Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/d6a341498bca9cb4a0486da2afeeea0e713d6590.roa
File: d6a341498bca9cb4a0486da2afeeea0e713d6590.roa (raw, json)
Hash identifier: in/5lFmAG76jrCEnXMlHcm82GBxUeTPqu8E9bTsqYMQ=
Subject key identifier: D2:F4:B1:C8:AE:DE:4B:05:4B:94:81:EA:C8:2B:C4:2D:F1:C3:8F:9C
Certificate issuer: /CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
Certificate serial: 0E061F
Authority key identifier: 66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/d6a341498bca9cb4a0486da2afeeea0e713d6590.roa
Signing time: Wed 24 Mar 2021 14:42:18 +0000
ROA not before: Wed 24 Mar 2021 14:42:17 +0000
ROA not after: Tue 24 Mar 2026 14:42:17 +0000
asID: 27696
IP address blocks: 181.189.224.0/19 maxlen: 24
190.5.64.0/19 maxlen: 24
190.5.96.0/19 maxlen: 24
2803:7200::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919071 (0xe061f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95f676acfc94ecb8278d82cca69a83a7b785bd05
Validity
Not Before: Mar 24 14:42:17 2021 GMT
Not After : Mar 24 14:42:17 2026 GMT
Subject: CN=d6a341498bca9cb4a0486da2afeeea0e713d6590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:27:64:12:85:05:57:25:c0:1c:43:57:8f:af:
5e:2c:38:70:19:32:a8:b0:4c:4d:6e:3c:50:f1:1f:
e8:72:b8:97:d7:7c:f3:ab:3f:e3:7a:25:43:ca:d9:
a9:15:21:2c:af:d2:8f:2d:9b:c4:ba:d5:d7:c5:4c:
0b:7e:ca:3f:e0:5d:a0:03:3b:59:32:3d:31:d6:a6:
3a:12:8c:08:3a:15:bd:c7:d2:24:c2:ce:fb:ce:9d:
e5:8f:da:7e:63:e2:61:ad:1d:f4:59:b6:78:71:40:
c9:b7:0b:ca:1d:2d:e6:06:f7:6d:7e:ae:32:69:68:
a3:34:97:54:56:a4:af:27:0c:64:0d:11:36:d7:23:
45:80:9c:fc:2d:28:fb:c2:13:77:f2:df:be:80:22:
47:7e:6c:72:c0:ad:13:f1:28:f7:f9:a3:b8:ed:12:
ba:d0:22:33:76:f1:b3:c9:b7:64:be:e4:34:85:98:
ae:62:23:0f:d4:d4:b0:69:01:2d:bd:f3:7f:f7:68:
29:23:1e:16:9d:10:0e:53:70:42:0e:eb:e2:6a:b9:
84:ed:c8:46:99:68:c2:79:96:f6:a7:00:0a:10:85:
30:9a:2a:ea:89:e6:a5:e9:32:11:01:8b:47:5e:96:
e7:ae:6c:b8:64:76:7c:ba:f1:ba:7b:e1:85:26:62:
a4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F4:B1:C8:AE:DE:4B:05:4B:94:81:EA:C8:2B:C4:2D:F1:C3:8F:9C
X509v3 Authority Key Identifier:
keyid:66:79:6E:79:A0:05:73:33:08:46:D2:E3:21:B2:75:24:CC:7F:FA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95f676acfc94ecb8278d82cca69a83a7b785bd05.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/d6a341498bca9cb4a0486da2afeeea0e713d6590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/ef2592da-8173-40df-a79a-e9075f769e72/95f676acfc94ecb8278d82cca69a83a7b785bd05.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.224.0/19
190.5.64.0/18
IPv6:
2803:7200::/32
Signature Algorithm: sha256WithRSAEncryption
5b:f7:59:fb:fd:70:02:aa:ee:ed:e7:6a:10:c3:13:ad:11:ea:
5c:93:b0:b4:db:01:bd:5f:aa:9a:60:ec:1e:7b:7a:2e:af:bf:
0c:11:52:82:59:92:c5:44:7e:b0:5e:61:71:a3:ab:53:93:04:
e5:7f:3c:b9:e1:9b:07:03:21:12:78:37:fc:62:27:89:d3:3c:
30:53:3a:59:de:b0:b9:55:18:fe:1b:f8:9c:4b:34:0a:71:aa:
36:f5:27:15:8f:3f:28:2f:d2:06:8d:b6:18:c5:d3:46:f1:43:
eb:a6:ea:ef:15:67:7c:91:cf:ba:5b:d7:88:43:01:f8:a9:2e:
5f:42:76:c3:ae:e5:34:56:0c:a9:88:2b:b8:b8:8d:aa:aa:dc:
d3:a2:d0:73:b9:f7:86:d6:59:eb:f6:34:1d:e3:75:3e:63:b9:
a9:7b:97:84:ba:50:d7:f7:0e:cc:52:b8:c8:ef:bb:71:be:fc:
80:73:bf:0f:af:4a:36:eb:1b:e1:4a:c2:c9:43:ee:be:de:6a:
6c:b2:0c:cf:5f:e6:30:a5:a9:01:04:ac:a7:99:3e:70:5b:ca:
2b:b5:72:e0:cf:22:0c:99:da:89:ab:11:a2:a6:28:fc:c5:b5:
0f:d7:9f:83:41:2a:81:bc:19:3c:e6:72:b4:9d:d8:79:b6:78:
a9:f1:4a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org