Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/259dd6f501823d4ae6153067fe6de61804dc5ef3.roa
File: 259dd6f501823d4ae6153067fe6de61804dc5ef3.roa (raw, json)
Hash identifier: E8aKgIvS9P7d+UREyZ19OkvdNJDSlveCSg43gRntbRM=
Subject key identifier: 06:8D:3F:C4:23:CA:82:47:1F:BD:66:21:44:AF:33:4D:31:3B:8B:E5
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 0D38D1
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/259dd6f501823d4ae6153067fe6de61804dc5ef3.roa
Signing time: Wed 11 Oct 2023 18:57:09 +0000
ROA not before: Tue 10 Oct 2023 18:57:09 +0000
ROA not after: Sat 11 Oct 2025 18:57:09 +0000
asID: 22884
IP address blocks: 189.203.251.0/24 maxlen: 24
189.203.203.0/24 maxlen: 24
189.203.198.0/24 maxlen: 24
189.203.186.0/24 maxlen: 24
189.203.184.0/24 maxlen: 24
189.203.179.0/24 maxlen: 24
189.203.164.0/24 maxlen: 24
189.203.160.0/24 maxlen: 24
189.203.72.0/24 maxlen: 24
189.203.64.0/24 maxlen: 24
187.251.252.0/24 maxlen: 24
187.251.246.0/24 maxlen: 24
187.251.245.0/24 maxlen: 24
187.251.222.0/24 maxlen: 24
187.251.203.0/24 maxlen: 24
187.251.195.0/24 maxlen: 24
187.251.156.0/24 maxlen: 24
187.251.150.0/24 maxlen: 24
187.251.149.0/24 maxlen: 24
187.251.148.0/24 maxlen: 24
187.251.147.0/24 maxlen: 24
187.251.135.0/24 maxlen: 24
187.251.125.0/24 maxlen: 24
187.251.123.0/24 maxlen: 24
187.251.109.0/24 maxlen: 24
187.190.252.0/24 maxlen: 24
187.190.225.0/24 maxlen: 24
187.190.137.0/24 maxlen: 24
187.190.118.0/24 maxlen: 24
187.190.109.0/24 maxlen: 24
187.190.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866513 (0xd38d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: Oct 10 18:57:09 2023 GMT
Not After : Oct 11 18:57:09 2025 GMT
Subject: CN=259dd6f501823d4ae6153067fe6de61804dc5ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:34:11:10:1a:2b:89:20:39:ad:8f:84:e5:
4f:39:1c:29:46:c5:3e:5b:d4:f2:1e:4d:e6:42:1c:
9e:91:d0:15:73:d0:99:de:2c:d2:5c:1a:09:71:c4:
cd:34:27:bf:dc:97:2c:b4:34:07:96:56:75:e5:90:
e7:f5:17:90:b1:fb:e1:8e:91:e3:88:d6:9a:a2:61:
51:f3:da:6c:2d:66:c9:eb:eb:33:4f:50:f3:fa:1e:
10:8f:66:e1:2d:0c:9e:2e:95:0b:d0:b7:e6:f3:a4:
b5:82:9a:fe:23:ac:3e:1e:c6:98:c9:26:66:3c:0b:
aa:a0:0c:98:d1:6a:78:f7:df:c8:ab:00:77:2d:0c:
06:f1:4d:1f:c7:78:c3:ae:5d:e7:7e:5c:e5:80:db:
3b:c2:4e:e5:6c:a5:37:db:c4:58:d5:c1:6e:e5:fc:
84:02:b3:0a:69:aa:ca:68:1d:96:50:b1:69:bd:78:
12:87:5c:59:97:19:de:7a:d0:6b:91:e6:76:88:9c:
86:c2:c4:29:31:82:2b:3b:4e:70:1c:80:37:2c:e8:
d9:13:87:af:0e:15:c9:eb:c8:bb:1f:dc:35:76:fa:
d6:a9:12:c9:63:35:fe:1f:81:5b:4e:21:50:cd:4b:
4a:ef:cc:09:64:5e:d3:c5:e2:b6:62:03:08:db:d2:
19:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8D:3F:C4:23:CA:82:47:1F:BD:66:21:44:AF:33:4D:31:3B:8B:E5
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/259dd6f501823d4ae6153067fe6de61804dc5ef3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.190.108.0/23
187.190.118.0/24
187.190.137.0/24
187.190.225.0/24
187.190.252.0/24
187.251.109.0/24
187.251.123.0/24
187.251.125.0/24
187.251.135.0/24
187.251.147.0-187.251.150.255
187.251.156.0/24
187.251.195.0/24
187.251.203.0/24
