Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/9f26f5742e9380acb68f48f3b9aea536efbc64ed.roa
File: 9f26f5742e9380acb68f48f3b9aea536efbc64ed.roa (raw, json)
Hash identifier: B7kvuulnNuGQD3JRhjXw6kvrsh+MBJBaELFa3Mrd+iI=
Subject key identifier: B9:71:C2:59:8B:6F:C7:CF:4F:5A:8B:6B:29:B9:5E:70:85:42:93:5A
Certificate issuer: /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Certificate serial: 0D6DC8
Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/9f26f5742e9380acb68f48f3b9aea536efbc64ed.roa
Signing time: Wed 24 Mar 2021 14:29:04 +0000
ROA not before: Wed 24 Mar 2021 14:29:03 +0000
ROA not after: Tue 24 Mar 2026 14:29:03 +0000
asID: 28114
IP address blocks: 168.195.108.0/22 maxlen: 22
181.118.0.0/19 maxlen: 21
186.183.0.0/18 maxlen: 24
186.183.64.0/19 maxlen: 24
186.183.96.0/20 maxlen: 21
186.183.120.0/21 maxlen: 21
190.12.160.0/19 maxlen: 19
190.115.32.0/19 maxlen: 24
200.114.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880072 (0xd6dc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Validity
Not Before: Mar 24 14:29:03 2021 GMT
Not After : Mar 24 14:29:03 2026 GMT
Subject: CN=9f26f5742e9380acb68f48f3b9aea536efbc64ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f8:be:7c:98:df:c9:bd:4e:55:3d:f3:f7:15:
96:2b:ec:ab:ee:4e:92:16:6d:52:51:f1:9e:4f:24:
79:e6:db:f1:35:e9:b1:66:a7:01:83:f4:1b:90:e7:
de:b2:e1:5d:f4:2d:37:bd:14:d4:96:2a:3c:a4:29:
71:ea:fe:58:50:10:27:31:a8:90:a6:35:01:6e:8e:
ad:9a:5d:29:3c:e6:e6:5c:62:1f:e3:03:93:d6:b4:
9a:46:4e:15:49:ab:96:cb:0e:f0:49:02:a2:5b:bb:
67:99:af:43:d0:41:0f:27:9e:33:0e:6e:53:13:a9:
43:b2:e9:e2:28:6c:d6:fd:2a:3e:05:7d:26:e5:4e:
61:3c:5e:f1:b0:5b:cc:7d:5e:38:16:0d:9a:8a:9e:
ee:f7:c2:88:eb:6d:2f:e5:a1:55:26:ac:81:ef:43:
a8:4d:37:dd:7e:82:16:c8:21:28:f4:03:10:b1:94:
7e:52:c2:26:cd:75:40:01:f9:32:59:d2:86:ab:c8:
f9:95:83:0d:ac:1b:7f:c7:c1:27:fb:c8:6f:ed:ca:
e5:93:0c:16:22:fc:f2:cf:4b:2b:57:0b:df:68:29:
0f:a8:73:5a:23:cf:d4:20:cb:6a:9f:49:5b:cc:f1:
9b:61:dd:16:e5:38:a4:42:a6:9b:b7:02:53:f9:73:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:71:C2:59:8B:6F:C7:CF:4F:5A:8B:6B:29:B9:5E:70:85:42:93:5A
X509v3 Authority Key Identifier:
keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/9f26f5742e9380acb68f48f3b9aea536efbc64ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.108.0/22
181.118.0.0/19
186.183.0.0-186.183.111.255
186.183.120.0/21
190.12.160.0/19
190.115.32.0/19
200.114.120.0/21
Signature Algorithm: sha256WithRSAEncryption
36:0a:ef:58:bd:35:44:52:d3:5d:07:25:8e:25:e0:76:27:9d:
5d:93:c4:da:60:2a:b9:dd:9c:ba:ce:65:16:a4:a3:6f:c2:e6:
b9:cd:d5:6c:2b:6c:98:fd:dc:95:fd:4b:a0:87:a7:f4:9c:f8:
21:20:7d:8e:a9:58:f2:8e:ea:fa:ca:b7:35:60:f1:90:92:b5:
b7:f6:12:d4:fe:d1:67:93:c0:3d:3f:db:b0:4f:1e:0a:7a:9e:
7c:c1:0a:cd:34:36:b6:09:96:a1:f3:56:de:8c:7e:9f:36:ec:
3a:75:2f:80:fd:15:a4:af:e2:0a:7f:d4:0e:8b:cd:16:4f:d1:
da:ec:c1:75:e1:63:33:39:d2:9e:0f:f9:e5:42:6f:0e:0a:50:
b7:b4:37:e4:9a:b5:62:b5:b9:c9:97:8f:2a:5c:c3:c8:73:c4:
b2:27:7d:b7:58:fb:4b:92:52:b8:b3:d7:0c:af:80:b0:b2:50:
d7:e6:d1:dc:37:44:6c:7f:de:d1:00:bc:e0:c4:b4:78:b4:a4:
70:84:55:6c:a5:b4:2e:66:54:74:85:0d:60:11:47:17:e4:22:
19:00:1d:e5:f9:90:96:fa:81:a3:07:01:b1:ae:2d:97:ad:0d:
2a:9d:61:1d:5a:5e:3c:66:53:a3:17:0c:43:81:a8:f3:4a:7c:
23:f1:23:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:07 2024 by rpki-client on console-fra.rpki-client.org