Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/6b6daf83c6a8444607c5f7d2fb1a27760ef167c2.roa
File: 6b6daf83c6a8444607c5f7d2fb1a27760ef167c2.roa (raw, json)
Hash identifier: WkNQH2tO9ze9SlOCSsqhpBj4iDBgFTWsObhEFJdhJJw=
Subject key identifier: 59:8B:2E:C2:A0:66:D5:B0:71:1C:61:AD:8A:6A:7D:70:B4:A0:47:B3
Certificate issuer: /CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Certificate serial: 21DA22
Authority key identifier: 3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/6b6daf83c6a8444607c5f7d2fb1a27760ef167c2.roa
Signing time: Fri 09 Jun 2023 18:34:29 +0000
ROA not before: Thu 08 Jun 2023 18:34:27 +0000
ROA not after: Mon 09 Jun 2025 18:34:27 +0000
asID: 265705
IP address blocks: 186.28.108.0/22 maxlen: 24
186.31.128.0/22 maxlen: 24
190.26.30.0/23 maxlen: 24
186.31.155.0/24 maxlen: 24
186.28.176.0/22 maxlen: 24
186.28.180.0/23 maxlen: 24
186.28.184.0/22 maxlen: 24
186.30.120.0/22 maxlen: 24
190.27.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2218530 (0x21da22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
Validity
Not Before: Jun 8 18:34:27 2023 GMT
Not After : Jun 9 18:34:27 2025 GMT
Subject: CN=6b6daf83c6a8444607c5f7d2fb1a27760ef167c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:23:83:e7:7f:8a:72:83:0e:5e:91:3d:8d:64:
a8:be:da:6e:d6:1e:1f:f8:61:d8:6a:5d:06:c2:2b:
0a:47:30:87:36:07:31:b8:0d:8d:4b:70:56:92:21:
6f:49:08:15:49:ba:b9:c7:36:29:63:a2:d3:38:f1:
1d:67:85:ee:f6:7e:8c:9e:b8:7e:12:7a:ba:b0:86:
5f:e5:fa:ba:87:07:b9:12:e0:ec:6a:15:04:69:f2:
72:20:15:bc:f4:22:49:83:49:7b:36:02:f0:16:a6:
29:7f:da:4f:d4:84:b6:9d:bc:8a:57:d0:7e:33:a5:
7f:56:48:fb:56:9d:7a:78:15:03:f0:2f:85:39:25:
f8:ce:b6:44:7c:f2:a3:cf:4c:a1:5b:d9:84:0b:55:
11:72:8f:7a:a6:d4:4e:f2:00:30:82:ea:25:0d:85:
f8:b7:e7:c3:94:4c:8a:60:d6:ec:fb:1e:90:f6:7d:
51:7f:a9:90:63:c4:a6:ed:ea:b8:68:05:81:34:8c:
19:75:30:06:6e:14:b5:98:94:e3:90:8e:05:18:91:
52:b0:52:ac:9b:c1:30:7e:ec:c2:7d:8d:bd:8b:39:
64:7f:12:ca:02:e3:a7:5a:89:52:33:82:58:f5:79:
6a:7e:46:6c:b8:c0:3e:83:7f:72:f4:a9:1a:a3:7f:
b9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8B:2E:C2:A0:66:D5:B0:71:1C:61:AD:8A:6A:7D:70:B4:A0:47:B3
X509v3 Authority Key Identifier:
keyid:3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/6b6daf83c6a8444607c5f7d2fb1a27760ef167c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.28.108.0/22
186.28.176.0-186.28.181.255
186.28.184.0/22
186.30.120.0/22
186.31.128.0/22
186.31.155.0/24
190.26.30.0/23
190.27.136.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:70:3d:17:cd:6a:e9:88:fb:2a:02:60:63:66:94:07:93:ee:
37:8e:34:5a:a7:69:e1:4e:bf:f7:c2:0c:c5:ce:fd:3a:f0:33:
4a:7a:b8:d2:b2:76:21:63:2a:cc:bb:45:65:d0:80:65:3b:78:
44:a9:c3:72:ba:f1:e7:a1:01:3b:0f:79:9b:2c:98:3d:4b:0b:
20:46:0d:fb:33:e1:f0:55:b9:ba:be:ba:c3:ef:4d:d7:96:a8:
5d:45:12:61:63:f1:a1:7b:03:f1:9e:94:5e:8e:ef:a7:24:1d:
8b:e8:b2:9d:b4:57:d2:3d:cb:bd:a6:1a:f0:ec:28:d1:c1:9a:
14:48:ab:ab:74:73:52:a4:b2:6c:ca:56:f7:b5:69:c1:25:a5:
44:19:31:74:2e:a2:da:f1:e0:d6:f3:e5:12:58:66:62:87:9a:
2f:f3:31:91:b2:d5:e3:b3:8d:55:df:3e:d0:92:85:cc:61:3f:
86:13:b0:56:34:ec:2b:7d:c8:8c:32:8c:d3:12:d3:09:7a:5b:
0b:bd:72:4a:88:7a:78:b1:a9:c0:49:0c:4d:eb:4e:bd:d9:5b:
17:d8:0a:5e:42:12:aa:d2:1c:a7:19:59:71:b4:51:5c:c9:38:
99:ad:30:0b:ac:f9:72:98:3a:69:f5:f7:fb:c0:65:0d:71:b6:
a5:66:5a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org