Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c1a361502e1dd2d16a1290c4e7f13fd0839d8994.roa
File: c1a361502e1dd2d16a1290c4e7f13fd0839d8994.roa (raw, json)
Hash identifier: /ri580NYIQuV9uUcKnSBYYkReZHbF08UzcEBsPwIIiw=
Subject key identifier: B6:80:93:05:22:13:F3:10:96:3F:2C:88:22:2A:CB:4B:A3:89:0D:8F
Certificate issuer: /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial: 239120
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c1a361502e1dd2d16a1290c4e7f13fd0839d8994.roa
Signing time: Thu 14 Sep 2023 20:19:26 +0000
ROA not before: Wed 13 Sep 2023 20:19:21 +0000
ROA not after: Sun 14 Sep 2025 20:19:21 +0000
asID: 3356
IP address blocks: 181.193.0.0/16 maxlen: 24
181.194.0.0/15 maxlen: 24
201.191.0.0/16 maxlen: 24
201.192.0.0/12 maxlen: 24
200.91.64.0/18 maxlen: 24
200.91.128.0/18 maxlen: 24
201.237.0.0/16 maxlen: 24
45.232.116.0/22 maxlen: 24
2803:9b20::/32 maxlen: 64
2800:d300::/29 maxlen: 48
2001:1330::/29 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2330912 (0x239120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Validity
Not Before: Sep 13 20:19:21 2023 GMT
Not After : Sep 14 20:19:21 2025 GMT
Subject: CN=c1a361502e1dd2d16a1290c4e7f13fd0839d8994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:1a:43:e2:61:04:66:3c:0f:01:8d:e0:cf:
02:20:b1:a6:d0:fc:68:20:36:10:f1:dc:39:41:13:
be:8e:db:08:2c:e3:41:bc:64:48:58:e4:25:3a:fc:
0f:24:69:57:56:35:91:bf:48:0b:80:f8:e2:a8:37:
88:0f:20:ac:fe:dd:df:78:26:c6:e5:21:54:a1:ba:
8e:be:aa:5a:33:bf:57:11:4e:b9:1f:a3:72:b5:8c:
17:e6:7d:da:e8:dc:34:84:b8:64:10:13:ec:20:b3:
40:8a:2e:cd:73:68:2b:30:ac:a9:1a:8e:51:df:e4:
34:f7:06:e2:62:26:1b:3b:ae:63:c2:99:16:90:c3:
a5:69:0e:48:12:41:8d:ee:09:37:41:47:c7:50:cb:
4f:bb:4d:88:19:a2:18:4b:f7:b4:85:65:0b:3a:bd:
13:d6:95:ba:5b:8a:87:64:dd:e8:47:07:b5:96:ed:
18:54:2a:4c:8d:73:78:cb:ac:bc:16:c1:c0:15:2e:
a2:65:b9:cc:ca:fe:26:00:f6:7e:f0:8d:c8:31:b4:
a1:55:3d:92:a6:95:cd:e5:16:e7:d8:f5:fb:49:91:
55:08:9b:b2:f3:a0:23:38:da:2a:e9:fb:7c:8f:2a:
80:ab:e5:14:19:07:15:c1:e3:78:02:73:2a:7d:4f:
45:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:80:93:05:22:13:F3:10:96:3F:2C:88:22:2A:CB:4B:A3:89:0D:8F
X509v3 Authority Key Identifier:
keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c1a361502e1dd2d16a1290c4e7f13fd0839d8994.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.116.0/22
181.193.0.0-181.195.255.255
200.91.64.0-200.91.191.255
201.191.0.0-201.207.255.255
201.237.0.0/16
IPv6:
2001:1330::/29
2800:d300::/29
2803:9b20::/32
Signature Algorithm: sha256WithRSAEncryption
22:cc:66:d4:7c:9c:d4:9a:30:93:cc:f5:04:2f:d1:cc:6d:ac:
32:9e:e6:09:3d:37:36:5d:a7:8b:c8:14:bc:f2:ee:6b:a7:71:
82:8d:3b:67:4d:24:e2:64:82:6c:6d:2e:36:c3:95:4f:e9:72:
ee:ea:f3:84:22:d7:54:90:de:aa:7b:e3:24:2e:f2:3a:16:26:
ed:b7:04:98:52:1f:c7:bd:8a:72:76:21:e8:0f:0c:cd:ee:b2:
87:8c:64:11:fd:c7:cd:04:ec:8c:1a:1a:0b:41:1c:7e:c3:a4:
e3:60:0e:6f:d4:4f:61:ad:96:45:db:86:7d:1f:00:4f:5e:5c:
60:d0:8e:aa:86:61:96:36:fa:f5:3b:d7:e5:91:96:6e:df:6e:
df:39:63:5b:2c:c4:64:fc:92:d0:a7:bc:91:3f:68:43:ee:0d:
7d:63:82:78:3f:a8:39:cf:f6:f1:16:f5:0b:2e:7c:5c:5d:54:
02:21:43:37:79:99:d6:fd:b6:18:56:a3:86:3e:b4:01:6e:f6:
b5:ee:60:17:30:c0:d6:bd:3d:30:9f:24:32:ab:22:1a:f0:cd:
14:88:1c:9f:03:c4:3d:e1:cb:7d:0c:d7:26:dd:85:68:d8:6e:
61:11:ba:88:09:59:73:96:7b:1c:e1:56:51:e6:d9:4b:37:aa:
17:f5:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:46 2024 by rpki-client on console-ams.rpki-client.org