Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/472bc1a2bc2bfd3a942c19b86cb9c4cfc7727b15.roa
File: 472bc1a2bc2bfd3a942c19b86cb9c4cfc7727b15.roa (raw, json)
Hash identifier: KstiQzqnHt+8fbz0eqzkteOkVNykxQsvCYIbzDSBa3w=
Subject key identifier: 38:8A:DB:FF:45:3F:51:AE:87:58:4C:0F:6F:38:92:BC:22:CB:43:DF
Certificate issuer: /CN=4a3d4fdf5d4afff13254531592d21c29a5ad3196
Certificate serial: 0C4741
Authority key identifier: 9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/472bc1a2bc2bfd3a942c19b86cb9c4cfc7727b15.roa
Signing time: Wed 13 Dec 2023 20:49:13 +0000
ROA not before: Wed 13 Dec 2023 20:49:13 +0000
ROA not after: Sat 13 Dec 2025 20:49:13 +0000
asID: 52373
IP address blocks: 181.233.180.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 804673 (0xc4741)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3d4fdf5d4afff13254531592d21c29a5ad3196
Validity
Not Before: Dec 13 20:49:13 2023 GMT
Not After : Dec 13 20:49:13 2025 GMT
Subject: CN=472bc1a2bc2bfd3a942c19b86cb9c4cfc7727b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:33:39:9a:6b:a5:a4:d6:bd:72:9e:67:9b:
57:9a:c3:cd:ac:24:43:fd:ed:4c:50:6c:bb:15:77:
e5:24:0e:0d:b3:92:b0:35:1b:5f:01:fe:9a:f8:86:
1f:c4:08:b3:56:19:85:76:4b:72:5d:bd:6c:68:71:
c4:15:d6:01:e8:bc:9a:61:20:f9:48:54:83:62:7f:
f6:c9:3f:89:d8:77:c9:a2:76:7e:fc:55:49:d0:1b:
ee:29:ca:6f:38:9d:8b:1d:92:78:71:3f:71:a5:89:
c8:ca:75:8c:fa:83:00:10:16:9d:c8:e8:11:bf:02:
6a:d2:76:63:7c:6f:29:3e:42:57:92:cc:d5:e6:ca:
c9:cc:3f:6b:dc:c4:d3:d1:67:92:96:d6:66:06:bf:
76:be:b6:0e:dc:7c:6b:c8:6b:f8:c9:ff:fd:2c:9f:
73:61:5a:e7:20:9d:1e:c4:6b:28:7f:b1:4a:57:67:
ab:34:e0:5b:84:06:78:1d:22:45:ec:e6:42:ab:12:
81:de:d4:0a:a2:dd:8f:61:43:a0:72:36:77:d8:b1:
24:9b:9b:a3:6c:c9:e1:69:70:b4:64:c9:8a:69:f4:
4d:fb:fc:5c:5a:e7:1b:6a:bc:b2:9d:30:e2:54:4b:
98:d1:01:4b:19:ab:f1:a1:bd:ef:36:05:47:1d:15:
45:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8A:DB:FF:45:3F:51:AE:87:58:4C:0F:6F:38:92:BC:22:CB:43:DF
X509v3 Authority Key Identifier:
keyid:9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/472bc1a2bc2bfd3a942c19b86cb9c4cfc7727b15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/4a3d4fdf5d4afff13254531592d21c29a5ad3196.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.180.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:4b:c5:ca:fd:cd:a2:84:4b:9b:02:d4:0f:31:34:34:4b:91:
e3:8d:a5:a9:ea:77:df:68:29:fb:5f:ea:bb:1b:72:76:69:87:
39:60:a5:50:f3:fe:bd:78:95:8e:d2:b0:5d:5e:73:6e:0a:28:
d6:93:73:51:66:53:bc:e4:b0:00:b2:74:96:50:30:06:bd:9a:
0c:ac:37:8e:56:44:f0:31:d5:12:82:0e:8e:2b:99:84:ff:e8:
1b:e3:90:d9:6a:4f:90:79:3e:43:28:d8:3d:39:7b:19:22:fa:
7f:68:69:fa:21:5c:83:98:57:bb:3f:b6:d6:db:ff:6d:c2:c1:
bb:ca:fe:2d:d7:49:40:29:c1:79:96:e3:49:68:52:6c:f1:79:
55:ac:c6:ab:93:2c:31:36:9d:1b:62:a0:39:8a:cc:8e:ee:f9:
1e:d3:d6:0c:2b:c9:4c:4d:22:4b:8c:bb:ae:d4:0c:4e:ee:5b:
f4:35:39:2e:91:a0:9c:04:d0:18:f3:b8:95:31:4a:99:92:54:
9f:1e:e7:f5:40:f3:f6:8a:54:9b:0d:d9:d9:90:00:f3:0a:22:
75:c0:d1:2d:cb:40:43:e7:93:82:82:a6:6e:29:45:75:3a:78:
c5:05:c9:84:82:59:97:c1:e2:da:29:82:ec:c2:d8:67:4e:31:
84:90:31:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:23 2024 by rpki-client on console-fra.rpki-client.org