Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/9fcfcc06ef8088f2df8d529ddf97ee334baf66ab.roa
File: 9fcfcc06ef8088f2df8d529ddf97ee334baf66ab.roa (raw, json)
Hash identifier: oL/Kjw8LT6YSC+3KN06nHOpAzVxsZcAKNwp6UT71W+Q=
Subject key identifier: 3A:07:5E:93:55:B7:19:21:BD:CE:50:AA:F9:96:5B:5F:79:59:4B:F1
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 0D9812
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/9fcfcc06ef8088f2df8d529ddf97ee334baf66ab.roa
Signing time: Wed 18 Oct 2023 18:50:27 +0000
ROA not before: Tue 17 Oct 2023 18:50:27 +0000
ROA not after: Sat 18 Oct 2025 18:50:27 +0000
asID: 22884
IP address blocks: 186.96.39.0/24 maxlen: 24
186.96.42.0/24 maxlen: 24
186.96.51.0/24 maxlen: 24
187.188.97.0/24 maxlen: 24
187.188.98.0/24 maxlen: 24
187.188.102.0/24 maxlen: 24
187.188.103.0/24 maxlen: 24
187.188.104.0/24 maxlen: 24
187.188.105.0/24 maxlen: 24
187.188.106.0/24 maxlen: 24
187.188.107.0/24 maxlen: 24
187.188.108.0/24 maxlen: 24
187.188.109.0/24 maxlen: 24
187.188.111.0/24 maxlen: 24
187.188.112.0/24 maxlen: 24
187.188.113.0/24 maxlen: 24
187.188.114.0/24 maxlen: 24
187.188.115.0/24 maxlen: 24
187.188.116.0/24 maxlen: 24
187.188.153.0/24 maxlen: 24
187.188.189.0/24 maxlen: 24
187.188.200.0/24 maxlen: 24
187.188.216.0/24 maxlen: 24
187.188.217.0/24 maxlen: 24
187.188.218.0/24 maxlen: 24
187.188.219.0/24 maxlen: 24
187.188.221.0/24 maxlen: 24
187.188.226.0/24 maxlen: 24
187.188.234.0/24 maxlen: 24
187.189.10.0/24 maxlen: 24
187.189.24.0/24 maxlen: 24
187.189.32.0/24 maxlen: 24
187.189.42.0/24 maxlen: 24
187.189.43.0/24 maxlen: 24
187.189.48.0/24 maxlen: 24
187.189.55.0/24 maxlen: 24
187.189.56.0/24 maxlen: 24
187.189.64.0/24 maxlen: 24
187.189.65.0/24 maxlen: 24
187.189.104.0/24 maxlen: 24
187.189.109.0/24 maxlen: 24
187.189.110.0/24 maxlen: 24
187.189.111.0/24 maxlen: 24
187.189.113.0/24 maxlen: 24
187.189.120.0/24 maxlen: 24
187.189.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890898 (0xd9812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: Oct 17 18:50:27 2023 GMT
Not After : Oct 18 18:50:27 2025 GMT
Subject: CN=9fcfcc06ef8088f2df8d529ddf97ee334baf66ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:ea:8e:95:91:ac:1e:b3:50:72:ba:76:2f:
5b:e8:67:3d:06:b9:80:52:7d:02:b6:31:f3:6b:15:
43:8b:eb:0e:40:64:eb:0a:0b:8c:50:01:d1:67:09:
d4:f9:e1:7f:1f:ae:b0:9b:e3:c9:3f:54:d9:27:76:
14:25:49:0d:0b:23:ad:72:77:c9:53:8c:e5:41:bf:
0f:1f:35:25:79:6a:e4:8d:56:c0:73:1f:d0:ac:f0:
ae:36:cd:93:07:70:a1:ba:7a:1f:f6:25:6a:90:77:
61:34:ee:88:61:ed:dd:b7:42:4e:bf:7e:2c:43:17:
43:8d:b7:39:71:4a:af:fc:92:61:ca:54:8f:72:22:
f1:17:7f:ff:27:14:8a:3c:b9:08:98:17:2a:15:a7:
57:f6:11:e2:c4:49:81:9a:b9:b1:c4:b6:53:25:54:
6f:30:bf:76:78:f2:36:74:2f:e8:d5:e1:45:2e:ba:
f9:6e:f3:09:ff:a5:c0:86:ac:06:de:28:d6:5a:66:
3c:15:bd:14:33:79:85:5e:a1:98:d5:20:6b:16:a0:
03:08:81:fa:50:f7:50:07:b3:5d:4a:a7:2c:37:e7:
9a:4e:39:6c:05:06:77:b1:4e:12:4b:81:84:2c:be:
d7:05:00:f3:e2:91:da:71:9e:e9:cc:26:55:51:3e:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:07:5E:93:55:B7:19:21:BD:CE:50:AA:F9:96:5B:5F:79:59:4B:F1
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/9fcfcc06ef8088f2df8d529ddf97ee334baf66ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.96.39.0/24
186.96.42.0/24
186.96.51.0/24
187.188.97.0-187.188.98.255
187.188.102.0-187.188.109.255
187.188.111.0-187.188.116.255
187.188.153.0/24
187.188.189.0/24
187.188.200.0/24
187.188.216.0/22
187.188.221.0/24
187.188.226.0/24
187.188.234.0/24
187.189.10.0/24
187.189.24.0/24
187.189.32.0/24
187.189.42.0/23
187.189.48.0/24
187.189.55.0-187.189.56.255
187.189.64.0/23
187.189.104.0/24
187.189.109.0-187.189.111.255
187.189.113.0/24
187.189.120.0/24
187.189.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5e:90:5a:7a:4d:9d:35:48:6a:bd:76:40:ab:10:7a:f3:6a:
83:d9:8a:b8:87:ed:80:c9:78:cd:4f:16:4d:04:ab:13:37:37:
e9:7a:2d:5e:be:33:49:cd:57:a4:1c:15:86:8e:86:25:d3:0b:
75:58:9f:28:36:cb:5b:0c:ee:12:eb:71:a1:d9:5f:21:f5:12:
7d:b2:98:da:af:ff:d5:9a:5c:45:17:72:f7:bc:31:f9:5c:41:
87:12:f0:e2:d4:85:92:87:ec:4d:4b:89:ef:5d:15:52:36:68:
30:9c:80:91:2b:46:8d:cc:67:6e:18:ba:85:77:4c:c9:12:da:
f6:f9:69:d5:55:ad:7e:42:29:0b:ab:bb:04:1b:98:8c:ff:ae:
f3:85:f3:20:18:91:f8:d2:5f:94:f6:b8:8e:f7:27:01:d8:8c:
f0:02:12:53:13:e0:d6:fc:ed:28:0c:a7:4f:9f:a0:ce:75:72:
6b:60:b5:f5:27:a3:d8:a5:b6:7a:b9:c6:37:a3:4a:5f:5b:c3:
53:be:84:6d:01:7b:ee:cb:3d:a2:6d:35:2e:78:8f:f4:47:58:
26:ef:ed:af:de:49:5e:66:d4:90:ba:d8:1e:ea:07:03:f5:1e:
0a:17:27:33:5a:a0:87:26:2a:93:5a:ee:fc:94:52:44:60:31:
ef:86:46:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org