Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/d1e7a5dc8d6944dc5d8a77e930989bd82b8500d1.roa
File: d1e7a5dc8d6944dc5d8a77e930989bd82b8500d1.roa (raw, json)
Hash identifier: 4wtCs+CzQce0RG/ADnbloAbfj5Jm6avqHgymyV15Jh4=
Subject key identifier: B2:38:0A:9A:8D:CB:09:C4:4D:48:B1:59:E9:17:28:57:6F:6F:9B:5C
Certificate issuer: /CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
Certificate serial: 12689B
Authority key identifier: B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/d1e7a5dc8d6944dc5d8a77e930989bd82b8500d1.roa
Signing time: Thu 21 Dec 2023 07:30:01 +0000
ROA not before: Thu 21 Dec 2023 07:30:01 +0000
ROA not after: Sat 20 Dec 2025 07:30:01 +0000
asID: 271855
IP address blocks: 181.191.224.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1206427 (0x12689b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
Validity
Not Before: Dec 21 07:30:01 2023 GMT
Not After : Dec 20 07:30:01 2025 GMT
Subject: CN=d1e7a5dc8d6944dc5d8a77e930989bd82b8500d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:a5:87:ad:3b:cd:f8:90:a3:1c:b1:df:ef:
1f:38:34:8d:23:e2:01:76:c5:46:ad:14:69:3d:9a:
3d:1e:cc:0b:d4:23:58:7d:3d:06:a8:84:bb:7b:94:
a2:42:5a:e3:e6:f3:24:a3:33:59:c9:6e:15:35:30:
5d:dd:7a:16:4a:f7:45:47:aa:11:aa:4c:69:c5:a7:
be:9e:11:17:2b:85:8b:0c:f1:1c:49:96:99:0f:ea:
60:dc:22:cf:07:3c:54:d2:01:1f:ee:25:cd:65:e5:
ec:9d:22:71:af:25:47:6e:83:09:85:18:9e:59:81:
36:fc:1c:22:bb:88:39:0b:c3:4d:30:3f:74:a6:e6:
3a:0a:89:3d:6c:44:9d:db:3a:18:7c:47:1a:8f:04:
13:a3:7e:b0:b8:dc:01:e3:86:95:8f:05:dc:af:51:
a8:5c:4e:7b:39:3e:dd:53:2b:27:a7:bb:e3:92:9f:
88:d9:44:79:49:15:f5:32:83:11:08:ad:73:39:f5:
fd:d3:45:40:cb:18:0c:41:eb:2b:10:73:12:d2:e2:
09:7e:7d:cf:3e:32:f0:68:49:1a:1e:ec:88:b6:73:
80:68:ae:ee:c7:ce:7a:8a:86:9d:55:66:fb:4b:54:
64:a4:51:43:44:89:1b:e6:e4:0f:36:5d:c5:35:7a:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:38:0A:9A:8D:CB:09:C4:4D:48:B1:59:E9:17:28:57:6F:6F:9B:5C
X509v3 Authority Key Identifier:
keyid:B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/d1e7a5dc8d6944dc5d8a77e930989bd82b8500d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.224.0/22
Signature Algorithm: sha256WithRSAEncryption
46:fa:26:f1:49:2a:99:8f:92:a0:fa:db:13:db:66:f1:c3:a1:
d7:43:bf:a6:9b:4c:59:57:f0:d9:ab:5c:f2:1d:d3:ca:43:51:
f4:42:a5:69:0f:74:8e:f9:26:b0:2c:5b:7d:b1:56:59:11:47:
5a:59:e6:fe:ea:4f:95:68:c2:69:09:27:a0:ca:99:92:62:3b:
ea:6f:e2:40:89:e8:9d:89:b8:f6:c9:82:19:7a:c6:9b:0f:57:
99:6a:dd:0e:26:d2:b9:e7:23:55:a1:79:b9:35:1b:65:dc:f5:
41:66:d9:0c:b0:c8:e4:ef:6c:d6:b9:66:79:80:cb:19:0a:9a:
0b:3e:d7:bf:55:b6:47:b8:b0:98:00:b8:e7:80:b4:51:aa:fe:
fb:c7:56:67:19:01:97:4f:02:90:23:ae:13:c5:88:91:7b:b0:
8b:21:db:ac:c0:6e:44:e7:6e:43:fd:d2:bd:23:74:76:72:44:
d5:57:f6:cc:1a:ae:84:75:c0:cf:6d:58:cf:c8:dd:8a:67:3e:
5d:61:e9:d1:59:86:5d:38:be:01:25:49:73:d1:2d:cd:3d:d2:
a3:cb:7d:1b:ee:6c:b9:8a:c0:a8:87:09:ff:8a:2a:43:6e:8a:
f9:c4:4f:bf:9e:08:d8:c1:8b:20:b1:0e:99:98:5e:54:cc:a5:
4f:0a:b2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:32 2024 by rpki-client on console-ams.rpki-client.org