187.251.222.0/24
187.251.245.0-187.251.246.255
187.251.252.0/24
189.203.64.0/24
189.203.72.0/24
189.203.160.0/24
189.203.164.0/24
189.203.179.0/24
189.203.184.0/24
189.203.186.0/24
189.203.198.0/24
189.203.203.0/24
189.203.251.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a8:e6:35:2c:eb:70:93:de:28:7b:05:14:f6:23:7e:e7:24:
3c:25:c8:48:c7:95:ab:98:9d:6b:b9:71:30:a1:f9:77:1b:5c:
f8:cd:0f:82:10:d5:51:f7:4a:cd:7e:b1:d9:c8:82:87:d6:b1:
af:9a:8f:c5:69:cf:e6:a4:01:e8:53:cd:d0:0f:91:b3:53:28:
75:d5:2a:c6:0b:8d:75:62:c2:4e:76:9e:d3:b6:54:db:78:e4:
66:9c:68:d5:71:df:30:39:a6:90:b4:57:f8:d6:86:d4:aa:25:
a8:23:83:4d:af:32:90:bc:e8:44:b5:8e:8c:3f:12:e1:53:c7:
fb:de:7f:5e:52:b8:4a:2d:51:34:d4:b4:9a:f8:22:92:ea:29:
3a:fd:88:43:d4:be:09:f6:95:7d:9b:eb:8c:f5:8c:ad:1d:70:
f4:e8:ab:8b:97:04:d6:f4:69:47:31:b5:01:6a:63:49:64:a8:
73:c7:32:af:2a:96:42:80:f1:f8:67:d7:48:08:42:ad:c7:e4:
a7:ad:32:47:a9:6f:c6:94:19:13:9e:ee:dd:a7:d4:11:fe:a8:
a6:20:9f:dd:0c:00:d4:e8:0f:0f:41:6a:a4:57:a4:fc:ce:79:
24:4c:f4:5b:4e:d1:ab:68:16:b6:f3:ce:9e:2e:5a:d8:51:a2:
aa:19:00:f0
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgIDDTjRMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDkx
M2Q1Y2RiMTYwNzI2ZGM5MmUwNGVkNDZhNjU4ZWM2YmZjYmJkZDEwHhcNMjMxMDEw
MTg1NzA5WhcNMjUxMDExMTg1NzA5WjAzMTEwLwYDVQQDEygyNTlkZDZmNTAxODIz
ZDRhZTYxNTMwNjdmZTZkZTYxODA0ZGM1ZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkuQ0ERAaK4kgOa2PhOVPORwpRsU+W9TyHk3mQhyekdAVc9CZ
3izSXBoJccTNNCe/3JcstDQHllZ15ZDn9ReQsfvhjpHjiNaaomFR89psLWbJ6+sz
T1Dz+h4Qj2bhLQyeLpUL0Lfm86S1gpr+I6w+HsaYySZmPAuqoAyY0Wp499/IqwB3
LQwG8U0fx3jDrl3nflzlgNs7wk7lbKU328RY1cFu5fyEArMKaarKaB2WULFpvXgS
h1xZlxneetBrkeZ2iJyGwsQpMYIrO05wHIA3LOjZE4evDhXJ68i7H9w1dvrWqRLJ
YzX+H4FbTiFQzUtK78wJZF7TxeK2YgMI29IZIQIDAQABo4IDBjCCAwIwHQYDVR0O
BBYEFAaNP8QjyoJHH71mIUSvM00xO4vlMB8GA1UdIwQYMBaAFI9xTwL31bpGSCLp
2dR7u2DVk6EyMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOTEzZDVj
ZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRkMS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2Q1YWQ2YzAtNDk5Yi00MzgwLTk4NGYtODc0Yzlm
NTFkMmZmLzI1OWRkNmY1MDE4MjNkNGFlNjE1MzA2N2ZlNmRlNjE4MDRkYzVlZjMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZDVhZDZjMC00OTliLTQzODAtOTg0Zi04NzRj
OWY1MWQyZmYvOTEzZDVjZGIxNjA3MjZkYzkyZTA0ZWQ0NmE2NThlYzZiZmNiYmRk
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCByQYIKwYBBQUHAQcBAf8E
gbkwgbYwgbMEAgABMIGsAwQBu75sAwQAu752AwQAu76JAwQAu77hAwQAu778AwQA
u/ttAwQAu/t7AwQAu/t9AwQAu/uHMAwDBAC7+5MDBAC7+5YDBAC7+5wDBAC7+8MD
BAC7+8sDBAC7+94wDAMEALv79QMEALv79gMEALv7/AMEAL3LQAMEAL3LSAMEAL3L
oAMEAL3LpAMEAL3LswMEAL3LuAMEAL3LugMEAL3LxgMEAL3LywMEAL3L+zANBgkq
hkiG9w0BAQsFAAOCAQEAS6jmNSzrcJPeKHsFFPYjfuckPCXISMeVq5ida7lxMKH5
dxtc+M0PghDVUfdKzX6x2ciCh9axr5qPxWnP5qQB6FPN0A+Rs1ModdUqxguNdWLC
Tnae07ZU23jkZpxo1XHfMDmmkLRX+NaG1KolqCODTa8ykLzoRLWOjD8S4VPH+95/
XlK4Si1RNNS0mvgikuopOv2IQ9S+CfaVfZvrjPWMrR1w9Oiri5cE1vRpRzG1AWpj
SWSoc8cyryqWQoDx+GfXSAhCrcfkp60yR6lvxpQZE57u3afUEf6opiCf3QwA1OgP
D0FqpFek/M55JEz0W07Rq2gWtvPOni5a2FGiqhkA8A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org