Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4fc7f2786b56237959688bb6538fe9cf2e40470b.roa
File: 4fc7f2786b56237959688bb6538fe9cf2e40470b.roa (raw, json)
Hash identifier: EbIcFjMV8pEWcuNkwdI5c9Tea//mvLrgxoyGT37xVvY=
Subject key identifier: 42:CF:41:3B:A7:5F:8B:D7:33:7E:DF:4B:05:54:EC:91:75:85:F6:B6
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 11AB4E
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4fc7f2786b56237959688bb6538fe9cf2e40470b.roa
Signing time: Thu 25 Nov 2021 15:31:32 +0000
ROA not before: Thu 25 Nov 2021 03:00:00 +0000
ROA not after: Sat 25 Nov 2023 03:00:00 +0000
asID: 271930
IP address blocks: 181.215.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1157966 (0x11ab4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Nov 25 03:00:00 2021 GMT
Not After : Nov 25 03:00:00 2023 GMT
Subject: CN=4fc7f2786b56237959688bb6538fe9cf2e40470b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:da:3a:54:f9:33:56:74:43:00:60:dd:09:b4:
9c:aa:45:64:26:fa:76:70:53:c4:9a:43:b6:07:ef:
d9:5a:75:28:06:0f:7f:6b:cb:99:4c:44:65:33:f7:
fa:1d:b3:5d:c0:30:a5:37:3e:9b:fa:66:49:94:12:
ad:71:1b:00:e6:47:e8:29:8d:b3:09:5f:9d:11:cb:
6b:ec:df:08:a0:37:1e:7a:7a:8f:e0:3f:45:48:44:
03:ee:d3:35:07:26:f4:4f:c0:ff:79:ba:02:87:3a:
1c:d1:58:72:0f:cc:a5:ee:ff:de:60:f4:3f:f9:18:
b6:b7:2c:71:f0:e2:f4:b6:de:96:7f:f3:1f:fe:c0:
23:16:0c:cf:c4:8c:45:53:35:de:07:5f:c3:c3:ce:
af:63:38:f2:51:de:74:f6:c0:ee:26:50:3d:e2:56:
26:bc:45:cf:2e:c7:76:b0:0b:7f:d7:91:6d:53:67:
37:84:07:fa:5e:92:b3:56:04:25:a1:cd:52:9b:d3:
ca:9c:5e:ee:f7:4a:c8:93:8c:c0:c3:73:46:89:dc:
3f:33:10:71:f6:49:3a:5d:63:5d:6c:aa:05:3d:db:
2a:ca:72:06:0b:6c:21:c4:82:5e:ab:30:7e:aa:47:
7f:b0:bb:82:96:e8:2b:8b:b6:69:18:24:25:de:8a:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CF:41:3B:A7:5F:8B:D7:33:7E:DF:4B:05:54:EC:91:75:85:F6:B6
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/4fc7f2786b56237959688bb6538fe9cf2e40470b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.215.225.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b1:bb:29:d5:fa:39:0f:4d:59:4c:55:89:e0:86:4d:1c:c0:
f5:40:be:50:3e:60:8d:e8:68:cc:53:2a:b3:44:9b:f6:da:b5:
01:58:23:4a:71:a5:96:47:fc:d3:57:3b:45:1d:78:a7:6a:8a:
ef:fa:55:12:bf:52:c4:64:5d:84:2f:34:33:6c:d6:49:fa:f0:
af:b2:79:f3:41:e8:8b:9c:66:99:27:43:78:95:c9:1d:52:6c:
82:24:75:06:88:78:0a:10:a3:7a:79:d7:2a:d0:f8:f9:3f:cb:
e0:5d:87:3c:96:54:28:63:b1:a8:d1:97:63:7a:17:90:80:97:
89:a4:21:8c:c7:80:4b:c2:bb:d5:1b:84:5f:73:46:7d:2b:f0:
e9:ef:53:b6:57:63:c9:bf:5f:19:9e:83:a5:83:67:98:a6:43:
3c:87:19:5c:45:2d:5b:c9:3f:7d:cb:fa:f2:15:ed:dc:7c:fb:
bf:db:91:45:55:21:6a:72:24:a1:28:f0:b1:2b:a9:ea:f8:fa:
be:98:25:b4:ba:cc:87:7b:d6:18:5e:f4:97:d2:57:65:55:84:
24:a6:4a:81:92:3b:8f:7d:d1:4d:04:01:d1:47:ee:4c:94:13:
2b:60:1b:a8:bc:d3:c8:db:e1:17:81:ca:84:e9:36:5f:c7:3c:
4a:64:f2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:26 2023 by rpki-client on console-ams.rpki-client.org