Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a0942c19a451840b140195c11be10fc38057ec74.roa
File: a0942c19a451840b140195c11be10fc38057ec74.roa (raw, json)
Hash identifier: 99BWLdOpfZIDbiGfHt8ArfcHdkI5yRFEz63NOUYuG0Y=
Subject key identifier: 54:93:0A:9D:7D:C1:9B:AE:10:8E:84:90:00:0A:2C:1F:68:2E:04:78
Certificate issuer: /CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Certificate serial: 2DB1B9
Authority key identifier: C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a0942c19a451840b140195c11be10fc38057ec74.roa
Signing time: Thu 07 Dec 2023 12:42:21 +0000
ROA not before: Thu 07 Dec 2023 12:41:57 +0000
ROA not after: Thu 07 Dec 2028 12:41:57 +0000
asID: 52436
IP address blocks: 181.10.236.0/23 maxlen: 24
181.13.56.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2994617 (0x2db1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
Validity
Not Before: Dec 7 12:41:57 2023 GMT
Not After : Dec 7 12:41:57 2028 GMT
Subject: CN=a0942c19a451840b140195c11be10fc38057ec74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:20:94:3b:da:27:a7:05:07:90:33:d7:df:
9b:66:16:5b:75:b3:01:cc:5f:1c:fa:e7:5e:b6:ab:
54:41:51:30:f5:48:90:18:32:75:b2:98:7d:05:18:
f5:6f:ce:97:84:16:a0:9d:65:4f:df:31:e7:58:eb:
59:85:3e:ce:a5:ae:2b:4c:ba:ad:bc:45:9b:07:dd:
15:b8:c2:a9:73:8d:12:54:7e:0c:8f:da:c2:d8:7a:
77:37:b4:b2:ea:61:b3:1d:f4:3c:14:35:76:5c:73:
07:f5:2f:be:ca:8e:34:6b:1f:bc:68:2f:18:50:6e:
ac:99:69:be:82:3f:b3:99:65:a0:9b:d9:a0:71:6d:
4a:e0:c3:91:1b:56:22:ce:b9:05:07:1f:19:17:c8:
0c:87:96:7b:fb:65:fa:5b:ae:96:17:6f:80:3a:4e:
1e:fa:48:5d:4a:fe:d3:e6:e1:6b:49:98:54:1c:0b:
2e:66:23:f7:e4:8e:95:ca:ce:87:7a:e9:5c:a8:8d:
66:c6:1a:da:68:81:1c:e0:61:08:50:7a:f3:a9:f7:
7f:7f:18:6a:b1:89:66:fd:69:e0:bb:ec:2f:5f:c8:
7e:80:48:31:3e:90:96:62:a3:39:8a:5c:86:28:68:
38:51:0b:02:5f:b8:89:b1:1a:41:39:3b:33:ee:8c:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:93:0A:9D:7D:C1:9B:AE:10:8E:84:90:00:0A:2C:1F:68:2E:04:78
X509v3 Authority Key Identifier:
keyid:C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/a0942c19a451840b140195c11be10fc38057ec74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.10.236.0/23
181.13.56.0/23
Signature Algorithm: sha256WithRSAEncryption
05:87:14:5f:82:81:12:ce:ca:b6:6e:3e:34:0d:e0:87:6b:70:
04:62:0d:f7:9e:16:71:83:4b:82:34:0a:39:f6:65:eb:cd:67:
39:d3:41:c8:6c:f0:ac:e0:8c:c8:04:04:3c:5a:bb:1b:46:89:
6b:0b:87:7d:69:38:37:83:f5:49:f0:a3:47:5d:8f:b2:d0:31:
31:c0:a9:9f:2a:98:ba:cd:1e:cc:4a:8a:4c:4b:ea:28:30:85:
db:c6:e9:32:cf:f7:31:a5:51:7e:09:3c:27:f5:fa:75:37:75:
ec:b5:3b:ff:ef:51:aa:2f:0b:ac:c5:d2:6d:a8:7e:c1:9c:47:
5b:93:24:b3:b2:a9:b0:2b:45:dd:e0:60:a4:fc:62:06:0d:2a:
27:5b:c4:21:4b:c4:14:34:58:ad:d3:bb:df:89:53:38:68:13:
a7:34:b0:7e:73:5d:c4:a2:04:cf:34:b6:ac:38:20:c4:96:73:
e5:bc:2b:bc:93:97:ef:30:43:fb:58:61:3f:8c:53:1c:0a:f4:
0f:54:0f:78:6a:a0:eb:b9:2b:86:91:e8:00:59:98:cc:a4:b0:
94:21:35:99:72:78:4c:b8:8b:5d:ad:f8:8b:28:04:90:50:28:
20:34:72:95:ee:3f:b4:22:66:7f:4c:9f:9b:8e:a3:4c:25:88:
73:d8:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:43 2024 by rpki-client on console-fra.rpki-client.org