Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5d43ff0a38cb0fb85430cb39cec50eb10ea10ee2.roa
File: 5d43ff0a38cb0fb85430cb39cec50eb10ea10ee2.roa (raw, json)
Hash identifier: AL9P62wAuBaGjrhK7WUeizyNlDMbm64riv3cdqUAFkg=
Subject key identifier: C4:C1:90:FE:FB:14:1E:F7:DE:E2:C3:DF:BA:22:50:33:6D:C6:46:62
Certificate issuer: /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial: 1544EC
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5d43ff0a38cb0fb85430cb39cec50eb10ea10ee2.roa
Signing time: Sun 30 Jan 2022 13:16:46 +0000
ROA not before: Sun 30 Jan 2022 03:00:00 +0000
ROA not after: Tue 30 Jan 2024 03:00:00 +0000
asID: 30823
IP address blocks: 181.214.240.0/24 maxlen: 24
191.101.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393900 (0x1544ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Validity
Not Before: Jan 30 03:00:00 2022 GMT
Not After : Jan 30 03:00:00 2024 GMT
Subject: CN=5d43ff0a38cb0fb85430cb39cec50eb10ea10ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:8d:17:b7:1b:b4:4c:fd:01:9f:e2:65:63:
02:d3:b8:c5:8d:f4:2d:a6:f4:06:90:67:2c:61:20:
77:03:f5:25:b2:56:8c:45:84:97:87:a0:14:f0:18:
03:0f:d8:86:08:2c:46:ac:6f:54:b7:2c:cd:e0:ab:
93:aa:57:42:fa:15:41:3c:57:7a:4b:e7:ff:87:99:
83:62:f9:23:ed:2d:3d:9b:04:9d:fb:92:39:2f:ee:
95:7d:15:8a:49:bd:3f:57:94:97:7c:27:68:2d:48:
ca:f0:e7:b0:0f:96:47:33:bf:22:e9:90:c6:34:e2:
62:19:97:7b:c6:fe:d9:81:f0:9c:d2:3b:14:f2:4a:
74:2b:16:29:43:91:ba:cd:7a:2d:bf:5b:0e:33:86:
2e:e8:9b:a0:b6:04:2d:2e:53:72:c0:cd:78:b8:be:
5c:f7:f7:4a:7d:2a:8d:65:04:c1:5c:de:fc:d1:ce:
20:a3:ca:8e:40:82:29:aa:64:7e:20:a8:dd:77:a4:
d2:b1:b3:3e:fb:b3:d3:e3:89:bb:11:e0:d9:a2:3e:
9c:f2:19:65:61:cc:b7:6c:34:77:e4:ee:e3:4f:59:
d5:ec:68:60:e6:89:5f:5d:ca:e5:56:93:c1:49:9c:
1e:1e:50:e2:0d:12:a3:77:c4:c9:ba:ce:0c:d6:ec:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C1:90:FE:FB:14:1E:F7:DE:E2:C3:DF:BA:22:50:33:6D:C6:46:62
X509v3 Authority Key Identifier:
keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/5d43ff0a38cb0fb85430cb39cec50eb10ea10ee2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.214.240.0/24
191.101.206.0/24
Signature Algorithm: sha256WithRSAEncryption
49:04:23:17:a4:f4:f2:cb:53:e0:c6:ab:ca:da:c1:3b:d5:90:
f7:f3:b6:14:c1:d5:71:8e:c4:d0:95:70:f8:6d:1e:59:63:91:
f8:2b:33:3e:75:9f:27:b1:6a:5f:ff:50:29:df:80:56:83:e4:
19:30:6c:3f:74:dc:5d:25:58:5b:d4:a0:cd:64:f2:76:b5:59:
5e:91:04:62:95:dc:f3:04:bd:ab:9b:49:e1:7c:36:eb:73:9d:
b1:e7:35:7d:7b:b6:b6:17:e8:96:28:ea:20:8a:d0:d4:c0:1d:
c7:b1:a4:6a:66:a0:9f:de:c7:4e:73:cf:92:22:b3:b4:29:71:
c1:8a:63:3a:65:53:5d:7c:02:a1:62:26:c5:d3:58:88:86:da:
06:e7:d4:6a:6f:9f:58:e9:21:dd:0b:8b:c5:f0:57:c8:9f:dd:
23:29:ec:8e:e5:62:8f:b7:48:8d:76:b4:76:df:78:3a:cf:02:
54:30:1b:8d:a6:32:ad:c5:30:da:69:ca:e4:c7:5c:2c:d2:69:
73:6a:63:32:34:01:4f:4f:bc:ae:4b:bb:42:87:c0:26:c6:25:
fa:ab:67:71:82:b6:98:e5:f5:ef:75:66:28:14:01:d1:35:3e:
34:42:4e:e8:39:c0:02:6e:94:ec:c5:fd:a6:c7:d3:39:fe:06:
c4:98:d4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:23 2024 by rpki-client on console-fra.rpki-client.org