Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/054e3b78e49ee323ae9165c46445f8f55f7cc1af.roa
File: 054e3b78e49ee323ae9165c46445f8f55f7cc1af.roa (raw, json)
Hash identifier: PwKqYYy4OynfrHTl+obG49vj4lzlFC0TtIe6348caXw=
Subject key identifier: ED:EC:11:EA:CB:5E:67:D3:D3:A3:3D:A8:01:FA:35:1E:78:B4:F3:8C
Certificate issuer: /CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
Certificate serial: 1261E2
Authority key identifier: B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/054e3b78e49ee323ae9165c46445f8f55f7cc1af.roa
Signing time: Thu 21 Dec 2023 07:30:00 +0000
ROA not before: Thu 21 Dec 2023 07:30:00 +0000
ROA not after: Sat 20 Dec 2025 07:30:00 +0000
asID: 271855
IP address blocks: 181.191.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1204706 (0x1261e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
Validity
Not Before: Dec 21 07:30:00 2023 GMT
Not After : Dec 20 07:30:00 2025 GMT
Subject: CN=054e3b78e49ee323ae9165c46445f8f55f7cc1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:ed:7f:09:1e:43:f5:fb:fb:7e:cd:3d:11:
39:46:ab:f4:22:96:c1:e1:f5:d3:5f:c8:c7:df:6c:
84:b1:6c:fa:16:36:53:4c:c8:4f:47:48:03:37:5a:
42:2e:5b:85:41:5d:af:4a:99:7b:5e:c0:b7:b1:32:
27:3e:99:f4:65:cf:e5:e8:68:48:f5:af:6d:7e:91:
ca:97:19:c6:fd:55:7d:ac:e6:ca:43:f6:15:4d:17:
44:ac:1d:b2:0d:c8:71:c5:38:9b:c4:26:16:fe:b0:
68:eb:c2:79:d4:8e:45:a2:26:b9:6e:ca:8e:d9:7a:
de:c4:49:31:d7:8e:48:65:1a:34:74:78:e7:c6:00:
4c:89:81:44:02:53:9d:bc:f0:40:f5:9f:40:a4:59:
12:3c:e5:77:26:fe:33:9c:bf:40:17:6d:5a:a2:85:
c0:4e:4f:46:c9:7b:47:48:33:fd:eb:aa:06:b6:58:
a0:fe:42:d1:d4:73:b7:ae:08:a0:62:f3:52:59:ec:
70:1c:dc:2a:54:d2:28:23:46:a9:e5:d7:38:e9:98:
9c:ac:53:32:69:51:86:5e:5d:a9:41:a9:67:00:66:
ca:7a:23:96:00:04:cd:7d:ba:88:3b:b1:42:9e:5d:
90:0d:b0:51:d6:6a:82:92:06:a4:75:e4:72:16:45:
e1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EC:11:EA:CB:5E:67:D3:D3:A3:3D:A8:01:FA:35:1E:78:B4:F3:8C
X509v3 Authority Key Identifier:
keyid:B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/054e3b78e49ee323ae9165c46445f8f55f7cc1af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.224.0/22
Signature Algorithm: sha256WithRSAEncryption
90:d9:a1:96:3d:8d:0c:9e:f9:47:14:8b:12:69:fe:6b:51:2c:
ed:a4:b2:35:6e:61:b3:aa:d6:e2:72:bb:5c:14:17:b8:54:4e:
e8:d4:5b:c5:17:9d:3e:0d:17:aa:36:c4:e5:77:05:a9:d7:a6:
c8:3b:1e:89:82:a9:2f:26:0f:e4:3e:be:5e:66:6d:0f:c9:fd:
c4:9f:be:97:96:ac:81:ac:ab:22:ac:f5:03:18:2b:11:27:39:
a0:48:44:de:ae:27:a5:f1:0a:ef:16:74:8f:3d:dc:bf:c1:21:
3b:a7:b8:5c:48:3f:c0:4b:93:86:cd:74:f8:cf:32:d3:2a:a3:
33:96:de:b4:e9:8d:cc:f4:e7:2a:a3:0d:bc:1c:d8:24:59:76:
dc:eb:d5:47:3b:9d:bd:a1:9b:d0:91:f0:1f:78:17:57:a4:a8:
2a:47:25:98:21:ea:9a:1c:90:a8:b9:bc:8d:95:07:18:f5:4e:
2c:98:f5:e6:6c:df:4b:1b:8c:10:3d:49:ad:06:b3:d9:09:1e:
93:1c:16:3e:97:f3:a5:c3:68:ae:bb:83:68:64:c4:ea:31:36:
7d:b1:19:ff:82:54:0d:6c:8e:24:3b:ef:e7:cd:4f:14:a0:66:
cd:b8:f5:ec:18:87:d7:3c:5b:bf:1e:ca:c9:75:dc:50:e0:c1:
97:75:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 08:37:52 2025 by rpki-client