Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/b3f248b97dc0ff44ccdb5685f0d985c1d9ba6934.roa
File: b3f248b97dc0ff44ccdb5685f0d985c1d9ba6934.roa (raw, json)
Hash identifier: UCjR1I5KKGYooNgWvGv4h/iCslh4cOTjWOFHgRHsbf8=
Subject key identifier: 2E:31:FC:C0:9B:0E:87:0E:5C:1F:E8:97:DF:A4:15:C1:0E:97:48:5D
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 08A955
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/b3f248b97dc0ff44ccdb5685f0d985c1d9ba6934.roa
Signing time: Fri 05 May 2023 17:54:29 +0000
ROA not before: Thu 04 May 2023 17:54:29 +0000
ROA not after: Mon 05 May 2025 17:54:29 +0000
asID: 17072
IP address blocks: 189.203.40.0/24 maxlen: 24
187.188.26.0/24 maxlen: 24
187.188.32.0/24 maxlen: 24
187.188.36.0/23 maxlen: 24
187.189.216.0/24 maxlen: 24
189.203.84.0/23 maxlen: 24
187.188.49.0/24 maxlen: 24
189.203.87.0/24 maxlen: 24
187.189.119.0/24 maxlen: 24
189.203.36.0/23 maxlen: 24
189.203.38.0/24 maxlen: 24
187.190.29.0/24 maxlen: 24
189.203.92.0/22 maxlen: 24
187.188.65.0/24 maxlen: 24
187.188.79.0/24 maxlen: 24
187.188.220.0/24 maxlen: 24
187.190.141.0/24 maxlen: 24
187.190.142.0/24 maxlen: 24
187.188.227.0/24 maxlen: 24
187.188.228.0/23 maxlen: 24
187.188.230.0/24 maxlen: 24
187.188.233.0/24 maxlen: 24
187.190.151.0/24 maxlen: 24
187.190.158.0/24 maxlen: 24
187.188.243.0/24 maxlen: 24
187.188.253.0/24 maxlen: 24
187.190.168.0/23 maxlen: 24
187.189.0.0/24 maxlen: 24
187.190.174.0/23 maxlen: 24
187.190.182.0/23 maxlen: 24
187.190.90.0/23 maxlen: 24
187.190.93.0/24 maxlen: 24
187.190.94.0/23 maxlen: 24
187.189.90.0/24 maxlen: 24
187.251.194.0/24 maxlen: 24
187.189.17.0/24 maxlen: 24
187.190.191.0/24 maxlen: 24
187.189.20.0/24 maxlen: 24
187.251.110.0/24 maxlen: 24
187.190.215.0/24 maxlen: 24
187.189.49.0/24 maxlen: 24
187.189.50.0/24 maxlen: 24
187.190.223.0/24 maxlen: 24
187.190.224.0/24 maxlen: 24
187.189.57.0/24 maxlen: 24
187.189.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 567637 (0x8a955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: May 4 17:54:29 2023 GMT
Not After : May 5 17:54:29 2025 GMT
Subject: CN=b3f248b97dc0ff44ccdb5685f0d985c1d9ba6934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:ba:bf:c2:cb:ab:1e:09:64:6f:15:23:f2:
93:db:62:17:4b:a4:80:2d:9f:46:22:e3:92:ee:81:
df:ce:5b:5b:f5:23:5a:62:3d:77:cc:b5:57:a1:31:
28:21:e8:b1:5c:bf:c6:28:16:dd:0a:be:24:e2:31:
a0:a7:2a:20:84:25:78:50:af:51:00:fb:19:3c:25:
70:3f:a5:ba:9d:80:14:1e:cf:43:39:97:82:3b:1d:
d5:64:d8:66:da:5a:46:34:ba:10:49:a9:b6:3c:d9:
fc:82:0f:1d:72:9b:d5:33:b1:6b:5d:dc:40:83:f8:
49:e7:48:fb:bb:c0:d8:64:3b:4f:50:46:3d:a9:25:
f2:4e:df:db:2e:3d:df:81:f9:c9:cb:49:80:c0:45:
1c:8e:c4:5b:29:44:57:55:28:ed:af:61:9d:6e:b7:
c8:4d:06:ee:d7:e1:4e:31:55:cb:34:65:5a:66:82:
c9:a6:9b:80:5f:26:33:8c:ce:45:41:95:27:d9:2b:
81:e6:5c:69:14:f1:1e:0e:55:ec:7e:92:06:dd:ce:
30:d9:be:d8:af:07:b9:12:2e:1b:20:8b:f6:91:30:
e8:bd:1e:2e:0d:aa:8f:f7:41:0c:1a:e2:5d:7f:8a:
29:9e:17:77:9f:8d:79:fa:da:4e:08:29:b6:6a:e7:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:31:FC:C0:9B:0E:87:0E:5C:1F:E8:97:DF:A4:15:C1:0E:97:48:5D
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/b3f248b97dc0ff44ccdb5685f0d985c1d9ba6934.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.188.26.0/24
187.188.32.0/24
187.188.36.0/23
187.188.49.0/24
187.188.65.0/24
187.188.79.0/24
187.188.220.0/24
187.188.227.0-187.188.230.255
187.188.233.0/24
187.188.243.0/24
187.188.253.0/24
187.189.0.0/24
187.189.17.0/24
187.189.20.0/24
187.189.49.0-187.189.50.255
187.189.57.0-187.189.58.255
187.189.90.0/24
187.189.119.0/24
187.189.216.0/24
187.190.29.0/24
187.190.90.0/23
187.190.93.0-187.190.95.255
187.190.141.0-187.190.142.255
187.190.151.0/24
187.190.158.0/24
187.190.168.0/23
187.190.174.0/23
187.190.182.0/23
187.190.191.0/24
187.190.215.0/24
187.190.223.0-187.190.224.255
187.251.110.0/24
187.251.194.0/24
189.203.36.0-189.203.38.255
189.203.40.0/24
189.203.84.0/23
189.203.87.0/24
189.203.92.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:57:e0:90:95:52:84:3d:47:08:0f:3a:59:3d:c6:63:1b:63:
75:4b:c7:e1:ef:82:c1:b7:c9:be:37:ac:01:d8:24:a8:1f:83:
c3:d0:7e:55:42:07:de:94:e2:67:79:44:3d:68:37:5e:12:32:
9b:f7:1d:93:ad:5f:02:07:57:e4:9c:d5:d3:76:0a:d4:1f:62:
20:69:3f:53:8f:73:db:8d:13:3d:ec:55:f1:0c:e5:61:05:53:
8c:43:2d:b7:7b:70:43:f1:82:e2:bb:60:f9:a0:da:b1:9b:e7:
12:e5:1c:67:80:63:a1:21:5c:f0:cc:68:4f:69:51:80:dd:73:
2e:58:2f:33:3d:a2:f5:03:7b:9c:13:54:e4:b6:7d:fa:fd:cd:
44:1e:85:96:9a:f4:d9:e4:18:e9:02:5a:b2:a8:5f:60:36:82:
b0:0e:da:64:a2:33:e8:e5:aa:21:21:03:aa:57:3e:d7:d8:b5:
bf:de:f2:dd:23:c2:a4:6e:40:4d:01:78:b4:94:be:b4:9e:4e:
21:c8:01:88:58:91:f1:6e:eb:9f:06:a5:0b:8b:98:4f:f8:03:
55:dc:f0:fa:a1:48:48:fe:84:5b:d1:6e:56:68:d4:b0:f3:1a:
7d:dd:26:0b:7d:50:ad:cd:76:d0:64:41:50:6d:7d:5c:c8:19:
43:9f:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org