Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d6ecf05a42dafff989c48aa87a7cc4d199a483e5.roa
File: d6ecf05a42dafff989c48aa87a7cc4d199a483e5.roa (raw, json)
Hash identifier: 6a+EeqkYrddKP761oXy1aDvk0QnQCuyyp+Wy6F//ZC8=
Subject key identifier: F9:77:89:41:F4:B5:5B:7E:BB:61:D6:32:83:D5:2D:0D:07:E7:96:0D
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 1D46C6
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d6ecf05a42dafff989c48aa87a7cc4d199a483e5.roa
Signing time: Mon 03 Oct 2022 13:40:02 +0000
ROA not before: Mon 26 Sep 2022 20:33:30 +0000
ROA not after: Thu 26 Sep 2024 20:33:30 +0000
asID: 3816
IP address blocks: 152.204.0.0/17 maxlen: 17
152.204.128.0/22 maxlen: 22
152.204.128.0/24 maxlen: 24
152.204.129.0/24 maxlen: 24
152.204.130.0/24 maxlen: 24
152.204.131.0/24 maxlen: 24
152.204.132.0/24 maxlen: 24
152.204.134.0/24 maxlen: 24
152.204.160.0/20 maxlen: 20
152.205.0.0/18 maxlen: 18
152.205.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1918662 (0x1d46c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Sep 26 20:33:30 2022 GMT
Not After : Sep 26 20:33:30 2024 GMT
Subject: CN=d6ecf05a42dafff989c48aa87a7cc4d199a483e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:17:99:17:da:58:98:c1:fa:e8:de:ce:52:
01:6a:f4:2d:30:ed:3c:3c:17:00:db:23:a7:2e:d5:
77:8b:99:cd:14:76:82:2b:90:4f:0d:85:1c:f6:8e:
97:14:d8:e3:a4:c7:ec:24:f8:5c:18:2d:06:49:54:
7b:e0:48:88:b2:81:89:c8:81:95:79:59:9d:34:83:
a2:c9:f9:76:e0:f0:3c:cc:e7:0d:f1:a2:46:86:bb:
b5:97:eb:a9:eb:6c:d5:47:6d:e8:c5:01:ed:ec:2b:
89:51:69:91:86:24:39:48:d8:f1:f6:d4:86:d6:72:
ac:52:3e:54:1a:4e:9f:87:9d:44:14:6f:40:9b:50:
c9:85:a2:aa:53:7d:ee:48:0b:9d:16:8e:33:8f:ba:
5e:91:6a:b8:f2:51:44:ec:df:ef:c0:2a:3c:69:3c:
4b:be:04:6d:2a:ef:86:9f:ec:29:cb:0f:56:21:65:
3a:94:07:f9:1b:29:8a:60:ef:61:b2:6d:32:b3:9a:
af:92:19:d2:2d:f4:8c:f4:d2:9c:b6:fa:e7:e9:60:
9f:76:a1:a0:5d:85:e6:45:72:d6:b8:ad:03:d5:2d:
0c:4f:10:b4:ce:df:e0:b0:1e:86:7d:fd:48:e5:fc:
50:2d:18:a1:27:35:7d:42:dc:a7:ca:57:73:41:16:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:77:89:41:F4:B5:5B:7E:BB:61:D6:32:83:D5:2D:0D:07:E7:96:0D
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/d6ecf05a42dafff989c48aa87a7cc4d199a483e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.204.0.0-152.204.132.255
152.204.134.0/24
152.204.160.0/20
152.205.0.0/18
152.205.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:04:ba:b5:52:0e:9c:41:07:5a:97:b2:ca:5d:00:5b:89:8b:
2b:5c:25:15:fb:65:f8:bb:91:07:9e:68:81:81:f3:19:c3:1b:
1f:0c:3a:2c:88:98:67:30:40:20:a8:0e:f0:90:2c:45:1a:db:
e1:c2:a3:0a:3e:3e:d4:5a:d1:c0:36:45:b9:d7:45:37:07:25:
27:4e:16:31:0c:96:1e:2c:d1:18:ef:15:a5:c5:8e:fb:ba:a3:
b8:71:b5:9f:b7:8e:2c:66:ab:47:c2:e7:fb:3a:00:f7:f7:a0:
20:b3:08:8a:5c:13:e7:c8:87:71:df:e6:f6:80:49:a8:17:72:
87:22:5f:2f:c2:19:dc:61:63:92:57:da:b3:01:06:55:b8:14:
ef:a5:6f:a5:e6:24:7e:f5:b6:18:25:3e:a2:ef:0e:88:b9:9d:
93:13:ec:71:39:8a:97:9e:94:c2:7d:29:18:a5:52:c2:06:12:
b3:49:ab:67:11:fc:bd:7d:34:c9:95:e6:9f:1c:c8:c0:09:53:
d9:15:45:dc:52:5e:c5:11:47:62:1d:96:18:30:4d:19:94:69:
7f:42:2b:f4:18:80:30:5f:1b:91:5b:72:76:8a:3a:21:f4:4a:
0a:61:ee:b0:9c:88:47:9b:bb:93:09:c9:2b:0d:5d:19:09:fd:
6e:27:cc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:06 2024 by rpki-client on console-fra.rpki-client.org