Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/8bf7031aa3b3bd02fead89ead0de56b0ab6525f9.roa
File: 8bf7031aa3b3bd02fead89ead0de56b0ab6525f9.roa (raw, json)
Hash identifier: q4KhVFpasR+qwsMZZ81Niazb92fb4kMFW8ZZPL7NOmM=
Subject key identifier: 5C:C5:8B:A5:0A:56:33:44:A0:39:63:AA:E7:5B:FC:70:A7:DB:DD:07
Certificate issuer: /CN=9469fb387befc96f019d014c6e5234d0955553a9
Certificate serial: 112069
Authority key identifier: 0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/8bf7031aa3b3bd02fead89ead0de56b0ab6525f9.roa
Signing time: Wed 12 Jul 2023 13:00:56 +0000
ROA not before: Tue 11 Jul 2023 13:00:53 +0000
ROA not after: Sat 12 Jul 2025 13:00:53 +0000
asID: 27866
IP address blocks: 201.217.12.0/24 maxlen: 24
201.217.20.0/24 maxlen: 24
201.217.28.0/24 maxlen: 24
190.23.0.0/16 maxlen: 16
190.52.128.0/18 maxlen: 18
201.217.36.0/22 maxlen: 24
201.217.48.0/24 maxlen: 24
201.217.51.0/24 maxlen: 24
201.217.54.0/23 maxlen: 24
201.217.56.0/23 maxlen: 24
177.250.0.0/15 maxlen: 15
201.217.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1122409 (0x112069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9469fb387befc96f019d014c6e5234d0955553a9
Validity
Not Before: Jul 11 13:00:53 2023 GMT
Not After : Jul 12 13:00:53 2025 GMT
Subject: CN=8bf7031aa3b3bd02fead89ead0de56b0ab6525f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:e0:62:7c:44:03:a2:83:42:b6:0a:46:c3:
15:b8:23:bd:d2:9d:8a:0d:bf:ed:fb:d6:53:22:e0:
20:71:75:6b:06:e8:a2:f7:64:5a:6c:df:18:24:5e:
47:f8:d2:c2:18:8d:81:4a:61:38:cf:36:69:32:ea:
12:30:94:6c:ef:df:2b:63:87:43:ba:06:19:60:2c:
9c:34:c6:2b:10:be:d5:e4:82:8d:61:b1:37:10:d3:
bc:3e:25:ef:0d:a9:00:e3:cf:d0:2b:e7:bb:e9:c3:
74:a5:00:8b:7d:b7:11:3b:0a:9f:64:20:bf:12:f3:
d5:10:35:84:d4:b4:56:af:02:b0:88:da:4a:0f:04:
7c:37:05:aa:f2:19:a5:ae:b3:23:03:67:9a:7a:20:
02:4c:78:3d:e8:37:c2:62:7f:db:d0:b2:e4:b4:a3:
a6:f1:83:b9:2e:0d:c6:90:bb:36:91:4c:28:03:62:
fe:e9:ed:ed:32:98:f6:3a:4d:85:b9:19:23:4c:1d:
e9:c1:29:cf:bf:1b:4c:b6:52:31:89:b0:26:2e:ee:
9b:e6:af:c7:9c:f2:9b:f2:3e:90:07:b6:ff:f3:c5:
dc:ef:2b:a6:f0:ae:b5:6d:75:0d:72:48:c6:16:65:
fe:c6:64:00:e3:a5:27:f4:a5:f0:40:20:50:66:88:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C5:8B:A5:0A:56:33:44:A0:39:63:AA:E7:5B:FC:70:A7:DB:DD:07
X509v3 Authority Key Identifier:
keyid:0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/8bf7031aa3b3bd02fead89ead0de56b0ab6525f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.250.0.0/15
190.23.0.0/16
190.52.128.0/18
201.217.12.0/24
201.217.20.0/24
201.217.28.0/24
201.217.36.0/22
201.217.48.0/24
201.217.51.0/24
201.217.54.0-201.217.57.255
201.217.60.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:33:87:07:b3:5b:70:c7:a2:f3:55:d9:7d:03:44:35:ba:66:
48:0b:6a:b2:7e:e0:ee:a0:1c:81:7d:c1:9e:c2:db:4f:6c:ef:
16:16:eb:8e:15:df:fd:6a:56:80:de:11:f7:cd:0c:20:e2:e1:
82:9a:8e:3b:9d:5f:46:d6:9b:5f:50:65:e3:31:ab:10:74:a1:
a1:d6:2a:12:26:b6:b8:23:ff:1f:c9:a2:4f:06:88:e3:1e:79:
85:ff:8b:be:b5:f8:dd:1f:6e:32:cb:5b:48:1b:5e:b1:7b:5c:
81:42:20:d9:92:a4:58:c2:82:ce:a9:8b:ff:98:b2:41:fe:fd:
6a:91:22:ab:55:57:d5:0e:f8:b0:19:27:f6:b6:e7:10:b9:8f:
06:de:12:87:3e:d1:ce:ff:b2:53:61:9b:0b:5c:54:d9:22:d0:
ac:61:16:8f:0f:8c:ff:54:70:d7:1b:2d:34:63:c0:a5:d8:0d:
c6:33:08:98:d9:0a:7f:4b:9d:49:24:16:56:06:c5:6e:90:7c:
fa:9e:81:6a:cd:38:8a:b7:c5:f9:da:29:dc:b4:19:ea:7d:57:
d5:22:1b:19:69:d1:51:0e:3a:6b:e5:e2:20:f6:19:13:f3:c2:
a6:07:b7:04:89:f8:94:b9:aa:c4:ab:24:7d:c8:cd:a5:1c:d0:
24:45:fc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:10 2024 by rpki-client on console-fra.rpki-client.org