Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/88ea9fa5cf56223f0da317609905e62c799bff57.roa
File: 88ea9fa5cf56223f0da317609905e62c799bff57.roa (raw, json)
Hash identifier: 2qQmkakF+HVUElV73kBYA93H6KpkCtYqmy3/smSxxns=
Subject key identifier: F4:05:A5:BA:6D:8B:02:91:AF:12:24:79:6D:9F:F6:C4:7E:8F:09:60
Certificate issuer: /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial: 22FBFE
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/88ea9fa5cf56223f0da317609905e62c799bff57.roa
Signing time: Mon 31 Jul 2023 21:21:43 +0000
ROA not before: Sun 30 Jul 2023 21:21:43 +0000
ROA not after: Thu 31 Jul 2025 21:21:43 +0000
asID: 18678
IP address blocks: 190.121.128.0/24 maxlen: 24
190.121.130.0/24 maxlen: 24
190.121.142.0/23 maxlen: 24
190.121.149.0/24 maxlen: 24
190.121.157.0/24 maxlen: 24
138.117.111.0/24 maxlen: 24
190.0.242.0/24 maxlen: 24
190.0.244.0/24 maxlen: 24
190.107.19.0/24 maxlen: 24
190.107.20.0/24 maxlen: 24
190.14.246.0/24 maxlen: 24
190.14.249.0/24 maxlen: 24
190.14.251.0/24 maxlen: 24
168.90.14.0/24 maxlen: 24
181.225.65.0/24 maxlen: 24
181.225.73.0/24 maxlen: 24
181.225.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292734 (0x22fbfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
Validity
Not Before: Jul 30 21:21:43 2023 GMT
Not After : Jul 31 21:21:43 2025 GMT
Subject: CN=88ea9fa5cf56223f0da317609905e62c799bff57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:f3:b7:53:71:6c:46:35:92:4e:bd:43:f9:
fe:79:06:f8:c2:60:01:52:e4:90:55:e3:ca:a7:94:
70:24:29:ab:15:2d:fa:b1:f8:1c:ee:9d:a3:7c:aa:
d4:34:49:e9:e7:03:b9:1b:1a:3c:6d:4d:e3:e1:59:
62:22:87:89:5f:72:4c:95:b6:97:2b:05:62:60:f7:
c8:40:fc:67:15:89:50:94:3e:a1:7c:e0:60:91:5a:
fb:5a:c8:05:85:3a:22:ac:f5:38:15:52:87:83:11:
12:bc:59:a5:a3:c1:04:d2:56:37:a4:ae:3c:74:83:
2a:41:de:cc:6a:7d:d5:83:70:91:81:90:98:6f:e8:
94:ef:0c:93:50:bf:59:cc:ce:37:d2:50:c5:1f:8e:
63:f6:61:90:0a:30:bf:ce:d1:28:30:8b:a8:d0:0b:
80:bf:ec:ed:8d:b2:3e:55:5d:14:75:6c:29:06:d6:
35:98:28:f9:1c:12:69:c9:48:c0:06:11:0f:64:21:
02:81:5e:39:a5:a9:77:53:b0:e5:b6:c2:cc:32:e7:
a1:5c:af:8e:11:5c:50:33:e0:30:25:9b:d5:01:a4:
1d:9d:9d:e4:1c:66:d1:5a:0c:16:c6:c5:9f:75:8e:
69:b6:23:f8:70:78:71:98:fc:11:22:76:82:00:7e:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:05:A5:BA:6D:8B:02:91:AF:12:24:79:6D:9F:F6:C4:7E:8F:09:60
X509v3 Authority Key Identifier:
keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/88ea9fa5cf56223f0da317609905e62c799bff57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.111.0/24
168.90.14.0/24
181.225.65.0/24
181.225.73.0/24
181.225.78.0/24
190.0.242.0/24
190.0.244.0/24
190.14.246.0/24
190.14.249.0/24
190.14.251.0/24
190.107.19.0-190.107.20.255
190.121.128.0/24
190.121.130.0/24
190.121.142.0/23
190.121.149.0/24
190.121.157.0/24
Signature Algorithm: sha256WithRSAEncryption
57:41:e1:83:98:d9:94:31:bd:5b:78:af:b6:e5:39:4d:1d:4c:
99:ae:b2:07:85:b6:5b:b7:c4:45:d4:50:8a:c1:0e:7f:58:fc:
9e:94:97:15:94:59:6d:f1:c4:ad:10:3d:2a:7a:ea:25:55:b6:
14:3c:d9:5f:71:54:f3:4b:f6:3c:1a:c5:6e:be:a8:75:a6:12:
1a:63:2f:10:51:ca:c1:2c:35:03:84:4f:5a:ff:1a:15:c8:be:
a0:6e:bc:2a:ed:c7:da:34:51:56:21:70:f1:95:b0:0d:e9:57:
6e:ea:9a:11:5a:b8:b6:e5:d8:43:70:2e:f4:a9:e9:63:4f:b8:
5f:80:c8:8e:18:0e:db:98:e2:73:41:04:a7:43:80:81:d6:b3:
f0:49:2c:bb:f5:f8:6f:5b:55:38:8b:ae:21:43:a4:f3:f7:81:
60:7d:b9:7d:4d:c7:3e:12:1b:93:c9:4c:0f:d7:13:d9:df:58:
23:84:44:00:a0:38:7d:96:02:58:5d:d4:cc:36:0d:ce:8a:f3:
bd:3d:dd:97:8e:24:b9:ec:90:31:c7:b0:a6:0c:2d:54:c1:16:
c9:bb:94:eb:22:37:22:a8:6f:3d:fd:47:48:7c:e4:4a:67:d3:
0a:f7:11:d2:4b:d8:96:9f:de:a7:38:2a:83:c9:e1:74:b7:98:
bd:54:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:44 2024 by rpki-client on console-ams.rpki-client.org