Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/68dcd1efbf7e2c292ec7019f39c60b5b01f02ae6.roa
File: 68dcd1efbf7e2c292ec7019f39c60b5b01f02ae6.roa (raw, json)
Hash identifier: DJk9RKlHiyETA90QUKx/1bXfR9ZRFEAHuAo4oETtXiw=
Subject key identifier: 58:95:AF:23:ED:D6:2A:DC:13:1B:DF:B4:FD:53:85:82:E9:06:9E:B5
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 0D4B66
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/68dcd1efbf7e2c292ec7019f39c60b5b01f02ae6.roa
Signing time: Wed 11 Oct 2023 20:40:49 +0000
ROA not before: Tue 10 Oct 2023 20:40:49 +0000
ROA not after: Sat 11 Oct 2025 20:40:49 +0000
asID: 22884
IP address blocks: 187.251.217.0/24 maxlen: 24
187.251.212.0/24 maxlen: 24
187.251.205.0/24 maxlen: 24
187.251.193.0/24 maxlen: 24
187.251.157.0/24 maxlen: 24
187.251.155.0/24 maxlen: 24
187.251.154.0/24 maxlen: 24
187.251.153.0/24 maxlen: 24
187.251.140.0/24 maxlen: 24
187.251.120.0/24 maxlen: 24
187.251.113.0/24 maxlen: 24
187.191.56.0/24 maxlen: 24
187.191.53.0/24 maxlen: 24
187.191.52.0/24 maxlen: 24
187.191.50.0/24 maxlen: 24
187.191.45.0/24 maxlen: 24
187.191.44.0/24 maxlen: 24
187.191.41.0/24 maxlen: 24
187.191.29.0/24 maxlen: 24
187.191.26.0/24 maxlen: 24
187.191.21.0/24 maxlen: 24
187.191.17.0/24 maxlen: 24
187.191.2.0/24 maxlen: 24
187.191.1.0/24 maxlen: 24
187.190.233.0/24 maxlen: 24
187.190.227.0/24 maxlen: 24
187.190.150.0/24 maxlen: 24
187.190.149.0/24 maxlen: 24
187.190.115.0/24 maxlen: 24
187.190.114.0/24 maxlen: 24
187.190.113.0/24 maxlen: 24
187.190.112.0/24 maxlen: 24
187.190.106.0/24 maxlen: 24
187.190.101.0/24 maxlen: 24
187.190.100.0/24 maxlen: 24
187.190.70.0/24 maxlen: 24
187.190.60.0/24 maxlen: 24
187.190.53.0/24 maxlen: 24
187.190.7.0/24 maxlen: 24
187.190.1.0/24 maxlen: 24
187.189.251.0/24 maxlen: 24
187.189.249.0/24 maxlen: 24
187.189.232.0/24 maxlen: 24
187.189.184.0/24 maxlen: 24
187.189.47.0/24 maxlen: 24
187.189.31.0/24 maxlen: 24
187.189.23.0/24 maxlen: 24
187.189.9.0/24 maxlen: 24
187.188.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 871270 (0xd4b66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: Oct 10 20:40:49 2023 GMT
Not After : Oct 11 20:40:49 2025 GMT
Subject: CN=68dcd1efbf7e2c292ec7019f39c60b5b01f02ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d2:ba:c3:37:2b:69:ca:9e:00:83:8b:e2:92:
86:44:76:24:ab:9b:87:09:dc:72:4f:f6:33:e2:49:
6a:7f:29:73:7c:b2:88:bd:69:61:1c:52:86:38:f6:
8d:ae:b4:6f:ca:d2:5a:8b:ed:be:dd:c1:64:f1:af:
