f:8f:33:cd:95:14:f0:
4c:b6:80:25:5e:1f:ab:b1:26:9c:c3:42:22:85:e8:73:a4:44:
9a:8b:c5:dd:aa:25:e1:b1:b1:ba:48:14:8d:1b:c6:05:8f:6c:
13:ac:1d:11:01:83:4b:96:79:a0:e6:c2:c6:25:cf:3a:cf:3d:
c4:53:9d:96:48:cb:36:20:fb:48:35:6a:59:e2:e1:d8:f7:46:
4c:0d:7c:69:7a:79:e7:38:b7:01:3c:a9:0b:6c:d7:55:f6:3a:
ed:12:00:c2:2f:fa:aa:09:0d:25:af:2b:8d:e9:96:46:d4:a4:
b9:1e:e4:30:d6:b9:8f:2d:ce:c0:d0:ab:ff:a0:04:1a:27:d4:
0d:b5:56:df:77:76:13:79:c4:99:5f:79:4e:01:9b:83:a1:b1:
66:de:4c:e8:e6:fb:1d:0a:8c:89:6d:00:90:78:59:7b:16:a3:
12:af:eb:2c:f0:14:0a:55:3e:6c:fb:69:65:78:5e:1f:10:4e:
ef:a7:8f:b5:89:10:e2:ec:35:27:a7:03:8a:0e:70:98:0b:1c:
48:44:bc:11:36:66:c7:7c:fb:33:9f:8b:70:aa:ac:70:1c:e4:
88:65:c6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:20 2024 by rpki-client on console-ams.rpki-client.org