Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/9e33c752bc289048aaf46de12c7e7e63bc94e1ff.roa
File: 9e33c752bc289048aaf46de12c7e7e63bc94e1ff.roa (raw, json)
Hash identifier: U0MLNedPYp5MhY/e//8cPl46JiKj84AWYCoOS2IHt9Y=
Subject key identifier: 7F:63:C4:0A:87:3F:E2:7B:09:06:77:67:BD:2A:60:CF:BA:CD:A5:3E
Certificate issuer: /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial: 299218
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/9e33c752bc289048aaf46de12c7e7e63bc94e1ff.roa
Signing time: Tue 06 Feb 2024 15:36:59 +0000
ROA not before: Tue 06 Feb 2024 15:36:47 +0000
ROA not after: Tue 06 Feb 2029 15:36:47 +0000
asID: 19114
IP address blocks: 181.188.192.0/18 maxlen: 18
181.188.192.0/20 maxlen: 20
181.188.192.0/24 maxlen: 24
181.188.200.0/24 maxlen: 24
181.188.201.0/24 maxlen: 24
181.188.224.0/24 maxlen: 24
181.188.232.0/24 maxlen: 24
181.188.240.0/24 maxlen: 24
181.188.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2724376 (0x299218)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Validity
Not Before: Feb 6 15:36:47 2024 GMT
Not After : Feb 6 15:36:47 2029 GMT
Subject: CN=9e33c752bc289048aaf46de12c7e7e63bc94e1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e7:d3:b0:cf:9a:de:95:7e:0f:7d:ec:91:d3:
ba:ec:4e:f1:20:a8:d9:c6:ca:76:c0:36:f3:93:1c:
39:fb:04:b1:08:6e:50:0a:33:28:a7:15:61:ba:21:
43:e5:98:48:8a:7d:6b:9b:a7:8d:58:42:d5:21:d0:
06:97:b8:7c:75:a0:2a:32:66:d5:66:e2:86:84:8c:
66:62:3b:a2:0f:52:1e:cd:d6:44:76:81:2e:f9:0d:
d1:84:3e:85:c6:10:1d:93:5d:3f:75:ff:d2:9f:c5:
5d:8d:40:b2:83:5b:4b:d5:63:74:ca:a2:0c:e7:22:
b4:6a:db:f6:c8:be:64:f9:39:74:7f:47:e2:df:77:
f2:aa:0e:49:1f:34:ea:34:7a:0d:3b:0b:0d:31:88:
99:93:5f:09:6a:f1:b9:99:b6:f2:c4:6f:ee:79:22:
42:ba:c3:e9:d4:a9:9f:81:7d:42:6c:d2:d9:f9:8e:
a9:fd:7d:b8:60:ae:fa:70:fb:ab:52:b4:a0:dd:17:
d5:96:dc:db:d7:a4:c6:4b:58:01:f9:0b:3d:29:5c:
39:ec:99:33:fc:0b:d2:5e:67:24:d5:f3:7f:04:5c:
65:14:5d:e9:87:ce:1f:1e:87:55:c4:cf:6d:ec:c5:
e6:62:1c:8d:de:e6:6e:a9:47:d2:6a:7e:2a:5b:53:
c2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:63:C4:0A:87:3F:E2:7B:09:06:77:67:BD:2A:60:CF:BA:CD:A5:3E
X509v3 Authority Key Identifier:
keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/9e33c752bc289048aaf46de12c7e7e63bc94e1ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.188.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:ee:59:1b:5f:64:ca:72:a3:45:06:99:f9:f1:ab:fa:b3:5a:
f1:ad:82:73:7f:7f:c3:77:af:4e:fb:34:9a:6a:30:4d:11:a4:
c1:ba:d7:50:f0:ba:4f:41:de:ed:e3:36:25:c5:99:ac:99:90:
c6:a9:2f:09:ad:32:7a:4a:0b:7a:a5:f8:8f:6a:2e:97:1a:ed:
2a:9a:84:9d:d7:43:39:ed:52:67:6c:ca:3d:9b:f1:a5:58:23:
da:4c:bb:0c:95:2e:60:11:10:61:a0:3b:28:b0:ef:bb:64:47:
8b:4f:c4:71:3f:4d:e8:10:e8:61:97:87:b3:88:27:76:b2:b9:
33:a7:73:f5:fd:20:02:6f:49:13:14:31:65:33:43:ef:c9:2c:
97:75:31:f2:d4:b3:d9:e7:b3:8d:7c:a7:21:32:ff:53:81:dc:
92:6d:cb:7b:98:cf:d0:78:cf:c6:97:8c:43:0e:cf:04:ec:29:
a6:35:22:52:56:d4:77:9a:1e:e1:b7:e3:55:2f:49:d5:ce:91:
55:7a:14:ce:4c:80:4a:d4:1f:f4:08:af:a5:76:1a:bf:d9:38:
28:21:6c:56:e8:18:aa:43:4c:b1:63:2c:76:79:6c:d2:ef:32:
60:27:9e:78:f1:05:38:5f:a2:d7:9e:fa:86:b0:a2:a5:cf:f7:
e0:d7:3b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org