Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/06a4625e285f6d27ac64f045fcfbf1efe50c1b39.roa
File: 06a4625e285f6d27ac64f045fcfbf1efe50c1b39.roa (raw, json)
Hash identifier: NCiFI6cIx8u3YFQlcFqCmtElJGMu6+SOGGEZNUtYR7k=
Subject key identifier: 8C:C6:3A:22:1F:29:DF:E7:5D:EB:00:3D:0F:9D:06:C9:F7:FB:F7:A6
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 0CBF4A
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/06a4625e285f6d27ac64f045fcfbf1efe50c1b39.roa
Signing time: Wed 27 Sep 2023 18:42:23 +0000
ROA not before: Tue 26 Sep 2023 18:42:23 +0000
ROA not after: Sat 27 Sep 2025 18:42:23 +0000
asID: 17072
IP address blocks: 187.188.23.0/24 maxlen: 24
187.188.63.0/24 maxlen: 24
187.188.64.0/24 maxlen: 24
187.189.95.0/24 maxlen: 24
187.189.148.0/24 maxlen: 24
187.189.149.0/24 maxlen: 24
187.189.151.0/24 maxlen: 24
187.189.154.0/24 maxlen: 24
187.189.155.0/24 maxlen: 24
187.189.168.0/24 maxlen: 24
187.189.190.0/24 maxlen: 24
187.189.208.0/24 maxlen: 24
187.189.247.0/24 maxlen: 24
187.189.248.0/24 maxlen: 24
187.190.160.0/24 maxlen: 24
187.190.161.0/24 maxlen: 24
189.203.6.0/24 maxlen: 24
189.203.7.0/24 maxlen: 24
189.203.137.0/24 maxlen: 24
189.203.149.0/24 maxlen: 24
189.203.192.0/24 maxlen: 24
189.203.204.0/24 maxlen: 24
189.203.205.0/24 maxlen: 24
189.203.206.0/24 maxlen: 24
189.203.207.0/24 maxlen: 24
189.203.228.0/24 maxlen: 24
189.203.235.0/24 maxlen: 24
189.203.236.0/24 maxlen: 24
189.203.237.0/24 maxlen: 24
186.96.190.0/24 maxlen: 24
187.190.197.0/24 maxlen: 24
187.190.202.0/24 maxlen: 24
187.190.205.0/24 maxlen: 24
187.191.8.0/24 maxlen: 24
189.203.97.0/24 maxlen: 24
189.203.100.0/24 maxlen: 24
189.203.103.0/24 maxlen: 24
189.203.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 835402 (0xcbf4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: Sep 26 18:42:23 2023 GMT
Not After : Sep 27 18:42:23 2025 GMT
Subject: CN=06a4625e285f6d27ac64f045fcfbf1efe50c1b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:af:f3:45:ec:1a:6c:3f:92:79:dc:21:80:
61:6e:80:37:01:0c:97:ad:50:9d:e2:ec:db:1f:43:
41:d6:c5:2b:84:35:f8:d7:a6:23:e2:c7:83:11:60:
68:23:17:6c:cc:ec:1e:1c:bf:91:53:79:fd:41:d1:
40:80:f8:d9:6b:63:44:ee:a3:93:58:33:e3:3b:fc:
13:e7:fd:af:e1:cb:48:71:10:77:4e:02:d1:c3:2d:
e9:2f:7c:25:a8:db:58:17:a8:84:8f:07:ea:51:7c:
cb:ab:a4:42:29:c7:cc:1a:2d:14:26:07:47:74:a3:
67:40:b4:42:9e:af:ba:95:60:5c:48:4f:d1:e1:af:
f3:86:63:32:30:bd:22:4f:0f:a5:0c:47:e4:6b:d5:
ee:d1:ff:dc:a3:21:d6:68:0e:ea:c8:ef:b5:7d:d2:
0d:2f:8b:35:cb:ed:f0:fb:6a:54:28:b7:6c:c1:8b:
3c:63:c1:e0:3d:49:a1:9c:ba:d5:e9:4d:a5:43:60:
9f:e3:1e:4e:c2:97:0f:5e:b6:b0:57:5b:19:cf:e9:
d5:71:91:0c:35:3d:d7:77:a1:0c:55:4d:4f:97:58:
55:59:07:7b:ea:75:33:b8:35:92:01:75:53:77:cc:
af:20:47:73:5a:ca:ed:19:d9:52:3d:5b:a9:33:a3:
f5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C6:3A:22:1F:29:DF:E7:5D:EB:00:3D:0F:9D:06:C9:F7:FB:F7:A6
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/06a4625e285f6d27ac64f045fcfbf1efe50c1b39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.96.190.0/24
187.188.23.0/24
187.188.63.0-187.188.64.255
187.189.95.0/24
187.189.148.0/23
187.189.151.0/24
187.189.154.0/23
187.189.168.0/24
187.189.190.0/24
187.189.208.0/24
187.189.247.0-187.189.248.255
187.190.160.0/23
187.190.197.0/24
187.190.202.0/24
187.190.205.0/24
187.191.8.0/24
189.203.6.0/23
189.203.97.0/24
189.203.100.0/24
189.203.103.0/24
189.203.106.0/24
189.203.137.0/24
189.203.149.0/24
189.203.192.0/24
189.203.204.0/22
189.203.228.0/24
189.203.235.0-189.203.237.255
Signature Algorithm: sha256WithRSAEncryption
4e:f0:2f:6e:4d:0d:d7:22:6e:dc:91:df:5c:37:1f:69:8b:ca:
6b:4d:35:c1:f2:3e:d2:c4:e7:e1:c3:d1:96:d4:ed:80:bc:e7:
1e:ea:02:64:04:ca:12:5e:85:31:c9:bd:67:78:e5:f5:43:f5:
ac:d4:58:6a:e8:29:51:89:fa:ab:8a:cf:02:fd:b5:21:76:d1:
e4:de:ac:5b:68:39:32:b6:65:c1:e4:d8:f0:eb:e0:ab:33:81:
39:07:fd:49:7c:32:5f:e9:74:32:04:44:e0:26:fd:de:a0:f5:
76:67:6a:08:9d:7f:6f:fd:4a:79:fc:6b:a9:4c:87:dc:13:2e:
50:94:c1:fe:a1:ad:b3:af:b9:75:4a:88:b8:b8:50:94:d8:76:
67:47:18:70:dd:8f:88:5a:25:9e:67:d1:5f:6d:59:ad:f0:43:
d6:0c:45:e6:32:5c:22:a0:75:55:57:ab:71:08:e5:b0:9c:d2:
ec:00:ff:bb:26:10:60:c7:46:ab:4c:3d:9c:37:ff:5f:f5:3a:
89:4d:31:5b:3a:63:79:00:fe:ef:94:1f:89:09:15:a1:d6:4b:
dc:f0:de:c4:bc:1f:8c:e4:de:b0:e6:74:c1:aa:2b:85:47:9d:
2d:b6:92:c2:21:9e:58:5e:41:0d:20:b0:6a:73:04:20:c0:45:
64:ac:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org