Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/de51a9cd-0fb7-4d0b-9b2a-e01c65dd8ee2/6731ee7f0571908457758138e315fbc843270314.roa
File: 6731ee7f0571908457758138e315fbc843270314.roa (raw, json)
Hash identifier: YPIrhUn83/8L+UEW6iY3CG4KKBCA0+2fU4HbZcXy2MM=
Subject key identifier: BE:FA:FD:89:B2:A7:B4:A0:93:6F:77:F5:58:65:1F:3E:9E:62:85:AE
Certificate issuer: /CN=bf32c440f6d298edbc3b18cdfef6f6a2739acb6b
Certificate serial: 0373D5
Authority key identifier: 25:19:85:DF:F7:45:96:8F:07:C4:C9:37:22:95:7C:B9:5E:81:E3:EF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf32c440f6d298edbc3b18cdfef6f6a2739acb6b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/de51a9cd-0fb7-4d0b-9b2a-e01c65dd8ee2/6731ee7f0571908457758138e315fbc843270314.roa
Signing time: Tue 24 Oct 2023 14:57:53 +0000
ROA not before: Tue 24 Oct 2023 14:57:52 +0000
ROA not after: Fri 24 Oct 2025 14:57:52 +0000
asID: 263717
IP address blocks: 132.255.164.0/22 maxlen: 24
167.250.36.0/22 maxlen: 24
170.82.144.0/22 maxlen: 24
170.84.172.0/22 maxlen: 24
2803:e780::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226261 (0x373d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf32c440f6d298edbc3b18cdfef6f6a2739acb6b
Validity
Not Before: Oct 24 14:57:52 2023 GMT
Not After : Oct 24 14:57:52 2025 GMT
Subject: CN=6731ee7f0571908457758138e315fbc843270314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:24:5b:31:08:8c:37:cd:79:99:a8:11:89:60:
23:e4:e0:70:70:7d:a9:b1:c3:ca:a3:ed:d3:4b:f1:
bd:8f:00:92:85:43:c2:76:e0:8b:bd:72:86:ea:75:
37:41:81:29:d2:0e:0d:a4:8a:da:d3:e5:3b:89:83:
dd:d7:92:ea:12:81:aa:50:20:d7:91:7c:ee:e9:43:
a5:1e:c1:c0:6a:5b:25:57:34:6c:81:97:c4:14:8f:
ca:9f:bd:02:f6:41:71:cf:62:05:46:02:ca:79:5e:
e2:e4:9d:77:bf:0f:63:50:f1:ae:ef:3b:5e:ea:44:
75:0b:db:40:14:47:94:91:7e:40:e6:24:2a:8f:65:
22:cb:bb:44:48:f0:ad:d8:f7:ab:03:7d:7a:59:f8:
b3:71:68:53:c4:a8:6c:49:a4:32:21:b4:b9:01:86:
0d:a5:0f:19:2d:56:a8:1b:d1:a3:78:a9:8d:4a:26:
12:81:ff:ab:13:95:84:37:69:8b:43:41:85:d5:27:
a5:1c:b2:13:38:b3:ae:a2:00:dd:01:f6:bd:ad:d5:
41:1d:8c:a7:0c:6d:5d:2d:fc:e1:c8:28:97:24:7d:
7a:59:47:23:6a:78:7d:3b:f4:31:af:30:6a:2a:ee:
14:4f:2f:c6:94:5a:62:8e:a0:9d:92:f4:b4:08:de:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FA:FD:89:B2:A7:B4:A0:93:6F:77:F5:58:65:1F:3E:9E:62:85:AE
X509v3 Authority Key Identifier:
keyid:25:19:85:DF:F7:45:96:8F:07:C4:C9:37:22:95:7C:B9:5E:81:E3:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf32c440f6d298edbc3b18cdfef6f6a2739acb6b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/de51a9cd-0fb7-4d0b-9b2a-e01c65dd8ee2/6731ee7f0571908457758138e315fbc843270314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/de51a9cd-0fb7-4d0b-9b2a-e01c65dd8ee2/bf32c440f6d298edbc3b18cdfef6f6a2739acb6b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.164.0/22
167.250.36.0/22
170.82.144.0/22
170.84.172.0/22
IPv6:
2803:e780::/32
Signature Algorithm: sha256WithRSAEncryption
16:2a:cc:10:b5:36:e9:e9:18:3d:f1:e4:ea:5c:bf:fd:80:74:
0f:92:6c:66:03:b6:fe:70:b3:66:e4:31:8f:2a:1d:d7:3d:ff:
0b:b5:31:bb:34:18:f4:ca:2a:bc:08:bf:46:8c:6c:0f:48:9b:
6d:e2:e5:a4:30:4f:f8:25:3a:57:f6:d7:42:e6:a1:c7:b9:cf:
23:41:06:c1:28:0e:55:f7:f9:10:53:8e:d4:42:1a:74:c0:12:
ff:e5:70:fe:24:52:17:c7:89:8b:db:0a:7e:08:af:87:9b:6e:
91:d6:5e:f2:ec:d6:c6:1b:96:6f:76:53:38:e1:9c:de:10:1d:
71:bd:f0:fd:81:aa:46:e7:55:f3:32:89:0f:99:2e:07:41:41:
70:2e:ae:c2:19:7b:9f:a7:26:7c:d1:c3:60:08:9e:d0:53:e7:
34:86:b1:fe:b8:9f:39:16:f0:e3:ff:92:c0:29:5d:d1:ea:e6:
25:8f:9b:fb:3f:2c:c7:dc:c4:19:7a:19:95:ca:fb:fa:33:87:
4d:bc:23:2e:ee:14:25:81:fc:71:9c:dc:6c:a9:84:be:71:5a:
3b:ff:4d:45:7c:56:e3:ff:5d:75:62:f8:fd:5e:1c:bf:f2:f4:
47:5b:f8:ff:56:e3:9d:20:58:8c:35:1e:92:25:5a:ba:98:7a:
59:df:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:09 2024 by rpki-client on console-fra.rpki-client.org