Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/177dacedc9be7ac037844f0671e027992db1a2e7.roa
File: 177dacedc9be7ac037844f0671e027992db1a2e7.roa (raw, json)
Hash identifier: GXDve2noHKtb5XQE2KA4MA3cnKFd9Yd94SM3gtEn0TM=
Subject key identifier: 25:59:7F:1B:41:F5:5A:FA:A5:5C:AF:BF:23:D5:CD:17:96:1C:C4:2F
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2E03D4
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/177dacedc9be7ac037844f0671e027992db1a2e7.roa
Signing time: Thu 07 Dec 2023 12:43:19 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 271984
IP address blocks: 181.13.217.0/24 maxlen: 24
186.108.88.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3015636 (0x2e03d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=177dacedc9be7ac037844f0671e027992db1a2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:f6:c7:7c:85:57:db:96:a0:5b:e9:8c:cc:
2b:a6:32:7e:3d:84:98:f1:a1:b4:c6:03:d7:73:fa:
05:df:f8:7c:0f:eb:c3:da:55:5e:0b:8c:56:c4:69:
0a:d2:c7:25:af:84:5d:67:b4:51:f8:e2:ff:39:78:
25:44:4b:77:a1:d9:a4:35:aa:9d:72:be:26:9d:41:
70:f8:df:ea:6e:4e:8b:fa:4e:84:df:b5:c4:59:c5:
a6:24:41:b0:2a:09:60:a8:09:0c:ac:91:a7:b4:1d:
a5:79:1e:b8:d4:6b:fb:d1:c5:e3:44:e5:6a:4a:e5:
5c:90:17:d0:aa:a5:0b:7a:7b:45:ec:d1:6b:5b:13:
dc:0d:1b:b8:39:3a:a1:f4:8b:4d:48:04:4f:1a:93:
56:e9:37:3a:3d:a1:f6:89:ad:93:fa:64:20:5b:81:
97:f7:94:ac:ac:eb:06:7a:75:4c:e9:05:48:5c:92:
db:f4:58:ea:66:4d:0c:76:ad:2c:21:8e:66:eb:59:
4f:82:09:5a:7e:ac:3d:03:cc:06:fc:5f:5b:81:92:
c8:73:55:10:0d:01:70:e7:da:87:39:20:d8:00:b0:
88:f4:8e:9f:87:61:0b:bb:04:c4:22:23:b3:fd:c0:
d1:7f:aa:27:59:a2:8c:4e:29:ea:b5:7a:7e:4c:54:
d1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:59:7F:1B:41:F5:5A:FA:A5:5C:AF:BF:23:D5:CD:17:96:1C:C4:2F
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/177dacedc9be7ac037844f0671e027992db1a2e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.13.217.0/24
186.108.88.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:af:e9:e8:4c:43:5c:a3:84:fe:f2:e7:f3:69:af:91:7b:9b:
aa:54:43:2b:aa:2f:33:9e:20:1f:d5:eb:4f:46:d4:5d:c6:09:
72:31:c7:5f:fb:57:9a:84:56:5f:93:58:16:88:71:00:5c:79:
ba:39:b0:c6:3d:c1:0f:54:79:7e:8b:0c:c7:35:4c:5c:b4:53:
c8:70:b3:f6:a5:2b:e4:c0:0c:03:80:17:11:7e:4a:cb:06:47:
41:88:a9:6f:5e:22:66:95:d1:68:d8:34:59:c8:ef:f2:f9:6e:
e1:03:bf:41:0b:99:75:81:36:3a:45:c4:6a:1e:d7:a6:17:6c:
6c:6f:a5:b0:8a:2b:91:1e:63:95:23:7b:8d:cf:67:bb:5f:74:
e8:ae:5d:6a:50:f9:a7:e3:dc:e8:f6:a2:a0:fe:fa:b0:44:97:
58:bc:74:ec:a2:06:c2:cf:8a:f3:d4:47:2f:08:53:13:75:d2:
4b:ae:48:b9:87:ad:47:a0:a8:3d:64:16:c0:e2:87:68:af:e7:
70:ab:b7:0d:29:e7:f4:55:e0:cc:88:d3:ec:82:57:1e:cf:e7:
c8:c4:a4:79:1c:8b:65:9e:ed:86:db:80:e7:17:bd:43:9b:b5:
49:6e:13:d1:52:dc:0e:88:6e:b8:53:cb:ab:fa:b9:79:e1:d5:
eb:3e:2e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:46:15 2023 by rpki-client on console-fra.rpki-client.org