Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/303e86b530d64a9e679f479caa1150b7f65aa0a0.roa
File: 303e86b530d64a9e679f479caa1150b7f65aa0a0.roa (raw, json)
Hash identifier: Ql5dcX95jLeOnXCB7E9XOyZ93NQSjROkVHv05Tn9bSs=
Subject key identifier: 60:8C:6A:0E:5F:4A:27:3D:47:BC:0E:54:28:E8:73:31:C3:A9:C7:C4
Certificate issuer: /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial: 1EFAEF
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/303e86b530d64a9e679f479caa1150b7f65aa0a0.roa
Signing time: Mon 29 May 2023 12:28:00 +0000
ROA not before: Sun 28 May 2023 12:27:56 +0000
ROA not after: Thu 29 May 2025 12:27:56 +0000
asID: 265615
IP address blocks: 201.151.150.0/23 maxlen: 24
201.163.96.0/24 maxlen: 24
201.151.156.0/24 maxlen: 24
201.151.177.0/24 maxlen: 24
201.151.178.0/24 maxlen: 24
189.206.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030319 (0x1efaef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Validity
Not Before: May 28 12:27:56 2023 GMT
Not After : May 29 12:27:56 2025 GMT
Subject: CN=303e86b530d64a9e679f479caa1150b7f65aa0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a1:5c:5d:f5:1c:06:c0:25:37:e4:8d:f3:ab:
90:49:a2:e2:77:ac:74:bb:c5:a0:c7:74:2a:86:54:
1b:8f:c0:9c:c3:95:a1:e7:47:f9:44:0e:0c:02:51:
3a:fc:45:34:b6:b3:f3:6f:ab:4d:02:e7:72:bb:44:
4b:2f:e8:b5:ad:94:3f:41:42:01:d6:e9:db:a9:ac:
2f:bf:e3:01:3f:7e:24:ed:c3:6d:45:46:7a:d2:a5:
5f:c9:a5:f6:c6:97:be:15:64:78:29:2d:c3:ea:1f:
be:2a:9c:3b:be:54:d7:e4:b7:6c:e2:3f:0e:b4:31:
da:04:c6:9a:db:7d:56:b3:ef:f9:c6:e5:c3:09:b1:
61:46:9d:be:f3:eb:5d:26:7d:b9:a1:e6:1b:31:c2:
5c:0a:cf:a4:7f:71:49:d9:56:f8:13:7e:ac:46:36:
06:52:30:61:02:37:ba:a3:51:68:a0:a4:88:cc:67:
1b:f0:8c:b3:4c:76:85:40:fb:fe:d4:92:66:36:ed:
07:99:d7:c4:b0:a3:14:a0:73:14:73:b7:9c:c8:17:
41:0a:c7:13:0c:08:a8:d1:4b:ac:65:3c:63:c7:42:
5c:36:43:0d:3a:32:77:e1:11:52:9a:97:ff:0a:b1:
e5:63:04:93:01:34:2c:1d:fd:0e:ad:b3:9e:3b:8b:
9a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8C:6A:0E:5F:4A:27:3D:47:BC:0E:54:28:E8:73:31:C3:A9:C7:C4
X509v3 Authority Key Identifier:
keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/303e86b530d64a9e679f479caa1150b7f65aa0a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.206.22.0/24
201.151.150.0/23
201.151.156.0/24
201.151.177.0-201.151.178.255
201.163.96.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:63:e4:7a:64:3a:fe:e6:ce:83:53:23:c6:61:12:c4:24:a3:
09:79:f4:1f:4a:8d:67:08:d1:96:5c:03:50:df:be:37:83:e9:
71:37:f4:1d:6e:c4:fe:50:49:8b:72:c9:f1:dd:be:24:c7:81:
c0:be:b7:ba:6a:c9:65:d6:b0:bc:18:8f:99:8a:76:46:0c:12:
ef:11:87:47:da:81:47:74:20:21:98:2a:67:3a:56:8f:db:e3:
1b:30:34:93:7c:3f:a4:b0:38:01:ba:e1:ab:58:40:0a:c3:67:
f6:1a:50:ba:a6:69:ba:ba:6f:45:70:04:1f:f7:29:80:3b:24:
21:c6:24:9b:98:15:2b:45:1b:5f:23:c0:6d:6c:f5:8a:a7:14:
7e:91:a7:28:96:5a:00:24:cc:86:2e:1d:07:01:6c:96:2e:3f:
90:69:2a:27:98:01:b7:14:b0:b5:24:f5:a1:41:1d:67:1e:ab:
13:ee:0a:eb:49:f2:18:7a:4f:c1:a2:a9:66:11:14:a9:d6:47:
67:cd:89:93:a2:99:c2:82:ab:15:84:81:a6:e1:1c:3a:7d:27:
14:89:8e:f9:73:06:13:de:8f:5f:a7:54:5b:bf:25:3f:a4:e8:
f2:84:7d:fe:46:bc:5e:b0:4b:60:23:03:7b:16:26:f5:af:6a:
c3:75:fb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:43 2024 by rpki-client on console-ams.rpki-client.org