Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d3bcf82440b020aba6be463db4022fbaf91f8925.roa
File: d3bcf82440b020aba6be463db4022fbaf91f8925.roa (raw, json)
Hash identifier: pPjVrqczRHISAorM4Ftd5rXEP+tpXI3ubooCujZsvh8=
Subject key identifier: 0D:87:3F:E4:AE:51:29:95:1C:E4:E9:9A:84:57:BB:B9:DA:9E:F8:ED
Certificate issuer: /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial: 2BA5AF
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d3bcf82440b020aba6be463db4022fbaf91f8925.roa
Signing time: Tue 23 Jan 2024 07:30:00 +0000
ROA not before: Tue 23 Jan 2024 07:30:00 +0000
ROA not after: Thu 22 Jan 2026 07:30:00 +0000
asID: 14080
IP address blocks: 181.54.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2860463 (0x2ba5af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Validity
Not Before: Jan 23 07:30:00 2024 GMT
Not After : Jan 22 07:30:00 2026 GMT
Subject: CN=d3bcf82440b020aba6be463db4022fbaf91f8925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:16:a4:93:c9:f9:b3:ee:92:89:ba:7c:66:
d3:0c:99:39:70:80:ed:0f:83:97:ec:1e:a7:6a:52:
8e:1d:e6:1c:46:03:ff:2e:ef:b4:d3:d8:ab:3f:41:
07:db:a4:c5:21:f6:59:62:e2:e7:1e:17:de:aa:e5:
aa:bb:64:f4:32:3f:ac:e2:6a:f7:9a:02:2d:58:96:
6f:a6:b7:03:16:b9:93:5b:8b:b8:ad:00:96:41:b0:
5e:8a:ea:f4:9b:38:68:ce:29:aa:3e:3f:bd:89:b1:
09:94:8b:4b:08:f1:46:71:3c:7d:f6:94:5a:f3:42:
f3:c4:e7:e8:9c:39:55:8c:66:09:25:a3:10:26:cb:
78:42:41:9f:76:8c:e4:88:d3:45:1d:94:ef:35:d6:
c3:2f:a9:b1:67:a8:3d:c0:a3:b7:00:c6:ec:c0:e2:
90:ba:6b:f6:1a:aa:95:75:58:cc:61:f1:0d:c4:12:
fc:0b:2e:96:f0:71:8d:79:b4:a1:a9:6c:93:7c:cb:
78:b6:91:9f:d0:d6:37:06:28:ff:6c:73:77:7f:6c:
20:45:12:97:af:ec:4e:fc:45:cd:07:6c:b6:b3:7f:
00:be:7b:08:31:a6:82:5c:24:52:72:24:88:b0:0b:
c5:f4:67:d9:33:87:3d:cc:97:4a:03:38:7a:93:6a:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:3F:E4:AE:51:29:95:1C:E4:E9:9A:84:57:BB:B9:DA:9E:F8:ED
X509v3 Authority Key Identifier:
keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/d3bcf82440b020aba6be463db4022fbaf91f8925.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.54.162.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a9:50:e0:4f:cb:a0:0e:67:d8:84:06:42:20:fb:9f:f9:a6:
71:a2:e4:b6:64:4d:d7:47:99:24:16:f8:8e:55:df:3d:e0:61:
b6:a4:a9:d3:7f:11:31:2d:cc:24:87:07:b1:27:e8:12:8a:28:
9d:db:7d:1f:7f:d7:fc:8d:19:3b:94:23:f8:7a:66:89:e7:c0:
36:24:a1:01:a0:b7:2f:a4:c7:c3:e5:30:bd:91:ef:d8:85:83:
cd:a0:35:a5:4a:b8:33:19:b0:0f:14:01:7e:5e:8d:74:11:88:
92:99:c5:8d:84:5c:44:0e:e0:d3:e0:d8:5c:4c:89:0d:78:86:
ac:dc:4f:60:b1:c9:65:8a:4c:c7:80:60:7a:fd:7d:96:6a:37:
96:d6:ac:02:8f:a5:9f:da:0f:d5:98:78:8e:73:19:a6:c2:cc:
29:0a:1f:1c:b0:a6:72:87:cb:ed:c7:7e:8b:b9:7b:4f:05:87:
51:59:2a:70:68:bb:28:9b:06:1a:3b:4b:4c:c6:51:19:d3:f7:
80:85:f1:bc:cb:68:fd:88:98:4e:27:ef:f0:b2:67:57:2e:85:
50:a4:ec:a7:72:1f:20:c5:6b:ba:57:d5:cd:68:dd:42:e4:88:
7b:ba:22:2a:60:0d:18:a1:ee:6c:e2:7a:da:0e:59:9a:58:95:
fe:09:ff:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 19:24:31 2024 by rpki-client on console-ams.rpki-client.org