Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/c2b0be37ec4bec20adb0abe5074421035f3ba1cc.roa
File: c2b0be37ec4bec20adb0abe5074421035f3ba1cc.roa (raw, json)
Hash identifier: oI9AaClGaJASwlUWaDzBWqt/7N0O5dRg/ZTmQm2xpD8=
Subject key identifier: E4:9F:4D:93:ED:76:ED:86:05:B7:A3:A5:1F:B1:F1:85:08:56:DB:21
Certificate issuer: /CN=37a0740e0b462b36fd227b220aff33538b932a72
Certificate serial: 205576
Authority key identifier: CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/c2b0be37ec4bec20adb0abe5074421035f3ba1cc.roa
Signing time: Tue 16 May 2023 20:37:44 +0000
ROA not before: Mon 15 May 2023 20:37:44 +0000
ROA not after: Fri 16 May 2025 20:37:44 +0000
asID: 262166
IP address blocks: 168.234.32.0/20 maxlen: 24
168.234.52.0/24 maxlen: 24
168.234.56.0/23 maxlen: 24
168.234.128.0/20 maxlen: 24
168.234.144.0/21 maxlen: 24
168.234.152.0/24 maxlen: 24
168.234.154.0/23 maxlen: 24
168.234.156.0/24 maxlen: 24
168.234.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2119030 (0x205576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a0740e0b462b36fd227b220aff33538b932a72
Validity
Not Before: May 15 20:37:44 2023 GMT
Not After : May 16 20:37:44 2025 GMT
Subject: CN=c2b0be37ec4bec20adb0abe5074421035f3ba1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c6:9f:01:de:97:02:eb:53:5f:23:3b:e9:20:
66:06:da:cb:6b:1f:70:3e:8f:f6:96:8d:cf:51:94:
b5:56:1b:73:a6:25:6d:7e:41:04:3c:b1:a3:af:ab:
66:71:2d:a7:32:46:04:2b:ba:51:38:01:63:e7:ad:
ed:1e:90:af:46:7f:72:ae:3a:b9:14:7b:8d:f8:64:
e7:ec:c5:68:48:c0:9b:d2:a7:48:98:ae:49:2b:5d:
cf:a5:5c:0c:6d:15:63:10:da:f5:f1:88:07:0d:8d:
21:ce:c6:dc:5e:19:77:da:ed:71:8d:85:48:35:6c:
16:b9:c2:61:8a:94:e7:6f:e8:56:f4:a1:dd:0b:4d:
30:d4:0b:c8:0b:a4:e4:b5:69:c6:c1:98:ed:fe:63:
59:15:de:01:12:9d:e7:bd:3c:0e:dc:89:3b:08:03:
d9:2b:53:fa:72:83:ce:58:6c:46:61:97:a8:13:55:
74:ff:85:b0:92:f3:70:08:d2:cd:5f:a3:69:52:4f:
95:dd:4a:9a:34:b7:38:e4:ec:ff:3a:5a:5f:a2:d3:
73:65:48:e5:36:c5:ce:7b:51:ea:36:bb:dc:0b:12:
7f:59:31:db:c8:8b:32:d0:69:1e:5b:72:c4:c2:d9:
ca:40:ca:7d:ba:6d:f8:fe:fa:54:d8:c2:83:a5:da:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9F:4D:93:ED:76:ED:86:05:B7:A3:A5:1F:B1:F1:85:08:56:DB:21
X509v3 Authority Key Identifier:
keyid:CE:E1:D8:CC:6B:33:71:C1:99:C8:70:4C:44:F4:42:4E:E0:23:D2:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37a0740e0b462b36fd227b220aff33538b932a72.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/c2b0be37ec4bec20adb0abe5074421035f3ba1cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f5b845df-b445-4e9a-9b7e-341ec4f69453/37a0740e0b462b36fd227b220aff33538b932a72.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.234.32.0/20
168.234.52.0/24
168.234.56.0/23
168.234.128.0-168.234.152.255
168.234.154.0-168.234.156.255
168.234.158.0/23
Signature Algorithm: sha256WithRSAEncryption
22:fc:5a:01:ab:f7:ec:d6:12:03:b4:cd:cb:58:48:d1:9a:26:
3b:9a:95:a6:7d:52:c6:d0:af:bb:e8:ba:7f:79:31:d0:5f:a7:
c6:b8:9b:cb:30:6d:75:25:e5:06:ee:8b:a7:36:7e:0e:50:0a:
4c:e5:ad:e1:55:a3:fe:5f:2c:3c:bf:6b:98:b5:2b:97:44:29:
a6:53:4f:19:67:e0:8d:1d:33:b3:19:9a:eb:0f:ad:d0:8f:7a:
0b:3c:6e:fa:b5:dc:5e:dc:e5:37:97:c3:81:b6:82:9f:d5:1d:
5b:15:f1:bb:a3:ff:4c:8d:90:fb:16:d2:40:51:a6:37:16:00:
cc:3e:a6:1e:1a:31:e6:8c:7f:58:53:db:bd:d6:3e:a0:23:06:
3e:6b:02:fe:c4:2d:c4:ea:50:41:89:98:94:53:e0:57:07:cd:
59:7a:be:61:82:9d:4b:c5:5a:58:b7:69:77:e6:44:05:70:fd:
7e:1d:03:33:d5:a8:ef:0b:d6:87:d7:fa:7a:2e:cb:5d:7b:53:
c5:af:03:67:fe:24:b3:5d:cc:87:c7:60:8a:a9:ec:56:17:7d:
38:30:da:da:60:ed:f5:a4:9c:ac:c5:0c:c5:ce:1e:f1:21:24:
13:6c:2c:d7:c6:ec:90:43:44:f5:63:a2:0f:93:e0:df:53:9a:
44:bb:c1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org