Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/789c4f35d70f124c0ece1f99bfdb0d570d807f8b.roa
File: 789c4f35d70f124c0ece1f99bfdb0d570d807f8b.roa (raw, json)
Hash identifier: BndGEqEVGruTnF1WlloboL1FQeSOD8RCHWZXvXid4N0=
Subject key identifier: CD:7A:A0:C0:07:5F:39:56:0E:59:D2:C8:B3:92:35:0C:61:5A:8A:85
Certificate issuer: /CN=33cc246e2aa61ac0c03176ebc5d03e7f4767c548
Certificate serial: AE93
Authority key identifier: FE:DC:BD:21:24:0F:79:DC:18:36:E0:12:8F:C4:C1:D1:7B:3C:57:1B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/789c4f35d70f124c0ece1f99bfdb0d570d807f8b.roa
Signing time: Mon 24 Apr 2023 16:55:59 +0000
ROA not before: Sun 23 Apr 2023 16:55:59 +0000
ROA not after: Thu 24 Apr 2025 16:55:59 +0000
asID: 272973
IP address blocks: 181.224.220.0/24 maxlen: 24
181.224.221.0/24 maxlen: 24
181.233.152.0/24 maxlen: 24
181.233.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44691 (0xae93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33cc246e2aa61ac0c03176ebc5d03e7f4767c548
Validity
Not Before: Apr 23 16:55:59 2023 GMT
Not After : Apr 24 16:55:59 2025 GMT
Subject: CN=789c4f35d70f124c0ece1f99bfdb0d570d807f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:c4:4d:a1:a5:69:9c:9c:e7:e3:d3:c8:49:
1d:59:cc:94:66:e5:0c:b4:ef:8d:98:02:9a:ec:db:
42:2a:cc:12:0d:49:fa:2b:57:69:3a:90:9e:bd:52:
63:a0:f6:3d:f0:1e:04:e7:04:3c:b3:05:f4:8e:72:
7a:00:33:23:e9:60:36:8f:8d:b1:70:82:85:8b:6f:
cb:a7:47:71:73:55:44:6a:44:64:4d:66:75:0b:4c:
69:30:93:f7:26:7c:90:bf:79:4f:b0:38:5a:0b:4a:
31:3c:4a:33:1e:f4:76:00:fb:65:23:f9:51:bc:90:
68:78:c6:c5:d7:12:00:24:39:c5:1e:a9:6b:f0:b4:
23:f0:38:92:a3:48:c9:eb:35:c7:2a:bb:b6:39:31:
83:85:c1:b0:6f:09:d3:40:21:bc:9b:9d:1c:d3:42:
16:8c:5b:b8:fb:36:b3:eb:59:ce:5a:69:d7:c0:fd:
59:69:65:1b:06:a5:ce:29:a0:05:40:e9:52:41:3e:
48:e7:52:01:32:ea:d6:3c:55:56:e8:4f:d0:b0:6f:
06:45:2e:96:82:44:b0:6c:87:76:46:f9:b1:f1:e9:
bd:36:59:db:cc:00:5d:c8:6f:3f:b5:16:02:12:1b:
1e:05:22:59:1b:d4:c5:e7:c5:6f:ad:2a:13:68:62:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:A0:C0:07:5F:39:56:0E:59:D2:C8:B3:92:35:0C:61:5A:8A:85
X509v3 Authority Key Identifier:
keyid:FE:DC:BD:21:24:0F:79:DC:18:36:E0:12:8F:C4:C1:D1:7B:3C:57:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/789c4f35d70f124c0ece1f99bfdb0d570d807f8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.220.0/23
181.233.152.0/23
Signature Algorithm: sha256WithRSAEncryption
42:9f:1d:d0:b8:75:da:a9:8e:60:0f:4f:81:20:57:73:c2:dc:
22:3e:4d:37:be:c4:81:2c:79:1f:de:53:ea:54:c8:11:a4:bd:
53:7a:ea:c1:df:70:af:38:20:74:96:7a:7f:73:28:c1:95:ae:
6a:13:56:bd:d5:8f:2a:34:12:f8:b6:47:a1:88:2f:96:a0:4b:
d1:80:09:04:ce:0d:5d:e1:ca:fb:76:e8:03:eb:0b:f3:6b:c7:
c5:0b:3e:93:2a:ec:a3:89:09:79:02:4b:99:87:60:b6:29:67:
fd:22:db:2d:dc:ed:e9:bf:72:59:2a:6f:eb:4e:62:2e:f3:1b:
24:0e:b5:a1:61:5e:c8:3f:ea:c5:83:e0:0a:6f:ab:58:63:14:
01:97:71:a2:a8:23:7b:23:d0:e4:0a:00:6c:cf:00:c6:1a:5a:
bf:fa:e5:74:fb:68:82:47:24:4e:f5:5b:99:3f:6e:9b:37:e3:
25:2a:79:12:f6:3f:94:16:df:08:ff:19:08:d6:20:f1:b4:64:
ed:28:33:68:1e:5d:d8:59:dd:88:7e:1f:8a:b1:3a:ec:73:23:
5e:12:39:ef:d4:a5:fe:a5:97:98:1d:f3:3e:77:0b:df:12:85:
b6:52:2c:78:42:d5:28:41:07:47:0b:57:e8:e2:10:32:b4:4f:
49:83:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org