Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/7c5ac30a0e75b917297eeabc6f87ccd1b0915fe6.roa
File: 7c5ac30a0e75b917297eeabc6f87ccd1b0915fe6.roa (raw, json)
Hash identifier: rcPDwj39O2oeHVJ5HYn5qgMVqH1GUVCdG6MFVnkT+Vk=
Subject key identifier: 02:3F:36:78:A8:CC:A5:D1:AB:FE:E1:BC:6B:AD:D9:BC:99:81:5E:69
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 26BDFD
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/7c5ac30a0e75b917297eeabc6f87ccd1b0915fe6.roa
Signing time: Wed 30 Aug 2023 17:50:30 +0000
ROA not before: Tue 29 Aug 2023 17:50:30 +0000
ROA not after: Sat 30 Aug 2025 17:50:30 +0000
asID: 22368
IP address blocks: 190.252.106.0/24 maxlen: 24
181.236.222.0/24 maxlen: 24
181.236.224.0/19 maxlen: 24
152.200.204.0/24 maxlen: 24
181.236.176.0/20 maxlen: 24
181.236.192.0/21 maxlen: 24
179.33.108.0/23 maxlen: 24
190.252.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2539005 (0x26bdfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Aug 29 17:50:30 2023 GMT
Not After : Aug 30 17:50:30 2025 GMT
Subject: CN=7c5ac30a0e75b917297eeabc6f87ccd1b0915fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:36:6b:bc:d5:cb:9d:45:45:44:cf:c0:8f:17:
69:8f:5a:58:5c:54:9d:f7:e5:25:4c:4a:da:74:e5:
3c:c6:ad:e1:80:14:1c:7b:a7:66:c9:e8:cd:8c:36:
07:7b:c8:53:c2:f5:9f:fc:2e:65:91:2c:2c:b9:bb:
4d:bd:c1:1c:01:01:61:41:76:6e:fe:69:cd:5d:a8:
63:a2:59:6a:3d:c6:54:55:2d:ba:25:0c:5d:3c:21:
ff:8e:7c:a5:16:3f:db:f8:e0:16:82:52:23:ae:03:
4a:0e:a3:df:53:84:f9:13:c9:50:06:a5:98:81:48:
b7:2b:57:f4:17:f3:2a:c8:37:1c:84:83:76:4a:2a:
48:4e:da:e1:ad:a0:bc:65:9e:8a:fa:2d:97:90:cc:
c5:d3:4e:28:1e:c0:83:4e:85:90:75:5e:3a:53:99:
c2:b7:12:72:e1:ba:fe:74:01:5e:cc:5a:6f:d7:fe:
e9:e0:22:0b:97:87:88:8b:6a:ee:45:d6:19:ea:d2:
29:01:e3:e7:c0:1b:8a:71:8b:58:f7:2e:72:ae:5a:
eb:b6:29:58:63:06:e3:4c:01:8f:ad:c7:f8:ef:02:
77:67:67:30:bb:c6:54:81:ee:06:76:4e:95:bc:32:
0b:bf:be:1d:9c:91:98:43:d7:d9:30:78:d1:de:90:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3F:36:78:A8:CC:A5:D1:AB:FE:E1:BC:6B:AD:D9:BC:99:81:5E:69
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/7c5ac30a0e75b917297eeabc6f87ccd1b0915fe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.200.204.0/24
179.33.108.0/23
181.236.176.0-181.236.199.255
181.236.222.0/24
181.236.224.0/19
190.252.104.0/24
190.252.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d9:f3:79:27:25:00:fd:a9:d9:2d:f3:ac:4b:cd:90:64:5a:
2a:41:82:08:2f:01:8a:a9:10:57:7b:57:a0:be:b7:aa:53:8a:
1d:4a:91:e4:2b:c0:61:16:73:32:9a:aa:2f:26:c3:21:51:19:
3a:dd:7c:a6:38:d7:e7:17:0e:7a:18:79:16:c2:ce:18:e1:2a:
36:e7:f6:96:a9:5d:ac:8b:08:8f:56:e7:b0:5c:d9:df:99:b3:
a6:e7:60:35:d9:96:38:e0:d5:27:1f:e3:8e:11:a4:f9:9f:d7:
54:40:9f:09:9f:32:38:00:fa:e6:f0:bd:9f:a9:7a:e8:f0:06:
b4:2d:d6:70:08:c6:ae:df:69:1d:c0:4c:8d:21:d7:46:bb:b2:
90:10:01:42:b8:c1:1e:a6:e6:fb:bd:5b:f1:61:61:1c:d8:12:
8a:05:4b:c8:7c:0e:5d:37:14:22:ba:61:cc:35:41:9e:64:f5:
3b:20:d2:89:b8:81:84:3e:da:78:ec:45:d0:67:2a:fc:e4:72:
57:68:81:a6:c1:2b:9b:75:3b:ae:54:40:88:16:6b:1f:36:40:
38:ee:30:70:ce:a8:ab:bc:c8:fe:76:74:b9:a3:aa:2a:8a:c8:
51:14:57:ee:63:7a:f4:3d:fd:d9:a6:1c:a1:d0:02:97:28:8f:
23:81:73:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:30 2024 by rpki-client on console-fra.rpki-client.org