Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/2ea04b4416d958f4f8fcda6724134824f9eda23e.roa
File: 2ea04b4416d958f4f8fcda6724134824f9eda23e.roa (raw, json)
Hash identifier: gwBYeJ7KBN6MPz24li3XhV/imHroXSSSKwg+vfHQqME=
Subject key identifier: 1E:80:C9:64:A6:A0:37:ED:2C:BC:A1:DE:BF:3B:19:02:F0:22:20:58
Certificate issuer: /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial: 123519
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/2ea04b4416d958f4f8fcda6724134824f9eda23e.roa
Signing time: Tue 22 Aug 2023 13:56:10 +0000
ROA not before: Mon 21 Aug 2023 13:56:10 +0000
ROA not after: Fri 22 Aug 2025 13:56:10 +0000
asID: 27866
IP address blocks: 201.217.12.0/24 maxlen: 24
201.217.20.0/24 maxlen: 24
201.217.28.0/24 maxlen: 24
190.52.128.0/18 maxlen: 18
201.217.36.0/22 maxlen: 24
201.217.48.0/24 maxlen: 24
201.217.51.0/24 maxlen: 24
201.217.54.0/23 maxlen: 24
201.217.56.0/23 maxlen: 24
177.250.0.0/15 maxlen: 15
201.217.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1193241 (0x123519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
Validity
Not Before: Aug 21 13:56:10 2023 GMT
Not After : Aug 22 13:56:10 2025 GMT
Subject: CN=2ea04b4416d958f4f8fcda6724134824f9eda23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:fe:c8:f9:5d:d0:9b:88:32:dc:f0:ee:80:
c1:d4:90:06:4e:e2:23:e9:79:cc:b2:5c:56:10:5f:
76:f5:0d:3b:43:3e:f4:e2:26:40:e8:bc:30:2b:9d:
1c:c1:1e:ab:ca:32:3a:b3:ea:5c:23:56:c4:14:8e:
0c:6a:52:17:93:f0:bf:e9:91:c6:fa:5a:c0:8a:74:
89:67:35:bc:9a:47:35:f8:49:65:ee:b3:14:d7:ca:
c9:ed:91:75:72:7e:c0:76:66:c4:25:f1:cf:9c:d5:
f6:3a:fc:13:64:92:76:4c:9a:7d:a5:5c:57:87:5d:
cc:65:35:62:9b:61:63:a4:6c:e5:c2:30:f8:13:1f:
ca:e0:8e:2b:72:d0:71:c8:c6:56:ca:23:e9:76:38:
d9:fd:30:f3:e9:f9:59:ce:a5:40:72:ab:36:f7:49:
d8:54:66:10:d1:70:76:53:19:f1:28:7c:26:a8:1f:
3f:31:b0:5f:e7:41:1f:a7:54:46:9e:55:68:98:a6:
1c:89:3e:ae:8e:fa:26:c0:8f:7d:79:2c:a2:8f:dc:
89:28:ce:d5:6d:9a:82:50:59:45:f1:1e:9a:24:fb:
05:be:9e:1b:85:42:0b:6c:3e:6e:6e:6f:13:c7:d7:
7f:e6:33:c8:12:26:19:f2:c3:c4:fb:36:76:cf:49:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:80:C9:64:A6:A0:37:ED:2C:BC:A1:DE:BF:3B:19:02:F0:22:20:58
X509v3 Authority Key Identifier:
keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/2ea04b4416d958f4f8fcda6724134824f9eda23e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.250.0.0/15
190.52.128.0/18
201.217.12.0/24
201.217.20.0/24
201.217.28.0/24
201.217.36.0/22
201.217.48.0/24
201.217.51.0/24
201.217.54.0-201.217.57.255
201.217.60.0/23
Signature Algorithm: sha256WithRSAEncryption
32:e4:e8:e3:ae:54:2c:64:cc:32:af:de:a9:f1:87:82:da:90:
c2:9a:cd:aa:34:bb:73:4a:34:fc:92:12:51:cf:c2:66:53:51:
d9:b3:33:a7:78:43:ba:f0:f7:22:31:20:0a:98:a5:d2:bd:43:
0d:4c:be:fe:f5:a9:07:89:a1:f2:7f:26:60:f0:2f:6e:36:c8:
7c:89:e5:ac:1d:ad:51:06:4f:95:80:2f:cf:ea:e4:f8:eb:d4:
3a:02:18:72:ed:d3:24:36:ee:4a:87:22:bf:a2:01:13:d8:60:
5e:1e:53:6f:44:33:5c:f6:dd:5e:f8:25:07:88:1c:fb:f2:4d:
39:fd:d9:75:f5:cd:88:1c:aa:b1:aa:66:cc:5b:0c:cc:15:33:
c0:74:16:58:31:a4:38:25:10:80:cb:f8:95:7d:91:b1:e2:56:
c9:54:33:ee:8e:aa:f1:18:05:92:60:53:51:0f:b1:bd:a2:3c:
ba:bc:d3:61:41:cf:34:df:93:8d:e0:9e:88:e7:f3:6b:22:fe:
d3:b3:80:ec:0d:44:16:41:09:3d:aa:08:2f:be:2b:59:c0:c8:
ae:c8:8d:d2:f5:2a:79:ba:22:66:88:cb:e9:18:eb:6c:26:2a:
71:15:c5:ab:3d:0e:25:c4:0b:8f:17:4b:86:b5:a9:2b:26:5a:
02:a8:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org