Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/e26ea2913e2267012443e227944c9c36347820c0.roa
File: e26ea2913e2267012443e227944c9c36347820c0.roa (raw, json)
Hash identifier: 4OmlIETnMZyrc6gCC9js6Xn+JiPHN2Pe5lfI4iBmHmI=
Subject key identifier: D0:43:75:8C:F1:34:F9:12:5E:46:7D:9F:CF:33:C1:53:02:7E:2F:85
Certificate issuer: /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial: 0DDFF0
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/e26ea2913e2267012443e227944c9c36347820c0.roa
Signing time: Wed 24 Mar 2021 14:34:59 +0000
ROA not before: Wed 24 Mar 2021 14:34:57 +0000
ROA not after: Tue 24 Mar 2026 14:34:57 +0000
asID: 3816
IP address blocks: 152.200.0.0/14 maxlen: 22
152.204.0.0/15 maxlen: 24
161.10.0.0/16 maxlen: 22
161.18.0.0/16 maxlen: 22
167.0.0.0/16 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 909296 (0xddff0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Validity
Not Before: Mar 24 14:34:57 2021 GMT
Not After : Mar 24 14:34:57 2026 GMT
Subject: CN=e26ea2913e2267012443e227944c9c36347820c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:0c:da:a5:b2:ef:3f:f7:f0:af:c9:80:b1:
8e:0e:64:06:3a:19:10:55:ff:86:a3:ce:39:7f:0c:
8a:2e:e1:42:b9:a7:ac:df:43:60:0a:12:d9:18:21:
dc:f0:c8:de:92:21:7d:26:52:09:11:51:0f:3b:ae:
40:27:d8:b0:6b:50:a8:5e:a4:ba:19:6d:33:b4:1f:
7d:da:2a:01:6c:c2:3b:be:cb:77:2f:66:0d:92:3b:
5c:e1:f1:39:c4:2d:49:45:1a:32:43:2e:5b:9b:f4:
2f:bb:9f:cc:47:4a:94:0d:de:92:22:b3:23:35:17:
59:09:e2:b0:e4:63:6c:fb:d6:8d:66:2f:52:da:67:
f4:f6:02:f9:43:d0:a9:f5:c9:59:17:75:df:d6:dc:
3b:a9:29:ce:35:4b:6c:04:fa:ec:95:e2:ea:ba:70:
04:87:5a:cd:73:aa:17:04:25:5d:47:67:42:18:e2:
75:16:88:09:fe:b3:8a:fb:86:bd:0e:5b:84:d6:69:
65:da:2d:dd:e2:6c:5c:02:99:3b:f8:7b:ab:36:1f:
6c:5e:c8:7c:d0:b8:15:6b:d7:dd:23:ba:26:12:ed:
9b:f1:08:a2:30:3f:85:41:de:e3:01:61:e3:2c:d8:
ea:08:c7:5b:e6:5f:2a:08:bf:d6:19:57:6c:9e:1e:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:43:75:8C:F1:34:F9:12:5E:46:7D:9F:CF:33:C1:53:02:7E:2F:85
X509v3 Authority Key Identifier:
keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/e26ea2913e2267012443e227944c9c36347820c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.200.0.0-152.205.255.255
161.10.0.0/16
161.18.0.0/16
167.0.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:6a:e8:a0:eb:98:74:ed:cc:ee:f8:3b:08:fc:40:1e:85:a3:
84:e1:1b:16:dd:35:a2:62:c7:1c:51:0d:2d:69:ef:e9:ba:97:
e3:dc:45:40:e2:d5:cc:e0:e2:e4:a0:24:57:9f:9d:20:68:60:
87:cd:a0:a7:3e:5d:c1:09:15:25:16:14:22:f1:b7:bf:9f:2f:
e7:78:42:da:bd:37:f5:bf:61:01:83:12:02:21:25:a5:10:95:
32:3e:f7:a6:fd:27:a7:24:06:9d:4a:76:b5:25:06:9c:55:b7:
be:38:e9:9b:54:e0:a6:7f:b0:10:df:f8:01:24:37:60:aa:4e:
35:f5:dc:63:65:f9:5b:d3:be:bc:cd:8e:39:2a:13:79:c7:83:
7b:a8:5a:2c:1f:cf:ee:80:6c:61:81:a9:8e:68:b1:72:bf:89:
d3:a7:71:38:26:90:6b:38:f7:ef:f1:72:ef:ce:ef:1c:4b:cb:
cb:16:23:c4:0f:19:27:ed:e9:e0:bd:41:e3:f5:55:7a:ed:9c:
45:4e:29:9e:12:29:fb:41:ff:f1:83:04:58:0c:b5:b4:71:c5:
71:b9:e6:c7:28:ba:e5:0a:ca:49:36:76:07:c0:76:eb:9e:aa:
13:ee:f3:6e:e8:bd:1a:ef:03:72:84:ae:82:b0:45:64:b9:d0:
5c:85:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:32 2024 by rpki-client on console-ams.rpki-client.org