9a:ab:65:82:79:a0:7e:19:68:e4:99:a1:eb:ec:c9:
37:bd:0a:c8:10:d3:5a:ec:61:fc:cd:99:6a:46:fe:
2a:16:ae:6d:4c:ee:be:bd:7b:45:69:b0:d5:be:b7:
42:b8:16:54:65:ea:24:7b:1d:5f:5f:2f:ea:a3:0c:
60:fc:3d:3e:b8:c7:1d:a9:01:f3:2a:4f:50:32:48:
42:c3:dc:ec:83:35:b6:99:7f:f1:5f:0e:0e:94:52:
48:b6:ee:dc:8c:7f:9b:86:12:31:77:02:d8:a6:29:
11:93:c7:4a:64:16:0c:60:0c:49:40:ad:78:81:3e:
ac:ab:ad:8b:ef:82:c1:54:15:bf:91:23:4f:14:90:
e4:28:6d:3a:1a:90:24:85:35:01:6f:fe:9a:17:65:
99:91:36:f1:05:34:3d:b7:f4:ce:86:52:91:c7:61:
09:6f:a5:91:3d:79:7c:fe:b8:61:3e:82:01:cb:93:
44:d7:48:c1:9c:eb:40:96:0f:88:f5:72:2a:31:d4:
04:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:95:AF:23:ED:D6:2A:DC:13:1B:DF:B4:FD:53:85:82:E9:06:9E:B5
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/68dcd1efbf7e2c292ec7019f39c60b5b01f02ae6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.188.251.0/24
187.189.9.0/24
187.189.23.0/24
187.189.31.0/24
187.189.47.0/24
187.189.184.0/24
187.189.232.0/24
187.189.249.0/24
187.189.251.0/24
187.190.1.0/24
187.190.7.0/24
187.190.53.0/24
187.190.60.0/24
187.190.70.0/24
187.190.100.0/23
187.190.106.0/24
187.190.112.0/22
187.190.149.0-187.190.150.255
187.190.227.0/24
187.190.233.0/24
187.191.1.0-187.191.2.255
187.191.17.0/24
187.191.21.0/24
187.191.26.0/24
187.191.29.0/24
187.191.41.0/24
187.191.44.0/23
187.191.50.0/24
187.191.52.0/23
187.191.56.0/24
187.251.113.0/24
187.251.120.0/24
187.251.140.0/24
187.251.153.0-187.251.155.255
187.251.157.0/24
187.251.193.0/24
187.251.205.0/24
187.251.212.0/24
187.251.217.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:6e:4b:f3:5e:a6:2f:6a:9a:60:19:20:0f:0f:e2:1b:37:b6:
8a:0f:d2:89:1f:5a:34:f8:26:4f:e1:86:ac:f1:c5:d7:17:5a:
1e:58:c2:98:ad:59:16:35:71:47:14:34:4f:e1:c7:26:63:ed:
0b:39:03:bd:99:85:30:d8:9c:9a:f0:d1:a8:92:08:4d:08:60:
72:a7:71:f6:00:43:7a:30:d5:d0:0d:ff:66:ec:23:c3:ea:65:
30:d0:29:67:38:68:85:c7:04:70:8a:d1:96:e5:6b:14:a8:38:
8b:8f:04:2b:c1:bd:09:ba:01:7d:90:cb:12:18:7e:2c:d8:72:
0a:ae:02:74:2a:10:89:41:76:3d:10:d8:c8:bf:53:8d:14:c6:
20:be:01:fc:ae:f1:ae:57:c8:b2:31:0f:64:b4:40:15:1f:5d:
8b:ba:03:92:0c:c9:2b:d0:d6:66:69:b3:74:bf:27:d0:8d:9b:
62:76:ae:be:c0:09:b7:60:92:e4:5b:64:20:50:32:93:2d:f7:
b7:72:8a:24:f1:b0:35:75:17:f9:60:6c:c1:e0:78:f0:91:cd:
61:48:3c:4c:fa:df:b0:9e:39:e1:94:eb:d1:e5:df:e2:6a:93:
01:8c:f0:c7:b9:31:80:02:24:22:67:21:53:fb:85:97:56:ec:
49:09:54:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org