Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/220ad5a8d228b491d56e4b28ee68578008dbea63.roa
File: 220ad5a8d228b491d56e4b28ee68578008dbea63.roa (raw, json)
Hash identifier: 9R3pjYw4JC+nw1/puTH6f//J1bPOE1LkaQaCNl9xntQ=
Subject key identifier: AE:46:45:30:09:2F:FF:B9:C4:88:50:2D:76:DB:34:53:2B:84:84:7A
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 0DF6DF
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/220ad5a8d228b491d56e4b28ee68578008dbea63.roa
Signing time: Wed 24 Mar 2021 14:29:00 +0000
ROA not before: Wed 24 Mar 2021 14:28:59 +0000
ROA not after: Tue 24 Mar 2026 14:28:59 +0000
asID: 28075
IP address blocks: 131.72.3.0/24 maxlen: 24
168.194.205.0/24 maxlen: 24
181.118.66.0/24 maxlen: 24
181.118.67.0/24 maxlen: 24
181.118.74.0/24 maxlen: 24
181.118.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 915167 (0xdf6df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Mar 24 14:28:59 2021 GMT
Not After : Mar 24 14:28:59 2026 GMT
Subject: CN=220ad5a8d228b491d56e4b28ee68578008dbea63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:99:75:92:3a:cc:6a:ed:91:23:46:4f:b6:
ac:71:f1:94:8f:e2:3f:27:00:9d:de:50:8e:79:34:
96:f5:de:6e:75:24:f5:75:44:b1:d0:48:6c:2b:01:
64:b0:42:96:ae:1f:9b:08:74:80:75:d3:7f:91:c7:
4b:53:b4:e7:3a:d0:8b:f7:91:fc:58:2b:bf:15:e2:
ed:f0:e7:af:07:19:7d:a2:32:7d:f9:2b:00:63:70:
da:73:65:1d:b1:60:c6:e9:7e:4f:5d:88:e9:5d:9b:
85:a5:0d:49:7c:34:2b:14:45:61:ba:07:57:e4:11:
a9:3f:1c:3f:81:38:dc:af:5d:4c:2e:ec:2e:ca:c0:
2e:00:00:08:75:d7:e1:15:1f:af:a5:48:4d:01:e2:
8d:7e:d7:e7:b1:a1:9d:67:c2:bf:9f:8c:9d:8a:05:
82:c9:41:49:6a:30:e8:09:4c:5f:d0:3c:ad:d5:77:
07:91:30:af:c5:07:2f:ff:82:c0:e9:43:e2:7f:24:
c5:25:78:76:60:21:19:07:a9:c7:6a:ff:c9:2c:cd:
4e:ec:b8:84:35:4e:d9:a1:35:b1:d9:df:7f:06:91:
9f:23:b5:6f:40:3b:92:32:54:85:33:72:f8:de:f5:
ed:db:86:89:4c:9d:9e:13:ba:e7:a3:8e:e9:2a:64:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:46:45:30:09:2F:FF:B9:C4:88:50:2D:76:DB:34:53:2B:84:84:7A
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/220ad5a8d228b491d56e4b28ee68578008dbea63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.3.0/24
168.194.205.0/24
181.118.66.0/23
181.118.74.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:b2:fe:20:2e:9c:f1:86:bd:0a:a4:9e:76:24:72:6d:43:bf:
fd:6a:56:f3:9e:29:64:29:92:06:18:a8:21:8b:ed:5c:ab:f6:
3f:60:12:be:05:d2:72:96:d0:d9:91:53:31:5c:ad:7d:8b:88:
f9:32:4f:03:11:1b:67:98:e1:e8:8d:b6:3e:50:26:92:e2:d4:
bd:90:14:40:36:3d:67:be:76:bf:b2:34:8c:06:83:3c:24:91:
04:f4:78:7b:67:5c:73:ae:72:e3:c7:d1:c9:d8:75:db:ab:18:
82:9b:71:3a:d1:e1:74:84:af:ff:7b:07:b4:f1:2e:e9:0d:af:
91:a0:e0:b8:2c:ba:61:4e:7d:b1:d9:9c:00:31:34:c9:13:ef:
10:0c:84:70:29:98:d3:42:0a:64:71:7a:35:ef:87:6f:7d:e9:
fe:e6:01:ad:86:28:32:e3:61:a2:d5:d1:5d:44:16:b6:55:4f:
60:8d:e3:c2:42:73:c1:d6:e6:ca:a0:6f:dd:e5:23:99:0e:6c:
5c:fc:1a:0b:5c:97:63:4c:58:7c:e2:cb:de:04:f8:ea:45:d8:
d4:54:1d:03:8b:98:6a:5c:4b:c1:f1:cf:c6:b4:89:fd:13:c7:
36:60:73:34:07:79:00:85:22:fe:b1:e2:21:77:50:f5:dd:05:
9e:ef:b2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org