Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/a8604a95d34186e9ad2f2a7054832e86d5d49113.roa
File: a8604a95d34186e9ad2f2a7054832e86d5d49113.roa (raw, json)
Hash identifier: MZFdoZfg0mWzuC+IMW0ZPzLgnCc9CW3nn/cepUU03Rk=
Subject key identifier: 14:8D:43:4B:D0:7C:C4:9A:8D:2F:0A:D6:12:32:C1:35:9D:68:98:C9
Certificate issuer: /CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Certificate serial: 29BC14
Authority key identifier: 10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/a8604a95d34186e9ad2f2a7054832e86d5d49113.roa
Signing time: Tue 06 Feb 2024 15:37:12 +0000
ROA not before: Tue 06 Feb 2024 15:36:47 +0000
ROA not after: Tue 06 Feb 2029 15:36:47 +0000
asID: 28097
IP address blocks: 181.188.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2735124 (0x29bc14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a1dd4035b8d29ba7566c64529634ff64783a4f
Validity
Not Before: Feb 6 15:36:47 2024 GMT
Not After : Feb 6 15:36:47 2029 GMT
Subject: CN=a8604a95d34186e9ad2f2a7054832e86d5d49113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b4:81:51:40:38:0e:5d:be:89:df:b6:6c:06:
d8:9c:75:63:07:ef:66:12:3d:86:d3:fc:93:c3:19:
ff:e2:30:ed:c3:22:20:3e:60:0b:6a:e5:c6:1a:08:
9f:dc:77:7a:65:0c:59:5a:39:eb:05:8f:bb:4a:d6:
48:f1:22:65:86:2d:a4:5c:e9:f2:7b:91:dc:e2:df:
ab:92:3f:a4:73:b2:92:ae:eb:25:8e:67:73:8f:94:
99:76:9b:23:78:70:39:39:b6:9b:60:22:91:7a:53:
88:7e:6f:e6:be:de:89:54:8e:f7:42:c6:ba:58:e5:
06:b5:3b:3e:27:87:91:0d:ce:35:36:3e:72:69:54:
0c:dd:eb:de:33:d3:4b:f5:55:24:d4:9d:c3:bb:77:
03:36:b8:e5:43:0c:5b:86:58:c1:10:cf:59:d9:8c:
54:08:b4:33:32:a5:95:f4:67:93:3a:90:6a:41:e6:
d9:3a:df:94:6a:3c:ac:fc:f0:da:27:21:bb:16:c0:
a3:dc:2e:33:5e:95:22:2d:28:4f:ff:b3:79:38:dd:
fc:33:3c:59:04:0b:c1:74:f4:4d:b7:bd:d1:80:ff:
1e:aa:61:b7:68:63:37:38:e0:08:d5:48:ef:40:7f:
53:be:43:61:ec:7e:2f:3c:a9:68:eb:66:33:f4:75:
45:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8D:43:4B:D0:7C:C4:9A:8D:2F:0A:D6:12:32:C1:35:9D:68:98:C9
X509v3 Authority Key Identifier:
keyid:10:C0:5B:66:2A:57:45:36:50:20:F1:D6:FA:8F:59:EF:4D:94:FE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43a1dd4035b8d29ba7566c64529634ff64783a4f.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/a8604a95d34186e9ad2f2a7054832e86d5d49113.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/43a1dd4035b8d29ba7566c64529634ff64783a4f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.188.235.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:86:ea:ab:96:7c:5a:7f:cf:8d:3c:6f:a9:e8:74:c3:19:c8:
3b:3c:d5:f9:db:ab:ae:8a:63:e0:eb:14:c8:d1:9b:30:88:93:
83:58:72:47:a9:da:18:8c:3f:45:17:a1:25:0f:b1:e3:51:dc:
4c:22:e9:23:69:81:6d:e9:16:86:1c:5f:0e:ea:3a:c9:39:01:
93:24:9c:23:61:8f:d5:2b:76:cd:b2:ec:19:0d:c1:c0:11:b6:
73:9c:20:2e:cc:02:73:e0:ef:40:fc:23:81:41:67:49:b7:5f:
5c:97:e3:bb:69:b2:9d:af:cb:d9:12:23:43:fe:7d:ef:d6:9d:
5e:56:d7:03:1c:7c:3f:45:9c:54:ed:33:ba:f3:4b:b6:37:25:
a6:89:03:d2:d3:93:93:20:db:f9:f5:82:f2:0f:18:a4:f0:1e:
54:f7:10:a0:9f:f1:ec:6d:18:30:5d:68:a3:da:c0:6d:a8:58:
1f:d3:e0:61:36:bc:f5:ea:e7:2a:ec:17:23:56:e5:86:3c:0c:
40:e3:57:15:81:09:cd:ca:87:1c:16:67:a0:18:85:ef:99:db:
2b:74:a0:5d:55:8f:02:2d:f9:a6:dd:32:fe:c3:ad:8b:3d:72:
bb:89:51:09:97:0a:48:5c:a5:ba:9a:e4:11:d7:43:8a:91:73:
4d:b7:db:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:35 2024 by rpki-client on console-ams.rpki-client.org