Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/001635a2003f164ce81a019581ae7b3a74efd363.roa
File: 001635a2003f164ce81a019581ae7b3a74efd363.roa (raw, json)
Hash identifier: PI9udDcsMfkWVy39HEaDJ1bZvsF4mGvDBdA598I5s0Q=
Subject key identifier: 89:53:44:DD:BB:51:AC:5C:13:B9:6B:3F:46:2E:29:A5:E0:FF:03:66
Certificate issuer: /CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Certificate serial: 26DA6C
Authority key identifier: D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/001635a2003f164ce81a019581ae7b3a74efd363.roa
Signing time: Thu 16 Nov 2023 19:34:02 +0000
ROA not before: Thu 16 Nov 2023 19:34:02 +0000
ROA not after: Sun 16 Nov 2025 19:34:02 +0000
asID: 267876
IP address blocks: 190.185.227.0/24 maxlen: 24
190.182.252.0/22 maxlen: 24
190.103.231.0/24 maxlen: 24
190.185.192.0/23 maxlen: 24
179.62.222.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2546284 (0x26da6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=103a3ea12b7f2ac503f3b2a208930367c4230e34
Validity
Not Before: Nov 16 19:34:02 2023 GMT
Not After : Nov 16 19:34:02 2025 GMT
Subject: CN=001635a2003f164ce81a019581ae7b3a74efd363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:cc:36:33:7e:b2:27:a3:75:8e:e4:59:5c:
9f:bc:70:8f:5a:b4:9c:37:fc:2d:a1:97:41:d4:8d:
99:14:82:52:e4:e8:c8:31:54:c0:9f:6c:f8:2f:f9:
81:b9:01:63:7d:23:43:bc:71:3c:02:c2:6b:50:58:
9e:c8:bb:4f:83:85:d4:5b:82:fb:7b:ea:a8:0a:24:
0b:1d:24:2b:e0:e4:bb:e3:24:a0:19:30:b1:0b:7f:
93:70:fa:14:b9:8a:35:fb:d0:9a:97:90:df:9d:84:
2f:bd:b4:f1:6f:fe:7a:92:f6:96:45:45:e9:49:1b:
19:1e:1a:77:51:ec:8f:b1:0f:57:fa:9a:6a:86:2f:
5e:ea:cf:98:c5:dc:c2:56:87:75:a5:21:9d:b0:c0:
d9:b8:ad:57:c9:01:35:c6:52:a6:19:38:fd:c8:8d:
6f:6d:dd:85:0a:bc:9e:94:82:23:c9:dd:d6:39:51:
a8:60:ce:ba:92:99:88:b9:e9:c1:e1:29:15:94:c4:
c3:22:68:5d:d0:e5:51:c3:47:9c:fc:92:63:6a:01:
25:e6:dd:f6:17:1d:64:ab:6f:5f:a7:5a:58:20:4e:
8c:51:d6:2f:03:f2:0d:cc:f3:5b:d8:ed:cd:93:e2:
b8:55:2f:a7:49:75:9c:8d:27:88:97:93:2e:19:3a:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:53:44:DD:BB:51:AC:5C:13:B9:6B:3F:46:2E:29:A5:E0:FF:03:66
X509v3 Authority Key Identifier:
keyid:D5:34:C8:B1:45:34:75:D5:12:7E:F6:73:AF:3D:54:0F:27:BF:01:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/103a3ea12b7f2ac503f3b2a208930367c4230e34.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/001635a2003f164ce81a019581ae7b3a74efd363.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e979ac0a-e327-4388-b9c8-44dfe2307ab2/103a3ea12b7f2ac503f3b2a208930367c4230e34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.62.222.0/23
190.103.231.0/24
190.182.252.0/22
190.185.192.0/23
190.185.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:27:6c:88:99:f7:87:21:20:56:d7:7e:28:a6:9a:3d:de:aa:
52:4e:11:ca:48:26:ea:ad:89:3f:c5:a4:af:b0:8a:99:9a:7a:
76:46:af:6e:f2:d9:77:6e:94:4b:7b:a6:f9:98:10:8a:76:99:
49:02:99:d7:1d:aa:f2:f4:60:9c:a4:7e:34:55:27:0f:67:47:
23:5a:20:62:b2:1e:b7:95:de:b5:63:31:46:eb:de:a9:6e:da:
9b:bd:8d:fa:3b:9f:87:b9:cf:e7:51:00:f5:7d:b0:dd:2a:d4:
67:67:a6:8e:cd:bd:70:97:99:64:dd:c3:6b:33:ef:36:5a:17:
4e:5e:82:4c:45:11:5a:b0:22:69:f6:3b:54:22:bb:41:b2:1d:
ec:03:25:27:aa:bc:d9:c9:45:02:8f:57:4f:57:a6:86:4c:c6:
dc:13:e7:d3:64:03:a4:dd:a1:0a:da:84:42:f0:fd:4c:1a:b8:
9e:99:da:f2:d1:5d:29:24:d4:b3:33:8e:4b:67:dd:1d:de:00:
6c:b5:37:86:fa:56:7e:a6:40:bc:bc:3f:c5:6c:44:fa:a9:a1:
d4:1e:dc:6f:84:de:41:08:06:f1:aa:c8:92:6a:51:d3:55:74:
6f:b6:2e:1b:4d:9b:57:5a:46:50:ca:db:07:67:5d:5c:f1:2d:
b4:98:a0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:50 2024 by rpki-client on console-ams.rpki-client.org