Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/cb017ab252492680af5ea333bf2616ff57783c91.roa
File: cb017ab252492680af5ea333bf2616ff57783c91.roa (raw, json)
Hash identifier: US9O9g+BSMTN/sGnxlhC4Id7IGE4ThNHu0iBYWNjJhY=
Subject key identifier: C7:58:2E:55:04:1C:B9:24:5C:30:C0:F3:0B:29:5E:6C:5B:38:90:FE
Certificate issuer: /CN=89a0699fe9f460e1f4fcd4dbeee82910785b065b
Certificate serial: 23D54A
Authority key identifier: B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/cb017ab252492680af5ea333bf2616ff57783c91.roa
Signing time: Wed 06 Sep 2023 13:19:54 +0000
ROA not before: Tue 05 Sep 2023 13:19:54 +0000
ROA not after: Sat 06 Sep 2025 13:19:54 +0000
asID: 27839
IP address blocks: 181.177.128.0/18 maxlen: 24
190.11.64.0/19 maxlen: 24
190.106.240.0/20 maxlen: 24
132.251.224.0/19 maxlen: 24
181.114.64.0/19 maxlen: 24
200.58.64.0/19 maxlen: 24
190.107.32.0/19 maxlen: 24
2803:9400::/32 maxlen: 49
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2348362 (0x23d54a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a0699fe9f460e1f4fcd4dbeee82910785b065b
Validity
Not Before: Sep 5 13:19:54 2023 GMT
Not After : Sep 6 13:19:54 2025 GMT
Subject: CN=cb017ab252492680af5ea333bf2616ff57783c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:3d:92:9d:b9:e4:5a:76:41:35:2a:0a:af:
0f:9b:b6:1d:26:3e:7d:ce:fe:76:2c:27:a9:03:5a:
b7:51:c8:ee:52:79:d7:4f:75:78:a1:65:aa:5f:8f:
e5:44:09:9e:b9:3e:6d:82:b9:e6:f2:22:c9:84:6d:
d2:cb:03:82:1e:9f:9f:50:83:4a:ec:e3:60:86:ef:
33:85:a0:32:2c:cf:44:ab:50:c9:ce:a9:ec:bf:ec:
9c:2b:86:5b:91:43:3a:09:36:8f:6e:be:64:3e:24:
9e:7a:63:09:a4:da:d9:8b:55:64:57:27:b6:c7:c6:
a6:d0:84:84:d1:82:2e:8f:da:e6:e0:e0:a3:ec:d5:
42:d4:28:f0:7a:93:6a:f6:ac:60:65:06:82:9b:87:
84:04:23:0f:31:34:72:a2:3e:c8:a4:15:fc:2f:9d:
31:04:59:ce:7f:42:4e:b9:ac:40:2f:c1:63:17:65:
c2:ad:aa:b4:ab:2e:f2:a6:68:33:7e:76:34:00:4d:
7d:81:3f:4a:6a:9a:e9:1b:60:27:0c:f0:f7:31:3e:
ac:dc:8e:9a:d4:60:6d:75:37:b1:f7:9e:17:76:ab:
64:98:ed:cd:e7:f9:9a:43:bc:26:04:6c:e7:63:41:
95:ac:e9:b2:2c:ae:91:f5:e6:d5:e8:e3:65:04:9e:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:58:2E:55:04:1C:B9:24:5C:30:C0:F3:0B:29:5E:6C:5B:38:90:FE
X509v3 Authority Key Identifier:
keyid:B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/cb017ab252492680af5ea333bf2616ff57783c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/89a0699fe9f460e1f4fcd4dbeee82910785b065b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.251.224.0/19
181.114.64.0/19
181.177.128.0/18
190.11.64.0/19
190.106.240.0/20
190.107.32.0/19
200.58.64.0/19
IPv6:
2803:9400::/32
Signature Algorithm: sha256WithRSAEncryption
59:a9:6e:4a:3b:99:77:a4:67:14:58:1a:e0:16:72:a7:55:32:
90:00:54:77:02:ff:e5:aa:52:02:4e:93:a4:79:46:70:6d:6b:
f3:1f:01:8e:79:79:0a:f7:0e:d6:a6:09:fa:3d:ab:84:ba:9a:
8e:c1:56:6e:d9:3d:8f:53:94:4b:24:f6:51:33:e7:4b:c2:fe:
83:f8:4c:e2:0b:c5:50:e4:96:58:a4:37:ba:2a:43:6b:76:29:
6d:51:1c:a2:26:22:a8:c4:d7:a9:61:65:6c:88:6a:99:aa:89:
4f:d5:d9:49:56:6f:3a:1d:28:3c:63:07:14:95:2a:e9:ce:06:
03:cb:21:86:31:29:4e:7c:2f:8b:74:75:0d:98:d2:df:ef:9c:
b7:29:bb:3c:98:e9:fa:85:d1:3a:05:cd:87:52:9c:9e:b8:25:
39:1e:c4:d9:0e:47:49:93:44:f6:4b:33:09:98:3a:31:dd:e9:
ac:4f:5c:dd:72:bf:6b:23:16:99:da:cb:c7:3e:cb:a6:ab:cc:
96:23:29:b9:8e:be:8e:16:e3:41:e8:b2:f6:5f:bb:e4:b9:e4:
ee:07:c1:1c:77:ba:87:23:22:4c:e5:6c:12:90:66:bb:d5:a5:
3d:dc:fe:61:27:35:93:9d:44:08:34:3d:06:d6:98:7a:b0:bf:
7c:30:cb:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:38 2024 by rpki-client on console-ams.rpki-client.org