Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/5238da2c76c81580ca65e3cd1cafa52f5bf48965.roa
File: 5238da2c76c81580ca65e3cd1cafa52f5bf48965.roa (raw, json)
Hash identifier: VnS9YMYmj7NTUTmcCcHQ5SlybRfFxn2/Yn3AvtDDCjs=
Subject key identifier: 54:27:40:86:0F:6C:7F:D0:6C:23:69:9B:E9:79:05:90:D9:E2:86:C2
Certificate issuer: /CN=25d19738e269ec170203b5c4767bdf0fe844b512
Certificate serial: 105696
Authority key identifier: 9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d19738e269ec170203b5c4767bdf0fe844b512.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/5238da2c76c81580ca65e3cd1cafa52f5bf48965.roa
Signing time: Tue 20 Feb 2024 22:49:59 +0000
ROA not before: Tue 20 Feb 2024 22:49:59 +0000
ROA not after: Fri 20 Feb 2026 22:49:59 +0000
asID: 58349
IP address blocks: 181.233.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1070742 (0x105696)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d19738e269ec170203b5c4767bdf0fe844b512
Validity
Not Before: Feb 20 22:49:59 2024 GMT
Not After : Feb 20 22:49:59 2026 GMT
Subject: CN=5238da2c76c81580ca65e3cd1cafa52f5bf48965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:0d:23:b4:46:ba:1a:f9:5e:18:62:4f:90:
8c:10:0e:ae:00:b9:e0:ed:00:7f:9d:8d:ba:f6:ff:
01:a1:29:42:62:76:65:3c:5f:2c:a3:ef:55:1b:53:
a1:55:0a:a2:25:47:99:05:37:ed:ad:fe:fa:2e:98:
56:d0:05:26:04:1b:12:a5:10:b7:3f:fd:d0:dc:c8:
c6:52:f4:ec:6a:d3:fc:94:fb:e5:73:d1:db:8b:30:
05:b1:e2:ad:a0:d5:aa:ab:fb:df:1c:fe:7a:86:ca:
a6:80:53:3c:33:9f:90:19:7c:40:5f:07:bc:2e:23:
5d:e7:f0:ac:29:63:3a:66:07:e7:57:00:9f:7a:d1:
08:62:11:e5:16:6a:f4:ae:3a:fa:2b:21:aa:ab:07:
0d:9a:69:a5:34:dd:e1:dd:1d:63:d4:e9:a4:7a:f3:
f4:0c:ca:09:17:48:b2:c5:62:9e:95:32:16:08:9a:
de:f0:22:e0:11:46:9c:f0:69:8d:88:f6:a0:44:18:
35:42:8d:94:f0:78:2f:28:72:6b:60:8f:cf:1f:c8:
a3:49:67:7b:5e:52:94:2e:9a:a4:1f:cf:14:2b:0d:
8c:8a:b2:08:d0:d2:45:98:c5:0b:eb:54:09:70:73:
dd:66:99:d5:10:19:fc:9c:1d:83:04:db:48:ff:b1:
84:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:40:86:0F:6C:7F:D0:6C:23:69:9B:E9:79:05:90:D9:E2:86:C2
X509v3 Authority Key Identifier:
keyid:9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d19738e269ec170203b5c4767bdf0fe844b512.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/5238da2c76c81580ca65e3cd1cafa52f5bf48965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/25d19738e269ec170203b5c4767bdf0fe844b512.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.124.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:7e:8f:88:5d:41:de:07:a0:c3:dc:c8:0d:32:96:2e:d2:5d:
d1:c5:b0:77:38:3f:c3:4e:b5:47:50:2d:06:9c:20:dd:bb:71:
a4:6e:ae:a1:55:33:b5:2c:d8:ab:f5:b9:ad:93:e6:a2:5c:85:
43:ff:bf:02:d5:1e:0f:8e:26:57:1b:3c:b0:14:f8:df:ce:6f:
be:74:ca:0c:07:0a:9e:01:2d:f9:df:1f:74:35:3e:0d:f9:94:
7f:8b:ff:47:ef:48:6f:0d:de:93:ed:ca:2f:01:cc:2c:b9:87:
4b:a9:9e:30:f3:d1:9c:39:3f:9c:80:96:0f:71:4c:a2:67:eb:
08:c8:ca:f9:68:60:31:66:5a:ec:36:7e:a8:28:96:d2:19:80:
00:96:9c:c0:c1:7c:80:be:67:bf:d4:13:40:cf:33:a9:4c:a4:
23:8a:d9:1d:8e:91:0c:9f:85:83:cc:c3:c0:8b:0f:8b:96:a1:
fb:a8:97:24:f3:69:f4:73:16:01:bb:b6:ac:87:83:a2:d8:e8:
f9:b1:53:75:ee:58:8e:45:d2:60:a4:31:25:ec:f1:e1:b8:33:
7d:cc:f5:a8:eb:83:c2:e2:33:4d:8d:22:eb:37:c7:b5:84:fa:
bd:ca:f2:74:a1:64:d1:9d:e9:b2:2b:15:ca:d8:35:1c:56:10:
bd:2c:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:36 2024 by rpki-client on console-ams.rpki-client.org