Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/bec42dd53066d7531f99f1309daad455f79f6011.roa
File: bec42dd53066d7531f99f1309daad455f79f6011.roa (raw, json)
Hash identifier: Qd3W7+I48N7iR9xQuB3I+f7kuE9sH7B2JXNCmcaSNcg=
Subject key identifier: 97:6D:35:E7:5D:2A:F6:2A:4D:28:2B:2C:6E:19:E2:80:0E:83:F3:10
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 296910
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/bec42dd53066d7531f99f1309daad455f79f6011.roa
Signing time: Fri 10 Nov 2023 07:30:00 +0000
ROA not before: Fri 10 Nov 2023 07:30:00 +0000
ROA not after: Sun 09 Nov 2025 07:30:00 +0000
asID: 14080
IP address blocks: 181.58.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2713872 (0x296910)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Nov 10 07:30:00 2023 GMT
Not After : Nov 9 07:30:00 2025 GMT
Subject: CN=bec42dd53066d7531f99f1309daad455f79f6011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:1c:d5:25:7c:fc:37:e0:75:e5:cd:23:82:
2e:a4:bd:df:72:d1:71:42:d1:a2:1e:27:80:b8:ce:
ea:d4:6c:51:ec:76:72:a3:9d:a3:e4:5c:d8:cb:e6:
d2:6b:32:69:cc:b0:9f:03:06:ef:c3:ab:b8:64:fe:
2e:3a:14:0d:37:6d:96:c4:58:30:a7:e0:49:95:4e:
3f:45:a3:e0:96:a0:81:2f:ac:39:6a:7c:93:44:5d:
d1:ac:27:e6:31:3f:f3:35:04:f5:ee:d5:2a:8a:09:
4c:13:9b:ae:c5:ca:b6:60:53:46:fb:ac:3b:d2:89:
db:4a:60:12:d9:d0:81:55:0a:01:dd:ef:cc:ba:06:
43:07:a6:57:a9:25:20:da:9d:40:b5:a8:31:4a:42:
f4:7a:4f:e5:ee:f1:b4:13:75:bd:e4:1c:c3:90:e0:
47:cb:83:a0:90:1d:96:00:af:d9:b7:73:0f:5b:d8:
78:e6:75:98:b2:d9:eb:41:4c:60:31:7c:2a:ce:0b:
44:94:34:a6:1d:bc:7c:7a:70:47:55:3b:c9:68:a8:
9b:c4:1e:4c:a0:da:4d:10:a3:a1:5a:dc:4a:80:c1:
35:08:9b:b7:94:77:67:99:22:a6:9d:08:8b:ab:a0:
1e:d7:f7:b2:83:24:2d:66:95:ec:9c:77:a5:79:58:
3b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6D:35:E7:5D:2A:F6:2A:4D:28:2B:2C:6E:19:E2:80:0E:83:F3:10
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/bec42dd53066d7531f99f1309daad455f79f6011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.58.72.0/24
Signature Algorithm: sha256WithRSAEncryption
61:66:18:46:3c:e4:22:97:7b:b3:a4:ce:b7:37:87:e8:0c:d4:
81:dc:38:b6:da:d1:34:d3:66:21:de:c6:a7:a5:56:a4:ce:a6:
b2:ab:f5:36:58:5b:ab:91:7c:58:7a:83:be:b6:1c:a5:ba:1a:
c8:6a:2f:f5:88:d8:93:f9:da:13:96:80:b5:3c:1d:bb:e3:31:
65:c1:8f:31:22:c7:e7:5e:14:cd:62:10:64:f3:83:01:2a:7f:
53:8a:ae:44:86:61:b4:64:5e:52:f1:8a:f2:10:11:01:cf:2e:
9a:51:20:8e:fc:17:67:79:48:ab:f5:c4:9b:ee:16:df:6d:fe:
6a:f7:bb:8e:f6:00:91:46:1a:8e:04:d3:0a:57:b3:3d:4b:a8:
f7:3f:4e:b8:35:9e:c0:c6:d7:d5:22:a5:64:be:f4:ec:6a:e3:
55:5a:1c:ff:88:11:b8:e7:73:58:e2:64:b5:c5:d4:ba:67:23:
a3:69:e7:43:9b:6f:17:b1:5d:43:ed:a4:ed:2d:51:6c:11:be:
ee:dd:44:e4:4a:18:c4:48:7f:1a:98:a7:9a:5a:a2:43:6c:5d:
30:5d:f3:fb:a4:85:85:b9:c0:5b:5f:f8:69:b3:0b:ad:9e:e9:
d6:3f:10:e2:dd:44:db:d8:51:79:9e:ab:33:fc:6e:67:2f:36:
38:58:b8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:15:18 2024 by rpki-client on console-fra.rpki-client.org