Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ca6def44-153f-4d1a-ab81-3ea8806d46de/c640ff0d5d9c329dd84bf6fc454484695e3c899a.roa
File: c640ff0d5d9c329dd84bf6fc454484695e3c899a.roa (raw, json)
Hash identifier: zZyrnkOjMgt3p2ovn1RgpGTprvrUUKjcNMLhuqoNOhU=
Subject key identifier: A6:C5:CD:E6:3A:23:D1:F3:4B:82:93:54:28:C8:16:E3:72:88:61:84
Certificate issuer: /CN=404b0e4c80247304b30d4c8948892b44ae42a974
Certificate serial: 0D2523
Authority key identifier: 85:34:58:4A:58:C0:40:86:0F:48:26:40:60:92:FE:FF:04:D6:CF:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/404b0e4c80247304b30d4c8948892b44ae42a974.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ca6def44-153f-4d1a-ab81-3ea8806d46de/c640ff0d5d9c329dd84bf6fc454484695e3c899a.roa
Signing time: Wed 24 Mar 2021 14:31:32 +0000
ROA not before: Wed 24 Mar 2021 14:31:32 +0000
ROA not after: Tue 24 Mar 2026 14:31:32 +0000
asID: 27953
IP address blocks: 181.118.176.0/20 maxlen: 24
186.0.128.0/21 maxlen: 24
186.64.64.0/19 maxlen: 24
186.190.160.0/20 maxlen: 24
190.11.192.0/20 maxlen: 24
190.122.128.0/20 maxlen: 24
190.211.128.0/21 maxlen: 24
200.7.176.0/21 maxlen: 24
200.85.88.0/21 maxlen: 24
2800:940::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 861475 (0xd2523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404b0e4c80247304b30d4c8948892b44ae42a974
Validity
Not Before: Mar 24 14:31:32 2021 GMT
Not After : Mar 24 14:31:32 2026 GMT
Subject: CN=c640ff0d5d9c329dd84bf6fc454484695e3c899a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:a7:b7:d4:6e:ec:c0:27:9e:ce:69:eb:49:
53:1e:23:5f:a6:77:67:1b:2b:32:b4:af:fb:fb:20:
a0:b8:6b:07:dc:5c:c1:d8:c3:ef:1f:92:83:e7:81:
a3:fc:71:0f:cf:13:53:20:a8:46:18:cb:d2:2f:d3:
27:b6:bf:9d:07:ea:60:41:58:0e:90:cd:81:39:7d:
b4:66:d8:2b:a9:5e:77:86:8d:d5:1d:a0:52:7e:10:
b5:71:72:10:c0:ad:3d:12:33:2e:05:28:ed:11:57:
04:83:dc:77:7c:1b:32:d2:79:63:fd:d6:db:10:8f:
01:11:cd:ea:e3:41:fe:de:39:2e:f3:a6:00:9a:ed:
4d:57:44:08:f8:12:b1:ec:7c:21:86:7f:c2:a4:5a:
19:97:45:a6:c0:3a:87:36:ef:d0:99:83:ad:65:30:
ca:a7:b2:30:db:c5:62:94:8d:53:52:b8:24:68:55:
aa:3b:e4:8e:ac:8a:a6:9c:96:75:65:12:c5:40:8e:
5d:61:93:d0:b8:0a:c6:aa:c9:b4:2f:ad:78:06:35:
b2:15:1f:c3:85:27:a5:63:ca:d5:64:6f:3d:6f:52:
41:62:5f:6f:78:61:f7:29:99:32:6c:2a:70:22:24:
3c:4f:be:d3:c6:f6:c8:9c:a5:3e:47:27:e5:cb:57:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C5:CD:E6:3A:23:D1:F3:4B:82:93:54:28:C8:16:E3:72:88:61:84
X509v3 Authority Key Identifier:
keyid:85:34:58:4A:58:C0:40:86:0F:48:26:40:60:92:FE:FF:04:D6:CF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/404b0e4c80247304b30d4c8948892b44ae42a974.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ca6def44-153f-4d1a-ab81-3ea8806d46de/c640ff0d5d9c329dd84bf6fc454484695e3c899a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ca6def44-153f-4d1a-ab81-3ea8806d46de/404b0e4c80247304b30d4c8948892b44ae42a974.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.118.176.0/20
186.0.128.0/21
186.64.64.0/19
186.190.160.0/20
190.11.192.0/20
190.122.128.0/20
190.211.128.0/21
200.7.176.0/21
200.85.88.0/21
IPv6:
2800:940::/32
Signature Algorithm: sha256WithRSAEncryption
44:6b:ab:f0:54:72:f0:aa:ad:d2:04:ee:7e:c7:61:d9:c3:c0:
26:47:28:0b:46:94:d2:a6:17:2f:73:81:b3:80:15:52:15:86:
ad:4c:30:c1:0d:f9:bc:4b:f1:15:69:44:85:ac:a3:53:b6:68:
55:b7:a1:06:0b:cb:21:d4:1b:74:a2:25:99:ac:8e:e1:55:4f:
f6:1a:44:99:f4:18:60:37:e8:d2:c8:6a:86:39:a2:6d:e8:67:
c2:11:c7:38:4d:e8:2f:0c:d9:1b:2f:ec:9d:cb:8d:ce:19:ad:
d2:21:9c:49:42:05:e5:1a:ab:4b:31:86:16:35:10:27:05:33:
69:bd:95:9f:7c:38:a5:cc:f1:eb:30:3e:39:8d:f5:45:3e:6c:
e1:8d:cf:e1:83:76:2e:34:6e:2e:56:7f:80:e6:92:74:7c:fa:
ed:bc:84:62:f5:d4:93:27:61:ee:66:4c:7c:b1:4d:e8:0d:5f:
8a:4c:96:57:65:5c:4a:1e:d1:72:f6:17:44:a1:31:a2:c4:de:
1d:eb:6d:6d:f7:75:a4:d7:57:32:f6:b0:15:18:0e:ca:eb:17:
af:cc:10:a3:74:1c:de:88:4e:60:66:d5:6a:7f:d0:5e:85:fe:
50:fa:c0:59:9f:3e:6c:f6:c6:d0:e4:14:e0:7d:85:39:ae:50:
f4:6f:7d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:47 2024 by rpki-client on console-ams.rpki-client.org