Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/3dbd0ecb9e1a353a97a8f2af73db41b96fc8f870.roa
File: 3dbd0ecb9e1a353a97a8f2af73db41b96fc8f870.roa (raw, json)
Hash identifier: nvw91Lr7M1GO0x3tyBoEDLH1f1WTeWhG59w7xJorNx8=
Subject key identifier: BA:75:FA:D6:B0:02:87:DE:88:4D:E1:00:63:D9:D9:3E:E0:A2:E3:0E
Certificate issuer: /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial: 24EA09
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/3dbd0ecb9e1a353a97a8f2af73db41b96fc8f870.roa
Signing time: Thu 30 Nov 2023 06:00:19 +0000
ROA not before: Thu 30 Nov 2023 06:00:19 +0000
ROA not after: Sun 30 Nov 2025 06:00:19 +0000
asID: 266725
IP address blocks: 181.119.72.0/21 maxlen: 21
181.119.72.0/24 maxlen: 24
181.119.73.0/24 maxlen: 24
181.119.74.0/24 maxlen: 24
181.119.75.0/24 maxlen: 24
181.119.76.0/24 maxlen: 24
181.119.77.0/24 maxlen: 24
181.119.78.0/24 maxlen: 24
181.119.79.0/24 maxlen: 24
181.119.80.0/23 maxlen: 23
181.119.80.0/24 maxlen: 24
181.119.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2419209 (0x24ea09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Validity
Not Before: Nov 30 06:00:19 2023 GMT
Not After : Nov 30 06:00:19 2025 GMT
Subject: CN=3dbd0ecb9e1a353a97a8f2af73db41b96fc8f870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:45:b4:93:59:94:f8:fa:2d:d8:8f:6f:a4:
55:aa:92:d7:82:da:87:34:6f:51:6c:f1:c6:19:fa:
c5:8f:18:af:a2:9b:60:9f:8d:26:0f:63:09:f3:c5:
39:1b:ae:d4:23:de:95:1f:cc:77:9f:b6:0d:db:25:
b1:78:99:99:e2:18:a0:f3:9c:69:28:e4:2c:92:43:
07:77:fa:60:88:aa:ad:b8:f8:70:66:fe:f1:1c:8b:
9f:94:f9:02:6c:ed:a2:fd:fc:10:68:92:e7:8a:3e:
ef:45:69:22:af:c9:d8:31:5b:e2:c4:fe:d2:18:d3:
cb:6a:79:36:b9:dd:9c:cc:fd:27:33:32:60:57:97:
4b:18:e0:b6:76:95:ad:f3:b4:ce:d7:5c:a6:0c:1f:
b1:3c:9d:a3:c6:5f:c2:9f:2c:43:13:63:c9:a8:6a:
55:27:b2:45:30:1a:28:ed:34:a3:ce:d6:c0:86:3f:
d7:3a:fb:f8:e8:2d:46:d4:6d:33:da:7e:16:e9:04:
e9:b6:35:27:6c:a3:ef:0a:ff:21:8c:54:7f:f6:47:
ee:e5:fb:c7:21:cb:e9:34:32:4f:3a:50:ab:f3:34:
4a:f0:6a:27:4a:56:8c:36:af:c1:91:2d:f1:c0:05:
3f:56:23:b1:48:f5:0f:48:2f:ae:49:92:f2:7b:df:
a7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:75:FA:D6:B0:02:87:DE:88:4D:E1:00:63:D9:D9:3E:E0:A2:E3:0E
X509v3 Authority Key Identifier:
keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/3dbd0ecb9e1a353a97a8f2af73db41b96fc8f870.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.119.72.0-181.119.81.255
Signature Algorithm: sha256WithRSAEncryption
64:03:ac:4e:e0:ef:14:44:0d:e9:7c:af:53:22:07:3c:71:36:
79:4c:b6:fa:8c:e8:36:3c:38:34:ca:fd:62:b6:b4:f3:d2:1c:
3b:14:08:9e:09:b6:c9:44:e9:22:de:d1:14:1e:57:00:1e:88:
12:e3:ad:f4:98:65:5f:46:aa:9a:a4:42:35:3f:3f:e6:52:38:
e5:26:7f:ef:dd:da:fc:e1:bd:86:2a:46:a9:7e:8b:bc:ba:71:
dc:bd:56:c5:a4:da:37:43:86:e9:cc:53:fa:e7:0f:5a:72:a8:
54:5c:1e:e1:c5:73:bd:c4:5c:b3:6b:3d:cf:2b:df:8f:dd:ae:
4b:bf:27:20:e8:1b:5f:4c:f8:8e:47:fa:15:ae:0e:94:07:ee:
63:17:9c:78:e7:e8:32:4f:9b:28:09:27:3e:5c:b7:1a:ad:b1:
cd:8c:af:86:aa:c8:2a:05:8f:39:05:2f:e3:1d:7d:53:5d:55:
b3:1e:4d:f4:ef:54:a9:cc:64:81:5b:d5:76:c8:d7:45:43:63:
6a:a5:1f:90:68:8c:c5:2f:d3:00:e9:2a:92:1e:51:f4:54:40:
e8:e1:e1:0d:d3:10:4a:57:00:d0:48:e9:a9:d5:bf:04:1b:0b:
df:2a:2e:a2:ea:79:f5:4c:cc:58:92:4b:46:6b:07:55:d9:1d:
c4:60:27:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org