Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4fdfa790958b2465e7e82f121e1edd2374cd0a72.roa
File: 4fdfa790958b2465e7e82f121e1edd2374cd0a72.roa (raw, json)
Hash identifier: fFiTD1d6GU1+CeXD6Ra20vQVfwD9Rx6WQTWe6U7lrtc=
Subject key identifier: 67:C9:B8:95:B3:60:12:F5:5D:35:68:4A:F0:3E:92:C3:F3:95:E0:EB
Certificate issuer: /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial: 0DFE6E
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4fdfa790958b2465e7e82f121e1edd2374cd0a72.roa
Signing time: Wed 24 Mar 2021 14:29:00 +0000
ROA not before: Wed 24 Mar 2021 14:28:59 +0000
ROA not after: Tue 24 Mar 2026 14:28:59 +0000
asID: 28075
IP address blocks: 181.118.120.0/24 maxlen: 24
181.118.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 917102 (0xdfe6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Validity
Not Before: Mar 24 14:28:59 2021 GMT
Not After : Mar 24 14:28:59 2026 GMT
Subject: CN=4fdfa790958b2465e7e82f121e1edd2374cd0a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e1:a4:b1:33:6c:a6:25:ae:9f:e1:b8:03:a4:
11:99:cd:16:69:41:6f:a4:b9:7d:97:4d:62:49:7c:
85:76:c9:79:f2:95:e8:4b:d2:85:65:08:1d:bb:4d:
ce:6a:0e:21:d6:a3:80:37:3a:24:3f:66:c2:57:72:
b5:6e:ac:6c:25:df:49:20:f1:59:37:4f:9d:c4:32:
a9:64:b6:19:4f:24:69:f7:07:30:c4:09:d9:20:f5:
67:91:67:cc:fe:f3:38:5d:a4:11:46:a5:d1:97:2e:
95:ff:a3:bd:30:67:17:8c:ec:93:45:b7:41:f0:dd:
ed:7c:58:9c:22:06:2f:a6:05:fa:bf:0e:5c:72:93:
f1:64:ab:68:eb:6e:0d:fd:66:6e:64:04:a1:c3:b6:
d8:5e:1b:67:b6:63:53:f2:08:50:16:55:14:bd:35:
24:98:5f:13:c1:a5:49:c4:70:24:68:3e:f2:ae:b2:
8e:3f:bf:f5:9a:b8:7e:a8:16:7b:c2:07:f6:89:37:
1a:e1:33:e1:69:05:0a:11:2b:76:30:2e:10:2a:3d:
05:32:32:54:63:60:54:d9:60:93:03:fb:47:e0:33:
76:4c:12:60:79:d4:03:62:11:0c:e1:0c:7d:2b:12:
f5:43:26:f7:a6:6f:10:43:97:bf:45:2d:8e:5c:78:
22:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C9:B8:95:B3:60:12:F5:5D:35:68:4A:F0:3E:92:C3:F3:95:E0:EB
X509v3 Authority Key Identifier:
keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/4fdfa790958b2465e7e82f121e1edd2374cd0a72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.118.120.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:75:4e:18:24:c4:35:71:04:da:24:e7:c4:74:e6:78:66:35:
b3:3c:0d:da:3a:ab:6e:38:15:e3:9a:3a:3d:a9:4b:4b:aa:61:
2e:dc:72:5b:2c:a4:09:d3:b4:1f:07:31:97:f9:a3:2a:76:f5:
32:f4:6f:d1:b2:85:3f:ae:5a:7a:c2:17:53:34:3e:a7:43:48:
0a:b0:18:9e:29:54:fc:95:f1:3a:22:40:9b:9f:52:c7:e4:30:
9d:40:df:87:9d:38:01:9d:e9:24:0d:92:b7:e0:b9:c7:3f:2d:
dc:4b:4c:e4:51:e3:53:2a:8f:41:04:14:08:61:39:91:9c:97:
ef:30:a1:04:a9:38:85:22:98:ed:e8:8a:bf:9a:09:1e:64:23:
01:eb:ad:f8:29:a3:11:10:57:28:60:14:1f:33:40:6c:53:d7:
a5:6a:86:02:91:5b:18:b6:87:a0:c8:39:19:87:df:34:18:db:
eb:30:24:49:f0:c9:e0:d3:79:00:e4:bf:8a:b7:64:16:23:32:
e2:3d:0c:7f:53:a9:bc:db:7e:a0:af:3e:45:6e:08:b1:37:ea:
10:55:df:84:32:0a:8a:36:29:d2:41:f4:a6:03:62:28:f1:8d:
6e:58:f8:4f:c6:63:3b:01:db:8a:6f:e0:5b:64:d6:54:07:e1:
2c:8e:98:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:11 2024 by rpki-client on console-fra.rpki-client.org