Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/f4441afd68a220a0cf10bb97cc3631bdf6f82dfc.roa
File: f4441afd68a220a0cf10bb97cc3631bdf6f82dfc.roa (raw, json)
Hash identifier: gx1ulV3P37kFhN4XtD2WsltVdaAsiyOAAaEU1OJbiWc=
Subject key identifier: B5:B7:B0:26:FD:54:D9:86:54:52:25:16:41:D3:AE:21:BE:B6:35:E8
Certificate issuer: /CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Certificate serial: 0D34A8
Authority key identifier: 8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/f4441afd68a220a0cf10bb97cc3631bdf6f82dfc.roa
Signing time: Wed 11 Oct 2023 18:37:12 +0000
ROA not before: Tue 10 Oct 2023 18:37:12 +0000
ROA not after: Sat 11 Oct 2025 18:37:12 +0000
asID: 22884
IP address blocks: 187.188.199.0/24 maxlen: 24
187.188.170.0/24 maxlen: 24
187.188.159.0/24 maxlen: 24
187.188.156.0/24 maxlen: 24
186.96.15.0/24 maxlen: 24
187.188.138.0/24 maxlen: 24
187.188.137.0/24 maxlen: 24
187.188.136.0/24 maxlen: 24
187.188.95.0/24 maxlen: 24
187.188.20.0/24 maxlen: 24
187.188.19.0/24 maxlen: 24
187.188.4.0/24 maxlen: 24
186.96.25.0/24 maxlen: 24
186.96.173.0/24 maxlen: 24
186.96.166.0/24 maxlen: 24
186.96.156.0/24 maxlen: 24
186.96.143.0/24 maxlen: 24
186.96.50.0/24 maxlen: 24
186.96.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 865448 (0xd34a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
Validity
Not Before: Oct 10 18:37:12 2023 GMT
Not After : Oct 11 18:37:12 2025 GMT
Subject: CN=f4441afd68a220a0cf10bb97cc3631bdf6f82dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:de:14:46:f1:46:e8:2d:5f:e3:80:1e:0a:29:
7a:c0:73:37:44:51:a1:aa:94:a7:82:53:62:d6:5c:
28:c9:dc:86:5a:7c:32:b4:57:73:d0:3d:36:b0:3b:
8e:48:f7:79:89:1f:de:87:35:0f:0c:d7:01:e6:9e:
6f:cf:4d:95:01:62:14:9b:b9:bf:ff:9f:27:93:00:
d0:3d:16:61:88:75:41:9a:5c:25:2e:10:cd:4a:18:
f6:18:30:ef:b3:bc:87:05:48:e0:b1:e4:06:13:8e:
32:18:c0:3f:08:10:41:36:5b:67:6f:d8:f8:e0:ee:
8f:30:b8:02:00:76:9c:94:75:cf:8c:79:9d:a0:c1:
20:60:2a:f8:db:88:47:39:30:2f:34:13:68:5f:b1:
00:a4:41:12:55:f0:91:61:20:e5:e0:0c:9f:01:b9:
a2:aa:cd:ca:60:7c:19:73:ec:d3:6a:38:cf:7e:fb:
ea:27:79:79:33:f3:05:9b:3e:a3:cd:9e:fe:fc:73:
f0:1e:51:17:47:d9:e1:a8:da:5d:fa:d9:62:4a:2f:
4d:c1:3e:50:4d:f4:5f:6f:e8:91:9e:ad:27:2d:38:
c0:f4:d8:d8:b2:22:7e:0a:ab:a1:0b:7b:ae:61:de:
17:94:11:be:f6:d0:07:10:14:e7:90:09:3d:5b:ee:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B7:B0:26:FD:54:D9:86:54:52:25:16:41:D3:AE:21:BE:B6:35:E8
X509v3 Authority Key Identifier:
keyid:8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/f4441afd68a220a0cf10bb97cc3631bdf6f82dfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.96.15.0/24
186.96.25.0/24
186.96.45.0/24
186.96.50.0/24
186.96.143.0/24
186.96.156.0/24
186.96.166.0/24
186.96.173.0/24
187.188.4.0/24
187.188.19.0-187.188.20.255
187.188.95.0/24
187.188.136.0-187.188.138.255
187.188.156.0/24
187.188.159.0/24
187.188.170.0/24
187.188.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:4d:d8:24:a3:cb:36:28:ae:ba:55:30:f2:18:a5:ba:ee:11:
fc:98:db:eb:f0:4e:24:88:15:59:55:a9:2f:84:ee:86:53:0d:
f6:2d:dd:9d:ad:89:0c:83:5c:69:f6:3a:6b:a0:35:bf:a6:94:
11:bc:85:6d:30:10:3d:71:db:e4:99:58:21:bb:47:46:4b:7b:
8b:80:d9:d8:f4:ac:ac:fb:1c:d9:36:59:1a:dd:91:b3:e9:fc:
25:34:b5:53:d5:b2:9d:f0:a7:af:7b:2d:44:48:18:07:12:53:
65:d9:0e:6c:1e:a0:32:a9:fe:0b:86:fe:70:6f:43:59:fc:19:
ae:18:27:78:b9:7f:9b:62:23:60:07:e2:ad:55:d9:98:67:cc:
e1:60:33:1e:34:d6:52:bb:e4:d0:87:15:5f:7c:26:a7:94:f6:
0f:03:cf:2c:20:96:46:94:31:4a:92:9a:8b:d5:cf:38:f0:1d:
27:39:4c:3d:f8:3b:1b:70:e5:c7:31:73:0f:ff:d9:1a:b2:8e:
9e:2b:43:35:54:5b:74:69:3f:2e:00:df:13:0f:16:25:45:2f:
50:e5:35:67:e0:ee:7a:6d:d1:a4:ae:17:d7:b9:1f:e5:6f:99:
cb:36:02:3c:83:53:5f:28:2a:7a:e4:d4:fd:10:59:3a:f7:84:
45:88:be:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org