Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/67caad542fc06c51525ccd07e3dce8fb0ce3c1bb.roa
File: 67caad542fc06c51525ccd07e3dce8fb0ce3c1bb.roa (raw, json)
Hash identifier: 9sMDxmkQ6WrUTwlwgaQ6HkyN698p9v/wY4Dt2Dc6VRw=
Subject key identifier: E6:FE:9B:AB:85:23:05:79:0F:25:84:03:C9:2C:8A:3E:21:DA:BE:09
Certificate issuer: /CN=75ea5c79a4b285a7ff9304a161ca92b6cd0c8479
Certificate serial: 183C26
Authority key identifier: 5B:8E:39:32:2C:6D:5E:0D:CE:FA:18:7C:F0:90:BB:DC:03:DE:F3:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/67caad542fc06c51525ccd07e3dce8fb0ce3c1bb.roa
Signing time: Thu 11 May 2023 15:12:35 +0000
ROA not before: Wed 10 May 2023 15:12:35 +0000
ROA not after: Sun 11 May 2025 15:12:35 +0000
asID: 19889
IP address blocks: 161.22.0.0/19 maxlen: 24
181.118.224.0/19 maxlen: 24
190.3.128.0/19 maxlen: 24
190.57.192.0/19 maxlen: 24
200.85.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1588262 (0x183c26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ea5c79a4b285a7ff9304a161ca92b6cd0c8479
Validity
Not Before: May 10 15:12:35 2023 GMT
Not After : May 11 15:12:35 2025 GMT
Subject: CN=67caad542fc06c51525ccd07e3dce8fb0ce3c1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:a5:0f:ad:78:01:d6:a0:c4:4a:e6:1b:f4:
65:28:bf:81:dd:dd:ed:38:9b:31:56:f4:fe:dc:f9:
85:1b:19:a6:1e:fd:56:b6:c2:c8:60:09:e8:e8:54:
28:83:d7:6b:eb:08:d5:b7:18:c8:09:c4:40:78:d2:
c1:e7:19:38:d7:95:af:ab:90:d2:39:69:42:bd:38:
58:92:aa:09:ee:64:53:b3:f8:53:b5:76:c7:36:07:
97:80:26:c7:2b:03:a0:7f:76:18:73:f7:0b:7a:ee:
58:8a:01:a2:c6:fd:04:80:e1:a6:d0:f4:ed:64:8a:
b2:78:71:ac:2a:b6:08:1e:1b:1f:ce:20:25:a7:4d:
53:a3:0d:7f:f5:26:c5:b5:69:6b:bd:41:e8:80:81:
f4:d3:00:10:a4:bb:4a:42:ba:93:5f:68:79:ea:84:
bd:64:91:90:36:8d:d2:a1:1d:13:b6:df:56:36:e1:
c8:4c:f7:f8:a3:0e:84:af:df:af:d5:68:fc:a3:d7:
c7:13:f3:29:0f:73:e4:0d:dd:0d:37:70:24:f6:72:
7f:0a:ba:10:55:48:08:0e:a6:e8:e5:49:0d:55:cb:
f5:b7:43:93:be:5c:16:e1:31:77:30:6c:fb:7e:4e:
20:07:8d:3e:b6:64:12:ac:8a:ff:61:f5:6e:a9:f1:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FE:9B:AB:85:23:05:79:0F:25:84:03:C9:2C:8A:3E:21:DA:BE:09
X509v3 Authority Key Identifier:
keyid:5B:8E:39:32:2C:6D:5E:0D:CE:FA:18:7C:F0:90:BB:DC:03:DE:F3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/67caad542fc06c51525ccd07e3dce8fb0ce3c1bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.22.0.0/19
181.118.224.0/19
190.3.128.0/19
190.57.192.0/19
200.85.96.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:47:78:e1:53:a9:28:2a:37:bd:71:f4:62:c2:e2:93:14:e7:
ed:b2:7e:a7:76:c7:3c:f2:98:4f:b4:28:d2:4c:6a:8b:f7:25:
10:2a:ba:2f:28:e6:61:eb:29:fc:53:cf:44:96:0e:e4:76:e3:
17:3d:a0:42:db:a9:ec:9d:58:4f:c9:d8:2d:e9:93:58:f6:4d:
58:57:a1:7a:f3:fd:c6:a2:f9:c7:32:2b:a1:41:1f:ee:df:48:
c7:5f:ad:31:bf:e7:ac:d7:94:db:a5:30:2c:cd:fb:22:6a:88:
d4:01:c8:db:d4:94:2b:88:7d:f9:a4:67:1a:8d:e9:10:f4:88:
d2:3f:c5:c8:46:5e:fe:a7:38:cf:c1:4c:0b:9f:2c:73:ea:14:
37:ad:de:93:56:71:8a:93:f4:9d:12:23:8f:60:a0:e6:c0:8f:
72:72:8d:4c:76:74:3e:02:46:22:b4:4a:cb:4f:3c:51:dd:71:
c6:69:61:da:53:b0:d8:85:ce:9e:3e:f8:03:f8:d6:1a:3a:c4:
8e:d4:c2:2f:1c:e3:35:13:54:60:7c:f0:9e:c1:0e:94:96:50:
fe:f8:54:24:55:e8:39:51:a2:f3:5b:59:07:cb:53:50:07:18:
1e:41:5a:37:08:d5:2e:e5:4d:5c:ef:98:9f:6b:b8:66:fd:cf:
96:a4:ac:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org