Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/208def395bd21c8cb6cf27251bb44cb47079b468.roa
File: 208def395bd21c8cb6cf27251bb44cb47079b468.roa (raw, json)
Hash identifier: j0ME5KPId95x3FwvsusNm0iFxKAGWUi4FFgOYTCTfOA=
Subject key identifier: 16:93:95:8C:11:8B:97:CA:83:F8:E8:8D:48:23:58:DA:F9:0F:BD:7D
Certificate issuer: /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial: 235351
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/208def395bd21c8cb6cf27251bb44cb47079b468.roa
Signing time: Mon 14 Aug 2023 20:07:31 +0000
ROA not before: Sun 13 Aug 2023 20:07:28 +0000
ROA not after: Thu 14 Aug 2025 20:07:28 +0000
asID: 27836
IP address blocks: 191.117.64.0/18 maxlen: 18
179.3.64.0/18 maxlen: 23
186.172.0.0/14 maxlen: 16
179.3.128.0/21 maxlen: 23
179.3.136.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315089 (0x235351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Validity
Not Before: Aug 13 20:07:28 2023 GMT
Not After : Aug 14 20:07:28 2025 GMT
Subject: CN=208def395bd21c8cb6cf27251bb44cb47079b468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:f7:b9:bb:23:8d:3c:65:a5:84:70:4e:0c:
50:c7:f4:12:80:4c:34:fa:34:fc:64:60:0b:90:f6:
00:a6:17:f9:5e:5e:de:28:0f:5d:ef:96:cf:d4:fb:
53:05:08:75:01:3c:22:03:61:87:28:65:30:e4:2e:
45:27:7f:49:a8:fd:06:dd:bc:4e:3f:42:85:51:46:
0e:d3:41:0e:16:c7:7b:66:6d:5f:41:c4:f5:e9:42:
aa:13:a6:fe:97:35:a9:9a:ba:a9:bf:6d:2f:bf:94:
f4:1d:35:8f:49:c3:45:3c:da:c6:7b:1b:e2:f1:68:
a0:8d:0a:4f:f3:b3:4f:88:c2:34:71:91:ac:e6:ea:
5c:6c:41:53:95:42:e8:30:c1:1c:56:28:3c:5d:a0:
f1:0f:7a:23:7b:43:34:07:1c:ca:ca:f2:bc:df:3f:
38:c6:64:c5:70:2b:7c:8f:b9:88:37:dd:22:5b:fb:
9c:a1:e8:94:3e:79:32:84:2e:e3:1d:31:c6:94:2b:
7b:57:50:1d:64:82:d3:26:cb:7a:22:c1:33:b0:9e:
f7:4b:95:dc:2e:15:30:67:fd:17:47:a0:60:09:d0:
b7:cb:56:f6:e9:fb:18:ab:81:bf:e1:07:ef:38:8d:
06:6c:df:c4:ec:62:23:e0:d6:ef:25:af:dd:8a:80:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:93:95:8C:11:8B:97:CA:83:F8:E8:8D:48:23:58:DA:F9:0F:BD:7D
X509v3 Authority Key Identifier:
keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/208def395bd21c8cb6cf27251bb44cb47079b468.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.3.64.0-179.3.139.255
186.172.0.0/14
191.117.64.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:ea:e3:f6:a4:83:02:11:43:18:da:6b:2b:fd:69:9a:26:b6:
22:aa:85:75:08:bf:0d:02:37:34:5b:e6:5d:d2:71:71:c7:ad:
1f:99:1c:ea:76:eb:4d:9d:ec:d0:8e:32:f5:3e:df:0a:d4:c4:
ff:1d:50:54:57:5d:a3:35:80:8e:cb:1f:89:11:fd:0a:3b:e9:
be:dc:25:b3:00:46:20:a2:4c:fd:ef:e2:8e:b8:f2:84:5a:40:
ee:99:fe:b6:cb:53:b7:bd:21:c8:22:6c:eb:db:f1:3b:51:84:
24:f6:10:11:91:2f:81:d8:d9:ea:8f:2c:d1:cb:9d:40:67:7a:
77:a3:91:e9:38:52:6d:ae:39:e7:20:e4:69:24:ec:fe:00:e9:
7e:56:e1:9d:33:23:c1:a5:52:06:0e:71:9d:ec:0b:ff:10:fe:
32:ad:05:c2:7c:10:b7:77:87:e4:82:95:2d:17:4e:be:f4:e0:
33:7d:d6:b9:ce:4b:3b:18:66:76:c9:56:4b:37:39:f8:20:61:
15:59:ee:a1:61:54:e1:1d:22:43:fc:3f:f4:25:b2:a4:e5:ac:
08:44:0c:d8:1d:eb:90:03:79:2e:ec:e1:cf:7a:29:3a:71:de:
ee:75:4b:c3:43:98:f8:41:96:8a:a1:dc:53:cb:24:32:a3:8e:
d4:46:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:36 2024 by rpki-client on console-fra.rpki-client.org