Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3138312e3131382e3230382e302f32302d3234203d3e20323632313936.roa
File: 3138312e3131382e3230382e302f32302d3234203d3e20323632313936.roa (raw, json)
Hash identifier: zF5SM+Gc7w0pOZqn4hsU8CQGmRv/0tS5npSqSFIQmMc=
Subject key identifier: 5B:9A:81:53:73:0C:EA:51:84:0D:FA:6A:54:B6:FB:39:55:56:8F:ED
Certificate issuer: /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial: 0C7265F7656A0E275165A64B24F4F53AD78A289F
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3138312e3131382e3230382e302f32302d3234203d3e20323632313936.roa
Signing time: Wed 04 Dec 2024 19:25:00 +0000
ROA not before: Wed 04 Dec 2024 19:20:00 +0000
ROA not after: Wed 03 Dec 2025 19:25:00 +0000
asID: 262196
IP address blocks: 181.118.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:72:65:f7:65:6a:0e:27:51:65:a6:4b:24:f4:f5:3a:d7:8a:28:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
Validity
Not Before: Dec 4 19:20:00 2024 GMT
Not After : Dec 3 19:25:00 2025 GMT
Subject: CN=5B9A8153730CEA51840DFA6A54B6FB3955568FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:16:3d:41:b3:24:e5:88:4c:00:88:48:dd:f3:
5b:77:a0:5e:f5:d5:1b:f2:74:7c:52:6c:32:ec:84:
c3:2d:7c:ca:f2:da:20:30:0b:50:c3:ef:d4:d3:94:
d3:4e:0b:82:61:1b:7f:72:96:b6:23:4f:bb:2d:17:
56:f6:f4:80:0e:c7:02:f8:9f:b5:71:61:3d:36:55:
d4:0a:f1:c9:21:43:b6:41:fb:d0:18:98:6f:c6:3c:
4e:45:f9:52:71:34:73:00:cf:87:41:00:cf:65:de:
8c:1f:c6:f7:41:1a:c6:ff:2f:3d:d7:27:00:eb:69:
cc:0d:92:52:5e:34:15:a2:ae:d0:d4:24:d5:09:f0:
92:b9:03:b3:ea:d3:40:6d:37:18:d6:9e:aa:a6:d7:
c5:d4:24:60:bb:37:f8:89:bf:fb:df:b4:b0:bb:fd:
41:85:73:3a:64:62:dd:e3:f5:e8:4b:a6:62:aa:16:
d9:59:64:32:84:97:73:09:9a:c4:38:3a:f6:0a:fc:
6c:fb:04:99:db:b3:ae:d3:8f:0c:f0:75:45:9f:7f:
68:89:de:aa:fc:9c:57:41:1e:4d:28:4e:36:a1:5d:
92:2d:a4:c8:78:64:5f:28:9c:9e:2c:9b:94:3d:d1:
11:cf:71:42:3d:d9:a9:ca:0f:bc:91:e9:ab:34:64:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:81:53:73:0C:EA:51:84:0D:FA:6A:54:B6:FB:39:55:56:8F:ED
X509v3 Authority Key Identifier:
keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3138312e3131382e3230382e302f32302d3234203d3e20323632313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.118.208.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:b0:42:c9:fb:98:df:c9:3e:8a:d0:04:ac:28:fe:7a:28:d8:
60:b9:b9:da:7c:0a:c4:19:39:df:d4:b7:b6:4c:18:6b:05:c3:
eb:d1:bb:ad:4f:64:67:4c:0a:76:50:45:e6:81:58:de:4f:77:
a9:be:42:2b:0c:c5:f9:57:2e:f6:22:ff:38:8a:ef:5c:7c:d0:
6b:10:dd:eb:c4:9e:a1:44:8c:af:b9:29:60:55:2e:c5:c4:36:
9b:36:77:bf:8e:37:9f:e1:dd:80:67:7d:00:44:45:ad:b9:76:
e9:17:5d:a5:28:fb:1f:0e:58:ce:1d:e1:78:f9:39:cb:46:7d:
2b:51:23:6c:5e:bd:3e:87:52:e3:2f:ae:e2:46:db:1c:dc:92:
ca:99:9c:b8:b0:c2:f4:ef:b0:aa:71:31:5b:6b:8f:e0:71:ff:
86:50:59:f7:24:b2:8b:73:78:54:67:68:1d:ab:17:0e:d4:3e:
77:85:28:5d:1c:de:a9:68:1d:e7:a1:db:18:6c:9a:19:6a:ac:
b2:b0:10:14:dc:cb:ae:21:a2:c4:5c:4d:86:f8:ec:36:31:3b:
81:6b:9e:46:a1:91:f5:60:74:10:5e:d9:4c:06:8d:75:4b:b6:
77:fe:45:76:4e:8d:cf:9e:cf:09:e9:47:20:4a:6e:94:15:99:
2b:0e:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:09 2025 by rpki-client