Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/8010435320b806be72ccb5dda25e7315417c6ba2.roa
File: 8010435320b806be72ccb5dda25e7315417c6ba2.roa (raw, json)
Hash identifier: Yd4xpiLifeVYLmfG7C5oNSsYdyR6hTMxvzgMgreQ5xY=
Subject key identifier: 2F:D1:D9:1B:76:38:E3:7E:A1:F6:77:66:0F:D0:70:CE:60:FF:CD:B5
Certificate issuer: /CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Certificate serial: 20F363
Authority key identifier: ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/8010435320b806be72ccb5dda25e7315417c6ba2.roa
Signing time: Tue 27 Jun 2023 05:43:56 +0000
ROA not before: Mon 26 Jun 2023 05:43:56 +0000
ROA not after: Fri 27 Jun 2025 05:43:56 +0000
asID: 52468
IP address blocks: 181.78.120.0/24 maxlen: 24
181.78.121.0/24 maxlen: 24
181.78.122.0/24 maxlen: 24
181.78.123.0/24 maxlen: 24
181.78.124.0/24 maxlen: 24
181.78.125.0/24 maxlen: 24
181.78.126.0/24 maxlen: 24
181.78.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2159459 (0x20f363)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2cfc3212455464cd8f856a348b2d5caf73dcd73
Validity
Not Before: Jun 26 05:43:56 2023 GMT
Not After : Jun 27 05:43:56 2025 GMT
Subject: CN=8010435320b806be72ccb5dda25e7315417c6ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f1:a5:3c:c3:8a:d5:34:18:76:20:f7:2c:13:
d4:f2:84:d7:21:6a:1d:59:a5:b4:ba:34:8e:21:57:
34:71:e4:e3:13:2f:6e:3b:e1:60:24:da:c2:49:25:
f7:b2:eb:f0:af:6c:87:d6:dc:18:02:7c:8b:c8:2d:
98:fe:4f:ae:2d:09:a8:08:0b:01:e3:a6:29:ce:e1:
34:01:80:99:73:87:18:99:1c:ce:82:73:1e:95:af:
66:93:0d:ef:1f:84:cc:90:76:89:dd:82:38:eb:8b:
65:53:09:f4:16:aa:14:9e:71:6e:93:48:aa:13:d0:
27:62:e4:f9:5c:2c:5a:02:d5:41:ba:86:8c:11:11:
65:34:0f:3b:b6:e0:6f:1e:ad:54:d9:39:52:54:e6:
42:2e:2d:96:54:f1:aa:d7:78:cb:e3:9b:ba:e7:b7:
3f:cc:28:84:bb:e7:f2:56:82:8e:da:39:65:d8:55:
8f:82:77:13:e0:d1:59:5d:86:b3:fb:94:6f:4a:56:
8a:a7:0d:41:6b:7f:db:10:ef:62:36:34:e9:4a:e8:
60:22:06:d1:dc:86:55:bf:3b:a5:8f:e8:ce:22:02:
89:3a:9a:a6:d3:7c:fe:23:4e:d0:1b:ec:82:cf:78:
b8:85:9d:93:9d:76:3b:47:7b:2f:cb:15:f4:6e:bc:
15:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D1:D9:1B:76:38:E3:7E:A1:F6:77:66:0F:D0:70:CE:60:FF:CD:B5
X509v3 Authority Key Identifier:
keyid:ED:97:60:23:07:66:80:76:63:22:9F:6D:41:28:05:07:EF:9D:C2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2cfc3212455464cd8f856a348b2d5caf73dcd73.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/8010435320b806be72ccb5dda25e7315417c6ba2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0ef5686d-fc66-4c8e-be4f-da69fbc2bfb5/c2cfc3212455464cd8f856a348b2d5caf73dcd73.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.78.120.0/21
Signature Algorithm: sha256WithRSAEncryption
20:b9:64:d6:af:3d:2e:48:51:e2:66:c5:d2:6e:78:a5:b9:35:
ee:40:8a:96:72:71:cf:4d:8b:ec:73:a9:a8:1e:d9:0c:d6:c7:
93:6e:71:96:7c:ac:16:34:39:d6:13:56:a9:cb:f2:a6:5b:b5:
8b:29:98:6e:c9:49:a9:e7:1d:3f:08:9e:6e:bd:94:2a:be:76:
e8:3e:81:50:c7:2e:50:3f:87:00:1e:d6:13:cf:7a:18:74:c3:
5c:70:7c:5e:89:3e:e1:54:51:3b:f5:ef:80:27:83:98:de:f1:
e9:a6:99:75:4e:c6:65:da:66:a1:65:59:ed:58:6d:51:9e:8b:
e0:84:9a:fe:e3:06:f7:1d:c3:c1:c9:aa:08:2f:38:38:74:56:
aa:ce:11:29:05:26:61:88:df:b1:70:5d:02:94:b9:a2:ca:8a:
14:f2:4a:d4:7c:7a:53:85:8e:9b:b7:65:23:0b:73:81:59:3e:
b8:b4:ad:01:16:6f:cc:d5:af:89:95:32:ed:76:66:8c:41:d6:
ff:f8:62:f8:b8:17:24:81:38:a4:68:fc:c6:ec:ec:8c:85:a0:
15:bf:4c:35:53:4c:6c:d4:de:a4:cb:75:41:97:03:30:e5:16:
30:5b:8b:11:05:8d:eb:e8:0e:c8:a7:f8:f3:0b:3d:11:18:32:
d5:a5:66:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org