Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/54e7022e7ad8562c26ed1a79fd4e42b79d896601.roa
File: 54e7022e7ad8562c26ed1a79fd4e42b79d896601.roa (raw, json)
Hash identifier: JPb2IJZMUcOWPFW4qezxP5hQBlBR5aI/OqwDgmdo3xw=
Subject key identifier: C7:E7:28:D8:FA:D6:AE:19:49:42:20:1D:56:4F:E9:01:9E:0E:B4:1A
Certificate issuer: /CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Certificate serial: 25DDBB
Authority key identifier: 82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/54e7022e7ad8562c26ed1a79fd4e42b79d896601.roa
Signing time: Mon 18 Sep 2023 11:36:39 +0000
ROA not before: Sun 17 Sep 2023 11:36:31 +0000
ROA not after: Mon 18 Sep 2028 11:36:31 +0000
asID: 12956
IP address blocks: 181.199.208.0/20 maxlen: 24
168.195.56.0/22 maxlen: 24
190.98.128.0/18 maxlen: 24
2800:240::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2481595 (0x25ddbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Validity
Not Before: Sep 17 11:36:31 2023 GMT
Not After : Sep 18 11:36:31 2028 GMT
Subject: CN=54e7022e7ad8562c26ed1a79fd4e42b79d896601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:53:a0:79:3a:f2:8f:df:11:0d:83:38:9d:
8d:db:cc:12:0f:3d:11:89:db:34:4e:e1:1b:87:e8:
28:46:8a:cb:04:c8:e1:3f:56:6f:6b:30:bb:79:8d:
37:c7:a7:f0:bf:11:b0:6f:51:be:6b:e3:28:35:34:
43:30:78:c7:86:95:be:2b:71:69:a7:4d:ed:aa:3e:
4d:32:f0:9e:d4:e7:5a:90:ac:67:e7:65:1a:48:e7:
00:d8:74:a0:9b:52:b8:bb:5b:46:32:e3:6a:69:06:
a9:55:35:3f:af:85:ac:2e:a6:7a:1b:b4:13:17:5f:
11:bd:80:5a:f1:cc:eb:2b:8a:b8:af:da:d2:fb:69:
10:5e:d9:2b:20:83:0a:4a:af:a0:82:48:e1:0f:c1:
06:1a:40:08:a3:0a:34:89:3f:99:db:ae:cb:f4:68:
03:27:7e:db:25:2d:b5:10:2a:9b:8f:74:58:08:8a:
b2:be:8e:4b:fa:00:f3:b0:50:98:da:44:23:c0:d1:
23:41:75:c1:8b:26:42:1b:3a:7e:69:bc:ca:8d:95:
7d:4d:fd:64:10:b7:a8:db:f1:77:28:7b:4b:0b:08:
d4:9d:d3:a6:57:94:8b:52:d7:8a:d2:ae:36:07:14:
ec:f8:be:e7:be:6c:30:05:be:c5:3d:67:06:47:da:
67:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E7:28:D8:FA:D6:AE:19:49:42:20:1D:56:4F:E9:01:9E:0E:B4:1A
X509v3 Authority Key Identifier:
keyid:82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/54e7022e7ad8562c26ed1a79fd4e42b79d896601.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.56.0/22
181.199.208.0/20
190.98.128.0/18
IPv6:
2800:240::/32
Signature Algorithm: sha256WithRSAEncryption
08:a4:12:18:f1:93:b3:37:c5:06:fd:6c:0e:a1:32:31:37:96:
a3:15:6e:59:5e:77:d3:90:ad:11:b5:7c:cb:5f:c9:3e:55:50:
88:b2:98:0d:82:26:8a:a7:fc:00:19:9a:7f:ca:f6:44:ba:69:
a4:23:34:d1:78:e8:62:35:c7:e9:ec:56:3e:90:c5:23:07:d5:
ab:19:a1:96:c5:26:80:32:1e:23:d9:8f:66:16:a1:3d:c1:98:
1f:a0:2a:66:08:66:5e:16:9e:37:25:74:2c:28:b4:30:fd:36:
4b:e7:db:33:6f:cb:18:6f:50:6e:ae:af:3c:eb:c6:c6:65:fb:
5c:1e:ef:ad:30:73:da:c6:99:e0:ad:d4:bb:3d:22:f9:4b:ee:
ce:94:9d:7c:a6:0c:ad:cc:42:83:35:c0:28:c1:23:38:ff:e9:
08:4c:8c:e2:05:f2:3a:37:74:72:f7:51:ee:cb:29:e2:d5:99:
3b:34:6a:83:19:13:14:1f:cf:07:1d:25:53:a8:f8:c0:72:f9:
3c:89:6f:83:a6:b3:2a:57:a2:25:9b:64:f2:82:46:be:43:56:
7f:c7:96:de:c1:73:7e:db:0a:9c:48:f4:a2:2a:a6:8a:c0:fc:
89:63:91:1c:72:e0:1d:81:e4:98:07:51:fc:02:ba:f3:d1:0c:
52:f9:a1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:08 2024 by rpki-client on console-fra.rpki-client.org