Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/c3474888f0047df1fbd54ec0aed914ed5c18680e.roa
File: c3474888f0047df1fbd54ec0aed914ed5c18680e.roa (raw, json)
Hash identifier: friLGmROtEwgDJrm4MvAOun0vAyu2KeKrgvROpPBgBY=
Subject key identifier: A2:21:82:C0:25:CF:70:5A:7C:C9:98:98:E9:78:FF:34:AF:E1:DC:1E
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 0D5A18
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/c3474888f0047df1fbd54ec0aed914ed5c18680e.roa
Signing time: Wed 11 Oct 2023 21:57:32 +0000
ROA not before: Tue 10 Oct 2023 21:57:31 +0000
ROA not after: Sat 11 Oct 2025 21:57:31 +0000
asID: 22884
IP address blocks: 187.190.35.0/24 maxlen: 24
187.190.13.0/24 maxlen: 24
187.190.9.0/24 maxlen: 24
187.190.0.0/24 maxlen: 24
187.189.252.0/24 maxlen: 24
187.189.236.0/24 maxlen: 24
187.189.235.0/24 maxlen: 24
187.189.234.0/24 maxlen: 24
187.189.233.0/24 maxlen: 24
187.189.209.0/24 maxlen: 24
187.189.205.0/24 maxlen: 24
187.189.199.0/24 maxlen: 24
187.189.194.0/24 maxlen: 24
187.189.193.0/24 maxlen: 24
187.189.192.0/24 maxlen: 24
187.189.191.0/24 maxlen: 24
187.189.152.0/24 maxlen: 24
187.189.80.0/24 maxlen: 24
187.189.79.0/24 maxlen: 24
187.189.77.0/24 maxlen: 24
187.189.75.0/24 maxlen: 24
187.189.74.0/24 maxlen: 24
187.189.73.0/24 maxlen: 24
187.189.66.0/24 maxlen: 24
187.189.51.0/24 maxlen: 24
187.189.46.0/24 maxlen: 24
187.189.38.0/24 maxlen: 24
187.189.11.0/24 maxlen: 24
187.188.252.0/24 maxlen: 24
187.188.246.0/24 maxlen: 24
187.188.244.0/24 maxlen: 24
187.188.238.0/24 maxlen: 24
187.188.214.0/24 maxlen: 24
187.188.212.0/24 maxlen: 24
187.188.210.0/24 maxlen: 24
187.188.204.0/24 maxlen: 24
187.188.190.0/24 maxlen: 24
187.188.181.0/24 maxlen: 24
187.188.162.0/24 maxlen: 24
187.188.161.0/24 maxlen: 24
187.188.160.0/24 maxlen: 24
187.188.158.0/24 maxlen: 24
187.188.157.0/24 maxlen: 24
187.188.154.0/24 maxlen: 24
187.188.152.0/24 maxlen: 24
187.188.150.0/24 maxlen: 24
187.188.149.0/24 maxlen: 24
187.188.148.0/24 maxlen: 24
187.188.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875032 (0xd5a18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: Oct 10 21:57:31 2023 GMT
Not After : Oct 11 21:57:31 2025 GMT
Subject: CN=c3474888f0047df1fbd54ec0aed914ed5c18680e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b9:18:5c:3f:7d:59:3a:6a:33:21:ce:58:bd:
b0:51:4d:84:b2:80:84:cb:15:6b:f7:90:8e:a4:3d:
cb:ad:10:cd:8c:18:6b:6f:90:54:d2:1d:0f:8b:eb:
c9:3b:3d:c9:14:36:97:10:c4:a2:7a:8c:17:6f:1c:
