Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/d9a601df7252e97ed49c5e14429aa24855e30088.roa
File: d9a601df7252e97ed49c5e14429aa24855e30088.roa (raw, json)
Hash identifier: glIZ2a41ngxmpLVJGIl/EJgn5vdyjf2rK6Cisk5dZtY=
Subject key identifier: 22:33:66:B9:0B:97:18:93:07:1E:08:34:89:58:0D:3C:05:80:35:67
Certificate issuer: /CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Certificate serial: 1EF57F
Authority key identifier: 63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/d9a601df7252e97ed49c5e14429aa24855e30088.roa
Signing time: Mon 29 May 2023 12:27:58 +0000
ROA not before: Sun 28 May 2023 12:27:56 +0000
ROA not after: Thu 29 May 2025 12:27:56 +0000
asID: 265504
IP address blocks: 148.244.114.0/24 maxlen: 24
200.56.117.0/24 maxlen: 24
200.94.106.0/24 maxlen: 24
201.163.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2028927 (0x1ef57f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0932ed7fc7587a11240901c76c1f6f64f3020149
Validity
Not Before: May 28 12:27:56 2023 GMT
Not After : May 29 12:27:56 2025 GMT
Subject: CN=d9a601df7252e97ed49c5e14429aa24855e30088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:82:fc:50:91:31:41:e8:9c:32:ed:63:1b:ab:
f1:68:8f:ea:dc:cc:30:5a:91:c9:c9:6c:2f:bc:78:
ed:77:d5:74:5f:01:d0:20:7a:dd:6e:35:d4:e4:eb:
ee:2f:89:81:1a:ea:12:90:3d:bd:fe:97:37:76:04:
9e:f4:c8:e4:c6:86:72:40:e5:e6:29:c2:27:4c:0d:
49:3f:a5:f4:4c:bd:d1:24:68:b3:ef:e8:64:26:1e:
14:6c:39:29:c8:1c:a3:cc:c5:29:29:9b:c8:89:ca:
1d:b0:b8:ef:2c:f9:be:e0:62:3d:cf:7f:5d:d0:99:
44:66:f1:56:e1:05:08:a3:a7:8b:e5:25:15:44:b3:
83:88:58:73:85:04:f4:3d:4f:67:d6:08:66:1c:4e:
54:f2:15:15:d3:83:b2:5b:61:02:04:44:10:3e:e0:
56:f0:23:eb:09:7a:50:52:43:4c:05:8a:b4:81:12:
9d:fa:ad:83:88:95:24:0b:3e:f8:f7:9a:45:9d:1f:
3d:f5:fc:ed:5d:ad:33:b5:82:c2:95:df:89:ae:5d:
c6:a8:b2:29:2f:32:4a:e0:29:63:70:34:11:96:8b:
5c:f1:bf:7a:ae:ae:94:6e:6b:6f:a1:07:ed:1b:b5:
26:14:2f:a7:3e:f9:b1:93:dd:27:be:66:fe:65:0a:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:33:66:B9:0B:97:18:93:07:1E:08:34:89:58:0D:3C:05:80:35:67
X509v3 Authority Key Identifier:
keyid:63:E5:E7:0F:A2:3C:0C:80:83:7E:A1:FE:96:50:76:95:C0:CE:5E:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0932ed7fc7587a11240901c76c1f6f64f3020149.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/d9a601df7252e97ed49c5e14429aa24855e30088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f250093c-ba98-48b8-8c52-9abe57d52d4f/0932ed7fc7587a11240901c76c1f6f64f3020149.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.244.114.0/24
200.56.117.0/24
200.94.106.0/24
201.163.121.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ef:6f:2e:25:3b:92:ce:58:80:c0:a0:9d:cf:ac:c9:32:57:
18:ac:f2:93:57:36:2c:73:27:b2:f4:6d:a0:4e:28:6d:e4:0a:
76:97:01:75:62:d7:c7:92:87:c2:47:23:cf:9d:2d:9e:8a:a2:
04:59:95:33:c7:e4:d2:1a:ee:23:ba:51:0c:cd:a1:38:0f:d9:
1f:43:20:e4:d6:d4:b2:57:79:19:68:15:60:e5:b8:24:27:4a:
e3:55:a6:c2:e9:11:75:1d:db:db:18:d9:55:8f:40:1a:86:8a:
7e:2b:4b:35:05:ad:2d:56:73:8f:83:76:9c:66:99:93:2b:96:
e5:47:bd:56:dd:74:2f:21:52:c7:49:05:80:4e:b1:43:09:b0:
5f:64:d4:ad:55:57:30:8c:92:06:d5:b2:81:9a:6f:74:e3:6a:
14:18:82:87:92:ef:f7:47:4b:ba:c4:66:fd:39:c0:49:08:93:
83:ad:88:62:27:a1:0a:b2:4a:6e:d0:a3:52:e5:73:f3:e3:07:
06:35:13:c9:40:92:75:b2:f6:34:3d:4c:4d:4a:5f:26:5e:89:
96:80:8f:17:47:fc:d0:21:db:2b:a7:c4:3a:86:78:0b:60:ed:
35:6d:af:04:b4:7a:fd:a3:3d:a2:84:c1:c1:eb:83:70:63:de:
20:3b:3f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org