Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/ca7f3b455b3e41f57f2a031af8f0daa51ed9f23c.roa
File: ca7f3b455b3e41f57f2a031af8f0daa51ed9f23c.roa (raw, json)
Hash identifier: rBB10d/vMpCY1o2RTH023bZ5ppcURfZnGjS8grHAvIk=
Subject key identifier: 9D:0F:51:67:D3:28:56:A9:CA:CA:FA:B3:8E:28:63:80:51:C5:3C:A1
Certificate issuer: /CN=8a25370ef6240a33a5dee984da551ba55fa78abf
Certificate serial: 1F9285
Authority key identifier: B4:C8:40:EA:6B:59:67:49:EF:C7:65:01:D1:D4:09:F0:B3:82:C4:0E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a25370ef6240a33a5dee984da551ba55fa78abf.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/ca7f3b455b3e41f57f2a031af8f0daa51ed9f23c.roa
Signing time: Fri 14 Apr 2023 08:30:01 +0000
ROA not before: Thu 13 Apr 2023 08:30:00 +0000
ROA not after: Sat 12 Apr 2025 08:30:00 +0000
asID: 264764
IP address blocks: 181.114.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2069125 (0x1f9285)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a25370ef6240a33a5dee984da551ba55fa78abf
Validity
Not Before: Apr 13 08:30:00 2023 GMT
Not After : Apr 12 08:30:00 2025 GMT
Subject: CN=ca7f3b455b3e41f57f2a031af8f0daa51ed9f23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:2c:1e:4a:86:71:60:f7:57:f4:e2:db:eb:
bc:fc:bb:43:83:79:7d:8c:09:8d:5e:d7:33:e0:2d:
27:61:17:d0:bd:76:5b:ea:21:dd:3a:f5:87:8a:06:
e9:99:26:30:28:dc:c5:78:49:50:c1:33:43:32:3b:
86:fd:c7:8f:7a:0c:50:8a:71:a0:7a:6d:d0:16:a5:
46:c4:89:7f:19:fb:41:58:b9:60:70:71:69:9b:0f:
96:68:4a:5d:36:b5:2b:0b:e6:b3:e2:91:75:52:0a:
43:31:a7:f5:f4:e4:85:e7:26:02:28:26:30:f5:b2:
74:17:56:3a:a3:82:a2:80:c3:1c:8f:ac:6e:df:ad:
21:03:d1:38:81:88:7d:46:b8:1c:18:8b:92:4f:1b:
96:8f:54:30:05:95:4b:a1:6c:44:f2:9c:6b:b4:19:
e9:4d:62:f3:a2:f5:a3:70:5a:40:c0:c7:0a:eb:aa:
47:a6:ed:5e:e5:03:3f:63:88:ba:7d:bd:88:2d:3b:
6e:f5:37:43:f0:11:2f:ca:aa:b0:a8:93:be:ef:39:
09:35:4f:09:8f:1d:82:1d:23:a7:a5:cf:dd:01:91:
52:d2:50:e4:2a:f9:26:7a:ea:13:ae:c9:c4:48:3f:
76:67:ca:14:0a:3b:f2:15:ee:68:90:d9:bb:bb:ec:
f3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0F:51:67:D3:28:56:A9:CA:CA:FA:B3:8E:28:63:80:51:C5:3C:A1
X509v3 Authority Key Identifier:
keyid:B4:C8:40:EA:6B:59:67:49:EF:C7:65:01:D1:D4:09:F0:B3:82:C4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a25370ef6240a33a5dee984da551ba55fa78abf.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/ca7f3b455b3e41f57f2a031af8f0daa51ed9f23c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/8a25370ef6240a33a5dee984da551ba55fa78abf.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.114.12.0/24
Signature Algorithm: sha256WithRSAEncryption
79:73:ea:01:51:a0:ea:a8:52:c6:25:cb:27:68:fc:58:27:64:
02:87:78:a1:f9:ae:33:25:e0:7a:3b:47:99:d1:fb:3d:ae:02:
7d:0b:6e:fd:9c:d1:35:d2:43:78:d0:8b:85:3c:94:4f:6f:f4:
04:99:ec:c5:57:90:3e:11:78:18:32:2c:50:23:a4:5c:a6:c5:
88:17:88:fe:65:14:1c:40:5d:71:55:81:87:a1:52:f9:f3:63:
e5:f0:7a:c9:21:81:8e:8d:d9:9f:fc:40:a0:be:06:e3:5f:aa:
81:25:4d:24:1e:5b:09:a9:04:cd:c1:22:ff:6a:98:22:1a:48:
33:04:f1:d6:13:5c:57:c2:d1:82:21:59:fa:31:35:19:93:7f:
14:7e:b3:15:1b:91:8d:83:2a:d5:f2:f7:2b:1a:81:81:f2:3a:
12:38:70:9c:22:77:11:1a:a5:bf:ae:5c:38:3d:57:21:06:a5:
38:1b:0f:55:cc:49:65:2a:cf:64:97:9a:ec:77:17:cc:44:c5:
cc:cb:24:26:5a:54:06:29:53:b8:9e:49:e8:c2:ca:98:ec:9e:
68:5e:f8:53:48:e9:02:3b:a0:bf:24:8b:b9:5a:53:91:8c:8a:
2a:14:65:52:a9:b8:71:02:b8:e4:ad:98:5e:a9:72:29:ad:ca:
b8:0f:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:39 2024 by rpki-client on console-ams.rpki-client.org