Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/67a9205f3348462800832cf80fd1a43321ad9fc4.roa
File: 67a9205f3348462800832cf80fd1a43321ad9fc4.roa (raw, json)
Hash identifier: wGyGRKcQ2Upc0PIzgZ0O3el3HNxPhmc3wmEGAYLXU7s=
Subject key identifier: 70:18:A3:FB:E0:B2:CF:9C:C1:6F:89:A5:55:97:84:F7:D8:25:0E:46
Certificate issuer: /CN=c376ce9732a7f8438a8728863d42624058e18390
Certificate serial: 0DAA10
Authority key identifier: D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/67a9205f3348462800832cf80fd1a43321ad9fc4.roa
Signing time: Wed 24 Mar 2021 14:35:26 +0000
ROA not before: Wed 24 Mar 2021 14:35:25 +0000
ROA not after: Tue 24 Mar 2026 14:35:25 +0000
asID: 20015
IP address blocks: 216.241.3.0/24 maxlen: 24
216.241.4.0/24 maxlen: 24
216.241.5.0/24 maxlen: 24
216.241.6.0/24 maxlen: 24
216.241.7.0/24 maxlen: 24
216.241.8.0/24 maxlen: 24
216.241.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 895504 (0xdaa10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c376ce9732a7f8438a8728863d42624058e18390
Validity
Not Before: Mar 24 14:35:25 2021 GMT
Not After : Mar 24 14:35:25 2026 GMT
Subject: CN=67a9205f3348462800832cf80fd1a43321ad9fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:12:90:08:2c:c8:1c:4a:e8:ef:96:e7:7c:
08:92:07:45:ce:5b:b5:2d:45:b7:80:18:05:65:81:
5a:a9:43:d2:e5:7a:8a:f5:06:a8:f2:53:68:5e:60:
2e:45:ad:65:5e:89:15:a9:cb:34:58:af:5b:d7:95:
b6:dc:7f:cf:76:30:63:bc:97:84:5b:85:c0:09:fa:
e0:c5:60:5a:72:68:db:17:72:e0:0e:ff:37:55:d4:
ce:53:db:39:11:10:37:0b:76:16:54:07:20:df:26:
ff:78:9d:3f:52:b0:fe:01:56:35:35:86:23:bb:4d:
c5:e9:e5:29:de:28:12:e8:ed:64:2c:b2:a2:51:c7:
d0:b6:3e:52:9d:03:6e:6a:d4:d3:6a:00:7b:45:46:
c8:e1:96:0d:c5:e3:2a:ef:94:53:da:0c:e5:6e:5d:
86:5d:15:f9:58:5b:a2:e1:c1:27:2d:33:c9:b5:32:
a3:d5:68:cd:33:5d:bd:87:81:9e:a2:5f:9c:b2:84:
05:f0:8c:21:88:c5:b1:06:99:d6:0c:ae:8d:76:d1:
19:3b:dc:69:20:b1:44:e2:07:5e:0b:16:f2:19:24:
9e:ad:66:43:87:ce:a5:92:94:ca:af:34:ff:aa:8c:
b8:66:f0:cf:7c:aa:20:2d:37:78:c8:36:34:d7:81:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:18:A3:FB:E0:B2:CF:9C:C1:6F:89:A5:55:97:84:F7:D8:25:0E:46
X509v3 Authority Key Identifier:
keyid:D1:A6:22:E9:31:1A:89:37:4E:F7:42:9E:B6:EB:2C:D4:16:A2:54:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c376ce9732a7f8438a8728863d42624058e18390.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/67a9205f3348462800832cf80fd1a43321ad9fc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b7e2cbcb-4e1e-4451-ba9f-b839acb5a75f/c376ce9732a7f8438a8728863d42624058e18390.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.241.3.0-216.241.9.255
Signature Algorithm: sha256WithRSAEncryption
a4:79:ed:d7:b2:b6:21:d0:c0:b0:3e:9b:c9:51:f2:a0:50:ff:
9a:ab:86:80:85:da:e9:5e:b7:9f:6e:e9:d9:58:bb:99:df:3d:
a2:48:a0:ff:69:4b:bd:23:16:d1:92:d9:94:9e:e5:a6:e1:dc:
dd:ef:1f:b2:b0:ef:1b:59:c3:ab:3e:39:c6:68:73:45:8c:9e:
44:9a:84:26:86:21:39:93:e6:03:6b:86:bd:ec:8b:56:76:a8:
07:67:b3:ed:3c:98:d6:a8:f1:4e:cf:f9:e7:cc:23:dd:9d:8c:
43:dc:03:1e:83:62:ed:1a:98:b2:2d:91:28:9a:b1:01:a4:1b:
32:c4:f0:b5:03:0d:ee:9d:35:25:bc:6e:71:fc:f0:35:5f:21:
64:8d:4e:60:23:16:54:80:33:54:8b:ba:36:ee:a3:d9:92:89:
e4:7d:49:8c:73:56:6c:39:06:5f:f5:c3:5a:f6:c8:ee:f0:39:
4a:33:90:15:f8:ec:72:76:67:f0:9b:12:e0:a7:a0:59:9f:af:
cc:7d:43:45:5f:78:c5:56:8b:dd:5e:3a:d5:85:7c:df:f6:4c:
c0:fc:d1:f2:f2:78:7e:1f:bb:e1:ee:3a:2c:2d:b6:c2:4e:18:
bd:07:0b:98:cc:88:39:3d:19:32:37:3c:79:9b:b9:42:88:10:
32:b9:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-ams.rpki-client.org