Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/4f846a40afd46da5ee0b9863cdfab79ab0fc835f.roa
File: 4f846a40afd46da5ee0b9863cdfab79ab0fc835f.roa (raw, json)
Hash identifier: GFsk1/8HGer/tdOPCNnATWU7U23y2ePEj2FDmNSnmqk=
Subject key identifier: 07:47:B2:CF:31:0F:F2:A6:30:94:5F:E6:FE:E3:D0:DA:B6:1F:92:99
Certificate issuer: /CN=9b0e0f420897114db2d68a02564c7a8a56c71d86
Certificate serial: 286FEC
Authority key identifier: 94:2E:CB:F2:D9:9C:9A:5A:0B:49:3D:A0:37:F9:50:50:9C:29:15:8A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b0e0f420897114db2d68a02564c7a8a56c71d86.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/4f846a40afd46da5ee0b9863cdfab79ab0fc835f.roa
Signing time: Wed 06 Mar 2024 02:33:41 +0000
ROA not before: Wed 06 Mar 2024 02:33:41 +0000
ROA not after: Fri 06 Mar 2026 02:33:41 +0000
asID: 266667
IP address blocks: 181.224.172.0/24 maxlen: 24
181.224.173.0/24 maxlen: 24
181.224.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2650092 (0x286fec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0e0f420897114db2d68a02564c7a8a56c71d86
Validity
Not Before: Mar 6 02:33:41 2024 GMT
Not After : Mar 6 02:33:41 2026 GMT
Subject: CN=4f846a40afd46da5ee0b9863cdfab79ab0fc835f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:cb:15:c7:08:c2:25:ea:24:ee:41:92:6f:
72:89:cf:a5:27:73:31:5a:78:3d:fb:cf:1c:f2:8d:
fd:a5:50:81:4d:23:59:3e:71:29:32:5c:08:19:c6:
38:67:a1:86:23:ed:cb:6c:22:9e:f1:11:21:72:06:
97:e1:36:fc:e8:97:dd:79:24:c0:29:20:af:e0:d3:
73:e2:29:61:fe:39:85:9b:89:cf:df:5e:93:56:c7:
a5:96:8c:df:24:5a:57:ec:12:8c:9b:2f:ad:06:3a:
81:a7:0a:9c:49:6b:e2:99:b4:21:26:7f:67:d6:e7:
45:26:63:1f:41:57:c4:ed:be:6e:a9:09:02:a9:27:
84:3b:9d:b7:46:d9:49:4e:be:a5:0b:e4:dd:43:bb:
ef:e2:b2:42:36:25:38:13:f5:30:37:1d:6a:53:70:
d7:c1:1e:29:ba:33:4f:29:3a:da:b6:dc:a8:bf:8a:
bc:e5:21:2f:b3:f0:b6:74:21:ae:93:f5:36:b2:c7:
48:0b:db:77:ff:15:a8:54:f6:6d:70:ea:70:1a:85:
9c:b3:a2:cf:1c:9b:08:fd:1a:4d:5c:3b:cf:97:80:
ab:de:89:6f:60:89:2b:6b:73:72:e6:36:0a:e6:f7:
8f:70:3d:78:71:5f:73:0b:5f:dc:9d:a1:8b:86:f7:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:47:B2:CF:31:0F:F2:A6:30:94:5F:E6:FE:E3:D0:DA:B6:1F:92:99
X509v3 Authority Key Identifier:
keyid:94:2E:CB:F2:D9:9C:9A:5A:0B:49:3D:A0:37:F9:50:50:9C:29:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b0e0f420897114db2d68a02564c7a8a56c71d86.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/4f846a40afd46da5ee0b9863cdfab79ab0fc835f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/372a529f-7637-44aa-9d36-a2950fb51633/9b0e0f420897114db2d68a02564c7a8a56c71d86.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.172.0/23
181.224.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:f7:ac:dc:02:02:d0:02:0d:e9:72:cf:17:3f:fd:13:b4:87:
0b:26:48:0e:85:34:1d:ed:a9:85:78:cd:11:0a:50:b6:6b:43:
0e:78:13:e9:84:4f:67:ca:13:3d:7a:26:26:36:9d:3c:df:b3:
cc:c9:47:4e:b9:b1:8e:90:6f:6d:84:cb:2b:e2:52:78:2d:fe:
03:81:46:8a:22:73:bc:bd:ce:08:9f:96:4a:9a:65:36:4e:59:
36:8e:94:1c:c2:c0:cd:ba:99:2e:5c:83:a1:be:a4:41:f9:bc:
c9:eb:e6:5e:c4:ab:0b:46:f8:73:24:53:3e:46:00:8e:d7:7f:
e0:eb:ee:01:ca:42:01:60:88:22:2a:bd:2a:c0:40:4b:c6:2d:
fb:c3:fb:dd:f4:14:3c:72:19:7a:aa:42:a2:65:5e:3c:4b:78:
3e:22:87:0e:4b:a0:62:14:b8:48:1c:a4:be:17:51:62:41:98:
7a:2b:8e:12:30:25:ad:63:50:85:65:70:b2:5f:a4:ab:6a:8d:
59:3c:78:27:45:40:f1:b7:ec:53:9c:f4:ad:8c:fc:72:70:f5:
40:d7:2a:1a:a9:4b:df:88:89:e8:a4:0e:de:3f:44:bf:af:c8:
22:8c:7e:39:f1:4c:1b:fc:fc:a7:41:74:c1:b2:61:a1:5c:25:
ee:29:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:19 2024 by rpki-client on console-ams.rpki-client.org