Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e0c627d3a70238c50e1bcbb63b7946aebf0d5571.roa
File: e0c627d3a70238c50e1bcbb63b7946aebf0d5571.roa (raw, json)
Hash identifier: MA1yULGqhPmO0+pI6V2poUG5vRZOVw2cFWje0klffm0=
Subject key identifier: 8C:45:E0:25:37:B2:37:2D:E1:9B:61:61:4F:B6:66:A8:05:DD:A4:EA
Certificate issuer: /CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Certificate serial: 2EB9BC
Authority key identifier: FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e0c627d3a70238c50e1bcbb63b7946aebf0d5571.roa
Signing time: Thu 07 Dec 2023 15:25:37 +0000
ROA not before: Thu 07 Dec 2023 15:25:37 +0000
ROA not after: Sun 07 Dec 2025 15:25:37 +0000
asID: 7303
IP address blocks: 181.2.0.0/15 maxlen: 15
181.4.0.0/14 maxlen: 15
181.80.0.0/14 maxlen: 15
181.86.0.0/15 maxlen: 15
181.88.0.0/15 maxlen: 15
181.92.0.0/15 maxlen: 15
181.94.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3062204 (0x2eb9bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
Validity
Not Before: Dec 7 15:25:37 2023 GMT
Not After : Dec 7 15:25:37 2025 GMT
Subject: CN=e0c627d3a70238c50e1bcbb63b7946aebf0d5571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f1:14:be:0e:38:79:6f:a8:93:26:eb:a0:87:
b3:ae:05:1b:68:12:9f:9d:34:de:f6:58:ce:c4:61:
59:71:2d:36:7f:17:39:ce:cb:f5:23:e2:e3:4a:4a:
94:cd:46:53:be:65:e1:30:87:2f:0a:73:d0:17:b2:
f8:9a:ee:40:78:d9:e6:85:47:b4:4f:98:18:fe:f0:
32:f4:c4:34:e6:a3:48:31:f4:b0:de:f5:42:d8:92:
77:f8:e9:bd:f4:17:a5:12:ca:ed:d2:0d:b9:dc:1f:
80:5d:25:a4:49:26:8d:98:c2:7d:fc:b1:45:99:7a:
7a:60:8c:c0:a9:64:b0:44:cf:2f:18:9f:51:50:90:
7d:fc:ba:ac:94:ec:3c:0a:ca:8a:21:fb:c5:82:2b:
bc:9e:3f:9c:2a:e8:de:eb:62:db:8d:85:d4:28:d9:
f2:88:82:96:cc:97:aa:60:62:db:ac:af:d5:f9:a0:
88:44:a2:ad:a0:7b:65:a2:ff:85:15:b4:97:9d:75:
14:7d:67:3e:b1:a3:81:54:48:43:e3:1d:38:8f:c4:
a7:9a:01:11:99:a7:13:48:c3:47:eb:9b:a2:f9:d2:
f4:7b:da:d0:12:fb:2e:62:42:ce:43:c0:c2:f2:29:
d1:c5:f5:e5:6a:5d:2c:94:ed:31:39:fb:20:9b:1e:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:45:E0:25:37:B2:37:2D:E1:9B:61:61:4F:B6:66:A8:05:DD:A4:EA
X509v3 Authority Key Identifier:
keyid:FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/e0c627d3a70238c50e1bcbb63b7946aebf0d5571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.2.0.0-181.7.255.255
181.80.0.0/14
181.86.0.0-181.89.255.255
181.92.0.0/15
181.94.100.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a2:65:4f:2e:d6:ea:f4:33:9c:83:ca:9c:83:10:a7:86:91:
e7:ad:80:2f:a5:35:1b:37:af:3b:c8:a2:9d:fb:68:9f:da:2e:
ed:fc:cd:b4:bf:73:ae:74:a7:56:b0:41:54:3f:48:5d:8e:3e:
36:c4:cd:35:30:7b:e2:af:73:47:31:64:2f:9c:f7:6d:ad:6c:
a6:2c:3c:65:3d:e8:6f:a5:39:0f:1c:28:ab:39:55:cb:6b:9a:
46:bc:c5:e4:b1:13:27:5b:b5:31:26:63:4e:72:04:d4:1e:25:
f9:6c:23:bf:e6:2f:80:6d:f1:e8:ab:bc:e1:25:34:16:53:4f:
62:09:50:4b:a9:ca:49:fc:21:23:9c:97:41:3a:c9:bf:b2:89:
05:9c:a0:32:90:8a:ed:0d:0a:e1:eb:52:d4:07:81:bc:64:8a:
12:d1:7d:19:c9:e6:7c:f3:6b:dd:3d:9f:f2:88:9f:3f:6c:bc:
13:63:b5:f4:de:00:80:73:c8:3d:92:9f:73:92:bb:65:eb:39:
54:98:4a:c3:98:37:12:40:8b:33:3c:f9:63:c4:b9:c0:53:df:
3c:9c:9e:07:b6:3c:62:49:0a:7d:ea:9a:78:0a:29:fa:51:e5:
87:db:24:0f:e5:fa:5b:c7:a1:c1:de:21:ab:f9:4c:82:22:75:
ce:50:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:33 2024 by rpki-client on console-ams.rpki-client.org