Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/5ed5fb8d4d1f699bbabc387fbd069610013a7a99.roa
File: 5ed5fb8d4d1f699bbabc387fbd069610013a7a99.roa (raw, json)
Hash identifier: 90JByv/B2knru/fTPzMVVebWrtBkMdopS9He+/8Gric=
Subject key identifier: 3C:5F:2E:D7:4E:C2:31:41:99:3A:11:7B:85:A8:0A:C1:2E:E5:15:3A
Certificate issuer: /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Certificate serial: 0D5D90
Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/5ed5fb8d4d1f699bbabc387fbd069610013a7a99.roa
Signing time: Wed 24 Mar 2021 14:29:03 +0000
ROA not before: Wed 24 Mar 2021 14:29:03 +0000
ROA not after: Tue 24 Mar 2026 14:29:03 +0000
asID: 28114
IP address blocks: 168.195.108.0/22 maxlen: 22
181.118.0.0/19 maxlen: 21
186.183.0.0/18 maxlen: 24
186.183.64.0/19 maxlen: 24
186.183.96.0/20 maxlen: 21
186.183.120.0/21 maxlen: 21
190.12.160.0/19 maxlen: 19
190.115.32.0/19 maxlen: 24
200.114.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 875920 (0xd5d90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Validity
Not Before: Mar 24 14:29:03 2021 GMT
Not After : Mar 24 14:29:03 2026 GMT
Subject: CN=5ed5fb8d4d1f699bbabc387fbd069610013a7a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:b3:80:ad:66:77:c6:27:28:89:da:c8:eb:
06:6c:b7:74:d1:06:f3:4e:c5:a9:71:a3:79:4d:61:
c1:1b:41:22:d9:22:af:f6:58:d6:65:55:e0:30:89:
30:39:8c:76:ab:3e:cd:7b:17:c1:bc:73:ad:cd:79:
bd:df:5d:7d:a5:0d:c4:37:ba:d0:09:ad:2e:71:f8:
ba:89:c5:89:07:bf:98:da:9c:9f:86:8b:0a:75:a3:
dd:25:cd:d7:b7:de:8a:ad:5c:37:35:b0:a0:3a:c8:
71:3d:00:c7:f4:64:2b:47:ed:bc:5a:61:ed:96:cb:
46:25:f6:4b:1d:35:28:01:e7:0b:3a:74:86:51:d5:
ea:e4:af:9d:7b:16:2b:73:cf:8f:b4:00:cb:14:70:
06:16:d0:f2:ba:93:78:66:57:97:8f:22:ba:27:42:
dc:9d:ec:a2:3c:2c:9f:32:4e:fa:c2:a9:d8:c6:e7:
2b:1f:e4:be:b6:1b:0f:53:db:f9:e6:98:34:8a:52:
17:73:08:b7:9a:9a:67:b2:99:14:1e:57:c1:fb:2e:
46:20:16:c7:a1:4a:05:40:39:7e:6c:b2:0c:77:ca:
65:37:18:aa:a1:bb:b7:3b:5c:78:a6:23:ff:d8:75:
b0:f3:62:4a:f5:50:3f:88:bd:50:9d:19:74:fd:4a:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5F:2E:D7:4E:C2:31:41:99:3A:11:7B:85:A8:0A:C1:2E:E5:15:3A
X509v3 Authority Key Identifier:
keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/5ed5fb8d4d1f699bbabc387fbd069610013a7a99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.108.0/22
181.118.0.0/19
186.183.0.0-186.183.111.255
186.183.120.0/21
190.12.160.0/19
190.115.32.0/19
200.114.120.0/21
Signature Algorithm: sha256WithRSAEncryption
19:38:1a:87:9c:c4:0d:fa:da:1c:7e:4a:81:9f:b1:4e:83:58:
31:48:70:69:ac:2d:76:c5:80:7b:18:47:ad:79:b6:d8:30:b7:
cb:bf:7b:ba:63:b8:11:8b:9b:11:8a:ef:c7:2d:9d:11:d0:b1:
f4:4a:48:03:60:3d:18:32:35:73:f5:cb:04:cc:dd:ee:e2:ef:
e7:c6:76:5a:3c:d6:10:e0:97:c1:70:ca:be:28:29:fb:fe:d1:
9b:0e:f3:2e:ba:9e:5f:18:1a:07:ad:cc:85:1e:a2:9c:d6:4a:
f8:11:4c:cf:dd:41:ce:f3:58:e1:b6:4a:0a:eb:fd:f7:d5:ba:
70:fa:6c:04:0f:fc:55:1d:b0:fe:6f:b4:59:1f:b6:ca:9d:5f:
70:b5:38:a2:2c:ee:05:b7:8b:90:1c:46:42:69:ea:7a:d7:0f:
1c:2d:37:5f:e8:56:06:5c:c5:b5:d4:62:5f:dc:75:bc:65:39:
81:6c:34:96:07:a7:ee:52:6b:60:4b:b6:93:56:d2:65:e4:74:
b4:68:c0:c0:23:9a:2a:91:92:79:c6:21:c2:71:81:60:d8:b7:
80:c9:e8:2f:f9:73:bd:80:6c:88:9a:48:16:39:ea:5b:0a:25:
89:b6:1b:25:70:99:bd:eb:42:2f:ae:35:1d:c0:ef:41:98:9b:
a4:ef:5a:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:31 2024 by rpki-client on console-fra.rpki-client.org