47:0b:6a:51:eb:ac:74:09:e4:a1:20:1f:3a:14:c5:
94:39:26:15:d5:c7:a3:04:4f:69:84:03:18:94:b7:
b2:d5:9b:4d:a9:47:e4:80:1a:6e:87:39:17:1b:62:
de:19:90:55:90:67:de:fd:de:84:f9:66:e7:ad:59:
6d:98:b7:93:a2:fd:65:bb:ad:81:78:72:63:6f:46:
f3:dd:c2:19:22:9b:8f:69:f4:93:08:dc:2f:43:3f:
16:bc:35:8a:70:c2:cf:0e:4c:74:bc:86:9b:61:84:
17:4e:a2:04:71:9e:f7:a2:13:bf:f2:d4:78:5c:53:
dd:6c:3a:37:3f:3a:b4:b8:ba:8f:21:f4:5a:8d:7d:
3c:81:94:c1:f3:28:cc:e1:5f:97:c4:5a:f9:53:49:
97:8a:55:74:3b:4f:1c:59:54:0e:0f:bb:1c:d3:10:
14:48:7c:77:22:9b:3d:56:0c:d6:5d:54:b6:17:2d:
fa:01:aa:51:4e:57:c2:12:88:4e:f8:7f:80:48:73:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:21:82:C0:25:CF:70:5A:7C:C9:98:98:E9:78:FF:34:AF:E1:DC:1E
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/c3474888f0047df1fbd54ec0aed914ed5c18680e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.188.147.0-187.188.150.255
187.188.152.0/24
187.188.154.0/24
187.188.157.0-187.188.158.255
187.188.160.0-187.188.162.255
187.188.181.0/24
187.188.190.0/24
187.188.204.0/24
187.188.210.0/24
187.188.212.0/24
187.188.214.0/24
187.188.238.0/24
187.188.244.0/24
187.188.246.0/24
187.188.252.0/24
187.189.11.0/24
187.189.38.0/24
187.189.46.0/24
187.189.51.0/24
187.189.66.0/24
187.189.73.0-187.189.75.255
187.189.77.0/24
187.189.79.0-187.189.80.255
187.189.152.0/24
187.189.191.0-187.189.194.255
187.189.199.0/24
187.189.205.0/24
187.189.209.0/24
187.189.233.0-187.189.236.255
187.189.252.0/24
187.190.0.0/24
187.190.9.0/24
187.190.13.0/24
187.190.35.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:49:f9:d7:4e:fe:aa:70:e9:88:d2:00:26:1b:7b:d2:6e:67:
23:ff:51:49:85:f4:18:37:0b:54:9c:1c:6c:80:4b:b1:56:db:
4a:f9:3b:85:0f:7d:95:f4:84:8d:a3:0e:18:04:50:32:a5:f3:
fe:35:77:a3:07:2e:bd:3d:24:94:c3:79:d7:32:79:51:f0:fa:
cd:15:b4:c9:88:54:5c:80:42:1e:21:82:6a:62:61:76:00:e5:
ba:d0:25:b5:df:18:b3:3c:e9:1b:6e:3a:3d:87:66:49:36:17:
0f:ae:a4:e4:ff:57:39:3a:2c:30:70:7a:c1:f4:ea:23:9e:f5:
8b:36:32:73:4f:7e:e6:cc:4a:e9:dd:ba:f2:79:ca:53:ba:b4:
75:af:e0:c5:bf:12:ec:4b:c3:43:ef:79:06:00:fb:e3:15:60:
a8:b8:96:d8:7d:78:a6:b6:36:57:39:24:4f:32:0d:53:ef:8c:
f4:57:40:b0:73:ee:6a:53:93:0e:91:ee:3d:68:61:5d:8b:cd:
76:84:a6:53:1f:ec:79:9e:41:46:02:3a:ed:f7:cc:f5:18:6d:
83:c1:88:8e:ad:f9:45:f0:6f:da:b5:1e:f8:3f:c0:c8:bf:98:
0f:cc:61:00:14:cf:6e:43:90:97:04:ab:51:42:bc:97:cc:7e:
c2:1a:89:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:33 2024 by rpki-client on console-ams.rpki-client.org