Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/bd0fc3169da85635a38186284ccce067def7e540.roa
File: bd0fc3169da85635a38186284ccce067def7e540.roa (raw, json)
Hash identifier: 3wQEMscBjc7upPvKxyVZOqVyehn6ol2LfVLFY1ERByk=
Subject key identifier: FC:D7:66:92:B9:CC:56:E1:B2:DF:19:D4:DC:E0:0F:DB:57:8B:C7:93
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 0D4E0D
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/bd0fc3169da85635a38186284ccce067def7e540.roa
Signing time: Wed 11 Oct 2023 20:49:59 +0000
ROA not before: Tue 10 Oct 2023 20:49:59 +0000
ROA not after: Sat 11 Oct 2025 20:49:59 +0000
asID: 22884
IP address blocks: 187.188.213.0/24 maxlen: 24
187.188.205.0/24 maxlen: 24
187.188.123.0/24 maxlen: 24
187.188.81.0/24 maxlen: 24
187.188.72.0/24 maxlen: 24
187.188.66.0/24 maxlen: 24
187.188.56.0/24 maxlen: 24
187.188.34.0/24 maxlen: 24
187.188.24.0/24 maxlen: 24
187.188.22.0/24 maxlen: 24
187.188.7.0/24 maxlen: 24
187.188.6.0/24 maxlen: 24
187.188.1.0/24 maxlen: 24
186.96.188.0/24 maxlen: 24
186.96.186.0/24 maxlen: 24
186.96.185.0/24 maxlen: 24
186.96.184.0/24 maxlen: 24
186.96.180.0/24 maxlen: 24
186.96.179.0/24 maxlen: 24
186.96.178.0/24 maxlen: 24
186.96.172.0/24 maxlen: 24
186.96.167.0/24 maxlen: 24
186.96.151.0/24 maxlen: 24
186.96.149.0/24 maxlen: 24
186.96.145.0/24 maxlen: 24
186.96.140.0/24 maxlen: 24
186.96.58.0/24 maxlen: 24
186.96.53.0/24 maxlen: 24
186.96.46.0/24 maxlen: 24
186.96.31.0/24 maxlen: 24
186.96.17.0/24 maxlen: 24
186.96.2.0/24 maxlen: 24
186.96.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 871949 (0xd4e0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: Oct 10 20:49:59 2023 GMT
Not After : Oct 11 20:49:59 2025 GMT
Subject: CN=bd0fc3169da85635a38186284ccce067def7e540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:1f:77:3b:d3:99:32:ee:09:a8:14:59:54:
ad:67:78:36:d6:33:a9:4a:2d:b0:ba:9e:ca:23:42:
d1:46:2a:18:3a:52:95:fe:f5:28:a5:e2:e2:8e:4b:
4d:e2:ce:04:71:16:09:8e:99:d9:af:25:ae:10:b3:
07:08:7f:b3:d1:b8:6c:ce:77:64:cc:68:72:81:6b:
5a:74:d3:16:dc:41:34:89:43:f2:2d:0c:af:d0:2a:
21:97:87:56:1e:b5:0c:05:df:11:33:87:51:fd:23:
20:41:35:70:86:0d:a3:40:63:a3:e9:16:ec:8b:d1:
58:70:94:a1:15:c2:c7:f9:4a:1a:6a:31:60:d6:bf:
0c:68:f0:0f:1d:4b:f3:04:47:96:42:6a:8b:a3:d9:
a8:fe:92:36:3c:0d:69:3d:cc:c2:89:d6:6f:18:21:
f8:0c:e7:92:3a:1a:3b:2d:7f:f3:47:03:1e:9d:66:
e1:52:58:8d:0f:e8:ad:b8:58:ff:5b:1c:b9:78:f9:
06:54:1b:87:09:c5:77:fd:6c:d2:fa:06:13:ba:d0:
c1:ae:6c:f8:14:01:c9:f1:1e:08:6d:eb:5b:76:b3:
a0:fe:9e:3d:2e:4d:69:a2:41:e7:e5:b2:c8:e7:96:
6b:df:7a:8b:2e:9e:3b:43:28:4a:e0:74:e2:03:6c:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D7:66:92:B9:CC:56:E1:B2:DF:19:D4:DC:E0:0F:DB:57:8B:C7:93
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/bd0fc3169da85635a38186284ccce067def7e540.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.96.1.0-186.96.2.255
186.96.17.0/24
186.96.31.0/24
186.96.46.0/24
186.96.53.0/24
186.96.58.0/24
186.96.140.0/24
186.96.145.0/24
186.96.149.0/24
186.96.151.0/24
186.96.167.0/24
186.96.172.0/24
186.96.178.0-186.96.180.255
186.96.184.0-186.96.186.255
186.96.188.0/24
187.188.1.0/24
187.188.6.0/23
187.188.22.0/24
187.188.24.0/24
187.188.34.0/24
187.188.56.0/24
187.188.66.0/24
187.188.72.0/24
187.188.81.0/24
187.188.123.0/24
187.188.205.0/24
187.188.213.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f6:48:47:fc:3e:15:1e:22:16:f0:8d:7f:cf:7f:93:f3:c7:
ab:5b:b5:73:ad:d6:c9:64:e7:63:08:fe:32:06:07:01:7c:a1:
bf:7b:69:8e:ba:b9:58:13:96:4d:b5:58:31:2c:fb:90:eb:f9:
24:80:73:80:fe:88:f6:3f:df:27:a0:cb:b4:62:90:a8:41:07:
bf:c7:ef:e9:fb:2c:03:29:c1:3a:3d:0d:af:9c:79:1e:9b:3c:
25:db:91:87:50:9f:1a:15:c2:5f:09:73:1c:fb:67:ac:cd:ff:
d5:50:48:b1:df:7b:08:6b:a5:18:e9:84:1c:b3:2a:f2:56:2b:
ff:29:d6:89:4c:50:71:e4:cf:17:56:c0:e8:d0:1d:e9:cd:59:
07:64:53:52:44:ee:72:61:2b:08:a2:64:32:f5:64:96:d1:3b:
7b:f5:b3:6e:68:88:b0:bb:9a:bd:a8:80:bf:71:f3:91:64:98:
17:8d:37:f2:ff:ca:9a:1b:3f:27:df:7b:cd:d4:83:49:15:4b:
a3:38:1c:65:e3:6a:39:39:56:04:f1:69:63:bd:c5:06:41:19:
4f:4c:24:a9:08:0e:24:a3:47:ee:70:6e:4f:ca:42:a5:94:9e:
5c:94:7c:f8:5e:60:f3:6e:23:07:d8:09:c8:d1:5d:fc:aa:6e:
d1:5e:d7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org