Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/da65558f0efc19f53be58ba5fe8a3ddc440a840b.roa
File: da65558f0efc19f53be58ba5fe8a3ddc440a840b.roa (raw, json)
Hash identifier: Jw4Z5UTJ0n8wFqw15YWi6nad+hg6R9tehfXSrpE9K4M=
Subject key identifier: 48:6B:03:0B:3B:48:19:56:90:E4:2C:1A:48:31:1F:E7:EB:9C:70:3E
Certificate issuer: /CN=5a93fb330793d475d283f90d1a40a536c6ec17d3
Certificate serial: 0E54B8
Authority key identifier: D4:CB:17:FF:BA:9F:0B:4B:04:60:B5:8C:75:05:DB:3B:B0:93:F7:CF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a93fb330793d475d283f90d1a40a536c6ec17d3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/da65558f0efc19f53be58ba5fe8a3ddc440a840b.roa
Signing time: Mon 16 Oct 2023 13:36:53 +0000
ROA not before: Sun 15 Oct 2023 13:36:53 +0000
ROA not after: Thu 16 Oct 2025 13:36:53 +0000
asID: 271835
IP address blocks: 181.233.24.0/22 maxlen: 24
2803:1810::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 939192 (0xe54b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a93fb330793d475d283f90d1a40a536c6ec17d3
Validity
Not Before: Oct 15 13:36:53 2023 GMT
Not After : Oct 16 13:36:53 2025 GMT
Subject: CN=da65558f0efc19f53be58ba5fe8a3ddc440a840b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:ce:e5:7a:a9:48:90:f2:35:8f:c6:03:b1:
5e:ed:80:ed:5c:5f:96:e9:ce:c7:0e:d3:1f:3a:3f:
4a:b3:aa:7f:c2:f1:47:01:ec:83:10:3c:8f:25:d3:
91:53:64:84:ee:66:e8:58:24:4a:92:22:d2:8f:26:
89:98:7f:23:d5:1c:b1:58:f6:8d:6b:92:bb:ba:ce:
cd:e0:27:96:48:f4:df:04:f1:c6:75:fe:8f:e1:56:
6f:d7:fb:2a:4a:89:16:ca:69:fc:f4:87:05:b2:5d:
9b:9d:36:96:3d:27:68:24:39:75:e4:a0:8b:2d:ee:
ae:10:ca:e1:6c:41:1d:ff:56:a1:d7:cc:58:cd:b4:
c6:45:c6:93:93:c3:ca:24:16:09:a7:a1:4d:67:b2:
b3:e8:ec:54:7f:a9:ec:ee:07:49:8a:62:1d:f9:6b:
88:51:99:2a:ec:cc:b4:66:99:00:7c:08:98:d3:49:
ba:a7:e4:29:8a:84:78:0c:48:47:a1:c7:d3:72:1a:
3e:0e:34:35:95:eb:10:2e:67:44:10:9d:9b:35:fa:
06:92:26:67:0e:f2:c6:7e:63:e4:97:b5:61:c9:6b:
2b:56:27:dc:33:2b:65:fd:f2:c5:47:d7:f3:98:f9:
ae:c0:0b:08:b0:e6:1c:3a:9f:ce:0b:05:15:4e:32:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6B:03:0B:3B:48:19:56:90:E4:2C:1A:48:31:1F:E7:EB:9C:70:3E
X509v3 Authority Key Identifier:
keyid:D4:CB:17:FF:BA:9F:0B:4B:04:60:B5:8C:75:05:DB:3B:B0:93:F7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a93fb330793d475d283f90d1a40a536c6ec17d3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/da65558f0efc19f53be58ba5fe8a3ddc440a840b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/894bc067-9783-40c6-8491-782e35c5c1c3/5a93fb330793d475d283f90d1a40a536c6ec17d3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.233.24.0/22
IPv6:
2803:1810::/32
Signature Algorithm: sha256WithRSAEncryption
0c:ae:dc:bc:26:77:52:39:18:c0:92:5f:50:0d:a1:8f:6d:9b:
36:80:eb:49:91:fa:2a:b8:63:54:6c:47:5d:6b:16:2c:05:ca:
79:c8:9c:22:5b:c7:4b:31:d6:5b:0f:f2:53:a5:18:cc:c0:60:
f8:27:b8:eb:e9:0e:ce:f0:59:1f:65:64:7e:c3:70:56:cf:e5:
48:0c:66:02:0f:20:a7:0b:48:54:2e:b5:2f:72:23:8e:48:33:
87:70:ac:02:f8:47:2d:01:2f:e3:88:b7:53:95:57:fd:eb:71:
51:d1:1a:27:22:a2:18:55:61:c1:7a:45:fb:2a:31:b7:c6:6f:
ca:ef:a7:31:f1:02:57:31:62:3c:ff:61:22:e5:e2:31:da:e5:
d7:1c:ca:37:a6:ca:17:57:ea:fa:b4:95:50:50:a9:58:b7:91:
9e:57:9c:d6:47:b3:02:6f:96:0d:bd:1b:7f:0d:48:95:9b:ce:
9e:1b:9a:e6:1f:2a:cc:32:e0:a0:20:6e:16:f4:0d:60:86:51:
46:97:87:52:67:34:6f:35:82:58:6e:78:81:22:0d:7c:8c:a2:
18:31:86:1a:c4:2e:f0:9e:00:19:cb:a9:27:b4:bc:22:78:1c:
fa:a3:59:31:8d:e5:6a:1d:92:4e:ed:96:3b:0d:48:24:4f:bd:
9f:de:a8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:53 2024 by rpki-client on console-fra.rpki-client.org