Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/3e0cf5537c686b61b9515a5d1cec4675fdc691e1.roa
File: 3e0cf5537c686b61b9515a5d1cec4675fdc691e1.roa (raw, json)
Hash identifier: Xg/Wi4Ia1lRIbFSbikfCY/XVtTtMdGef+lQOp9rPbxc=
Subject key identifier: D5:5C:A0:F6:F4:DB:A3:AD:AA:A0:D1:DD:5A:8C:30:2F:6F:97:7D:6E
Certificate issuer: /CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Certificate serial: 216B82
Authority key identifier: 76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/3e0cf5537c686b61b9515a5d1cec4675fdc691e1.roa
Signing time: Mon 12 Jun 2023 23:46:43 +0000
ROA not before: Sun 11 Jun 2023 23:46:39 +0000
ROA not after: Thu 12 Jun 2025 23:46:39 +0000
asID: 23383
IP address blocks: 200.13.175.0/24 maxlen: 24
200.13.176.0/24 maxlen: 24
200.13.178.0/24 maxlen: 24
200.13.183.0/24 maxlen: 24
200.13.187.0/24 maxlen: 24
200.13.188.0/24 maxlen: 24
200.13.162.0/23 maxlen: 24
200.13.164.0/23 maxlen: 24
200.106.224.0/24 maxlen: 24
200.106.227.0/24 maxlen: 24
200.106.228.0/24 maxlen: 24
200.106.235.0/24 maxlen: 24
200.106.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2190210 (0x216b82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb6de066f1c70b82f75b54d19209c0e03f1f0279
Validity
Not Before: Jun 11 23:46:39 2023 GMT
Not After : Jun 12 23:46:39 2025 GMT
Subject: CN=3e0cf5537c686b61b9515a5d1cec4675fdc691e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:11:b8:e9:43:59:29:2c:32:63:12:4f:2f:
1a:08:5a:c9:74:ca:f5:7a:90:ce:24:42:c6:32:b8:
23:37:4f:28:59:52:4b:6d:b8:b8:b9:f2:f0:5b:6f:
6f:7c:8e:f5:4f:50:52:ef:a3:cd:e1:59:6d:98:82:
59:9b:54:79:9a:93:96:38:3a:ac:ad:32:b8:fe:25:
69:3d:f3:81:b7:65:0f:14:53:7b:59:10:cb:95:d8:
58:76:d7:0f:e3:bb:2f:66:c1:0d:7d:b3:0c:17:eb:
1b:ba:97:57:5b:da:b2:93:fe:25:e8:6c:17:a0:63:
c1:17:b4:99:14:64:51:b0:c0:09:ae:b4:c4:fc:1f:
23:c5:ad:1e:9e:79:a4:23:e5:a1:e0:b5:83:5c:b3:
22:c7:9c:ca:dd:dc:8d:e4:36:cb:99:ed:f5:95:9d:
97:43:64:05:f0:a2:38:91:48:28:5b:48:56:b1:18:
82:43:3e:d7:7d:db:1b:97:60:6c:e2:0e:2f:96:08:
4c:a9:6d:cd:67:69:31:28:37:3f:2d:5b:93:04:19:
27:e4:68:65:99:92:5c:da:7f:e3:3a:17:d4:e7:38:
4d:b5:f1:f8:6d:68:9b:1f:43:b1:43:47:a8:d4:61:
8f:aa:de:9c:d5:f8:c2:52:86:74:d9:8a:6e:b4:4a:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5C:A0:F6:F4:DB:A3:AD:AA:A0:D1:DD:5A:8C:30:2F:6F:97:7D:6E
X509v3 Authority Key Identifier:
keyid:76:12:49:46:59:CF:CF:F8:19:4B:DD:87:76:20:C2:55:68:E0:EA:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb6de066f1c70b82f75b54d19209c0e03f1f0279.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/3e0cf5537c686b61b9515a5d1cec4675fdc691e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e348bdf3-6c2a-4e7f-9deb-ebcd2c56f245/eb6de066f1c70b82f75b54d19209c0e03f1f0279.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.13.162.0-200.13.165.255
200.13.175.0-200.13.176.255
200.13.178.0/24
200.13.183.0/24
200.13.187.0-200.13.188.255
200.106.224.0/24
200.106.227.0-200.106.228.255
200.106.235.0-200.106.236.255
Signature Algorithm: sha256WithRSAEncryption
22:75:4f:4f:71:b3:ff:9e:16:d4:02:42:e3:c6:45:48:7f:c4:
9a:72:a8:bc:f1:9f:e3:bd:ec:49:47:52:b1:3f:7f:c0:17:a6:
3e:dd:b4:88:ca:1d:76:0f:03:85:27:8b:39:45:a5:b0:59:35:
48:79:10:ba:83:0b:51:0f:fd:02:2b:e5:47:e0:3f:eb:3a:59:
5d:46:aa:e6:b5:c5:2d:13:21:c3:50:63:1d:25:69:f4:70:69:
98:fe:bf:f4:57:d7:38:4d:dd:67:ea:e5:8a:41:60:3e:ce:d8:
cc:09:df:f8:a8:61:6e:76:fb:86:f6:3c:ba:6c:c6:43:0b:7f:
19:68:53:a2:a0:c5:85:2d:33:bf:4a:96:66:1d:5f:c1:59:1a:
24:d4:6f:29:c5:9e:a7:a2:a7:89:2e:d5:45:ab:2c:a8:cf:d9:
e3:41:18:43:82:38:f7:08:24:b3:9c:38:bb:98:66:f1:7e:b5:
d9:75:31:e2:e9:e3:89:28:90:a9:55:69:19:d5:f7:cd:ec:f1:
90:22:1f:d8:be:c5:18:ea:d4:e3:93:c6:f3:5d:8d:02:75:d1:
04:98:a2:3f:f1:fd:87:18:91:4d:15:d6:f9:45:ef:ad:d1:86:
dc:dd:c7:0d:bd:84:37:8e:a4:30:df:4b:dc:b7:09:8b:8b:2e:
5f:43:fe:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:32 2024 by rpki-client on console-fra.rpki-client.org