Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f7b04195-7898-45d3-9726-d2e38fa7231f/51903c1b744d69b5f86f007fcd17f8c9b3215690.roa
File: 51903c1b744d69b5f86f007fcd17f8c9b3215690.roa (raw, json)
Hash identifier: wHlMHj34xWeIPIACwY5FdIMEhj3eG7oTWSufe0a7p9s=
Subject key identifier: 0A:18:A8:43:83:4E:4B:65:4A:02:BD:99:6D:13:28:4D:DF:3C:08:9B
Certificate issuer: /CN=a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4
Certificate serial: 1EFB66
Authority key identifier: AD:14:68:D0:D2:7F:67:BE:31:0F:F2:48:87:9B:19:E2:DC:DB:00:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f7b04195-7898-45d3-9726-d2e38fa7231f/51903c1b744d69b5f86f007fcd17f8c9b3215690.roa
Signing time: Fri 10 Feb 2023 16:15:31 +0000
ROA not before: Mon 22 Mar 2021 14:38:26 +0000
ROA not after: Tue 24 Mar 2026 14:38:26 +0000
asID: 265632
IP address blocks: 131.196.8.0/22 maxlen: 22
131.196.8.0/24 maxlen: 24
131.196.8.0/25 maxlen: 25
131.196.8.128/25 maxlen: 25
131.196.9.0/24 maxlen: 24
131.196.9.0/25 maxlen: 25
131.196.9.128/25 maxlen: 25
131.196.10.0/24 maxlen: 24
131.196.10.0/25 maxlen: 25
131.196.10.128/25 maxlen: 25
131.196.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2030438 (0x1efb66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4
Validity
Not Before: Mar 22 14:38:26 2021 GMT
Not After : Mar 24 14:38:26 2026 GMT
Subject: CN=51903c1b744d69b5f86f007fcd17f8c9b3215690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e7:ad:c4:fd:62:5a:e6:95:79:e6:cf:98:81:
21:db:ba:fd:59:fe:47:d3:d2:fd:67:ea:51:c1:54:
a6:dc:ff:d7:f5:28:d0:6f:99:a7:64:e5:89:65:63:
0a:81:98:e4:eb:d4:9f:71:61:3b:5e:e7:68:c5:30:
ca:e3:92:67:51:ff:f9:5b:e1:ae:cc:49:6e:ce:4d:
1e:63:fe:17:b1:ba:57:e5:84:66:eb:19:71:38:73:
6f:67:4b:67:99:d3:16:65:98:b6:b3:4b:a0:da:56:
23:3f:c7:cb:b2:2b:68:31:3b:01:42:3c:bd:8a:0d:
cb:d7:5b:f0:ef:8b:10:f0:00:51:80:71:e4:9a:f6:
e9:36:fd:74:67:a4:dd:5b:3e:1d:66:77:e4:18:74:
18:f4:65:75:82:eb:b6:97:09:b2:30:68:45:c8:cb:
e8:62:ae:ec:42:ff:82:4f:e1:12:48:75:23:48:c3:
35:13:7a:c2:e4:2c:7d:5d:36:fb:c1:74:62:5c:2d:
19:b9:b8:b0:bb:ba:7b:0a:b0:c1:26:74:58:a6:ec:
74:1d:78:dc:b9:1d:c2:3b:b2:f7:39:71:9a:61:f3:
f5:45:05:22:4a:aa:c3:9f:29:99:cb:aa:f6:8f:86:
bf:91:b9:bd:53:8f:0b:69:a5:37:4b:9c:55:02:4b:
9f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:18:A8:43:83:4E:4B:65:4A:02:BD:99:6D:13:28:4D:DF:3C:08:9B
X509v3 Authority Key Identifier:
keyid:AD:14:68:D0:D2:7F:67:BE:31:0F:F2:48:87:9B:19:E2:DC:DB:00:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f7b04195-7898-45d3-9726-d2e38fa7231f/51903c1b744d69b5f86f007fcd17f8c9b3215690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f7b04195-7898-45d3-9726-d2e38fa7231f/a33e7721b1bb581251023eb9a8a7a5ab5cbedbb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.8.0/22
Signature Algorithm: sha256WithRSAEncryption
75:fb:fa:91:2b:06:5a:3b:51:67:78:99:e3:e6:4c:6c:ea:0c:
96:93:f2:22:c7:d7:2a:97:98:d8:87:6c:e9:b3:28:bc:4b:16:
28:fd:74:7a:44:48:da:fc:af:01:aa:34:88:17:82:c8:d2:5e:
88:61:17:dd:56:4e:97:f0:7d:2c:b8:ef:85:42:d3:69:10:d1:
19:83:8e:a7:72:38:bb:ef:cb:70:d0:b2:90:70:5c:d2:96:46:
6b:16:0d:57:bb:3f:39:e6:ed:65:99:5f:91:9b:05:dd:c0:1b:
90:ee:df:a9:71:c3:2c:99:f9:39:15:7f:c2:c9:07:63:56:98:
81:df:74:11:50:73:63:df:b9:9b:bc:86:88:3d:de:a9:82:0c:
3f:ef:e1:ee:f5:64:d9:fc:e6:26:d0:22:ca:8d:01:e7:dc:28:
97:29:c1:6e:91:f6:73:ff:d8:28:58:a0:60:b1:22:06:d6:f2:
71:bb:ed:d8:06:59:7d:18:7c:5d:35:a2:dd:63:c0:78:9d:da:
23:ae:cc:18:12:d6:d0:e6:cd:c2:74:9b:49:73:fa:4e:8a:20:
4b:97:e9:65:af:d7:ec:6d:1d:47:fd:29:4e:d5:20:1a:01:35:
b0:18:1e:7c:6a:2b:ab:ae:fb:8e:33:3d:59:81:41:a0:95:97:
e7:b4:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org