Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/ecb777c20bb5fe559615843a70c9b628701249fa.roa
File: ecb777c20bb5fe559615843a70c9b628701249fa.roa (raw, json)
Hash identifier: lGKiZPawTVn6xVhEbhxoOgHtdH2oaN8ikaooA7VjoII=
Subject key identifier: D0:FA:09:49:1C:D8:DC:44:A5:FC:97:23:43:F5:6B:63:0C:AC:52:AD
Certificate issuer: /CN=50b342d0318aade2e11dbe4798c7733532e7ee94
Certificate serial: 0204
Authority key identifier: 05:A3:C3:43:C5:18:68:BD:78:57:F9:E2:4A:7E:F7:E9:01:12:DD:AD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50b342d0318aade2e11dbe4798c7733532e7ee94.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/ecb777c20bb5fe559615843a70c9b628701249fa.roa
Signing time: Mon 11 Apr 2022 20:07:14 +0000
ROA not before: Mon 11 Apr 2022 03:00:00 +0000
ROA not after: Thu 11 Apr 2024 03:00:00 +0000
asID: 272031
IP address blocks: 181.189.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50b342d0318aade2e11dbe4798c7733532e7ee94
Validity
Not Before: Apr 11 03:00:00 2022 GMT
Not After : Apr 11 03:00:00 2024 GMT
Subject: CN=ecb777c20bb5fe559615843a70c9b628701249fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:5b:a9:f9:96:21:2f:79:b0:1b:7d:a4:27:
19:b8:39:c0:5e:2a:b0:51:a9:02:c6:61:ff:03:45:
ae:11:04:0c:5f:93:ea:f2:c1:a5:59:30:e7:71:94:
8f:1e:05:bf:8a:27:a9:e6:cf:76:1c:e3:c9:58:b0:
34:be:06:66:33:38:48:85:b4:cd:d5:6d:1c:1e:9b:
b4:78:d5:e6:d8:94:37:a8:e6:35:b0:60:6f:45:c0:
4e:a9:48:17:d8:56:32:a7:3d:d1:39:48:19:bd:08:
31:df:0f:22:18:ae:f7:3a:22:df:68:cb:9d:fe:72:
a8:0d:9f:88:ab:b4:e7:2b:b9:8b:bf:81:2a:e0:ac:
b4:40:1d:1b:cc:54:3f:35:57:fc:d9:4b:02:bc:b7:
1a:b5:3d:c7:79:ca:15:c0:67:63:f7:f5:5d:e3:7e:
f4:f9:89:ed:58:e7:1b:a2:fd:8b:5e:67:29:23:2e:
d2:94:e0:cd:51:d6:19:ff:ed:c4:6e:00:6c:32:10:
ed:00:d5:1f:74:03:39:64:47:3a:30:13:73:af:6e:
63:49:5e:89:ed:78:85:a2:65:e5:89:3b:3c:87:bb:
61:f8:94:f4:40:1b:32:37:2c:e8:16:7e:8e:a0:e3:
35:52:af:cd:02:8d:1e:b7:99:78:82:16:15:41:97:
75:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FA:09:49:1C:D8:DC:44:A5:FC:97:23:43:F5:6B:63:0C:AC:52:AD
X509v3 Authority Key Identifier:
keyid:05:A3:C3:43:C5:18:68:BD:78:57:F9:E2:4A:7E:F7:E9:01:12:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50b342d0318aade2e11dbe4798c7733532e7ee94.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/ecb777c20bb5fe559615843a70c9b628701249fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/50b342d0318aade2e11dbe4798c7733532e7ee94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.189.20.0/22
Signature Algorithm: sha256WithRSAEncryption
11:a5:79:df:99:db:c2:57:9e:20:8d:46:a6:2b:e9:89:ed:89:
68:ab:e7:0b:4a:f0:a0:90:c7:cd:42:4c:be:2b:a5:6e:82:a0:
5e:1d:5b:6c:04:23:80:ce:08:f8:8e:47:02:9e:60:05:9b:cd:
4e:6e:80:eb:ea:d9:b4:a2:62:94:cd:07:fe:c8:59:0a:8e:70:
64:15:0a:77:3a:e8:96:b0:22:0b:63:1d:3b:b5:a9:01:f3:51:
45:9c:e1:54:d7:ef:8f:da:df:ad:3d:04:38:53:5f:3d:c4:b1:
fd:d3:98:17:f0:1b:de:82:dd:cb:72:3d:38:32:dd:4d:27:ed:
07:12:b5:b9:3b:86:ba:aa:0e:56:8c:f1:11:c3:94:0c:7c:aa:
32:e0:b0:9f:46:ef:73:22:26:fa:34:46:89:91:89:f1:ff:8a:
0d:70:09:03:2d:67:02:77:66:75:d9:4d:24:21:e6:a2:4d:df:
3e:f8:b2:86:19:c7:62:a3:95:56:7d:e5:81:4d:20:98:80:42:
34:c0:9c:06:c3:d6:74:67:fb:74:33:34:31:56:ff:db:9c:fb:
c4:e3:9c:85:56:64:b4:f4:a9:f9:32:be:3a:a2:2c:51:f7:01:
e7:55:88:e2:95:c9:0b:c4:4c:31:ef:54:bf:73:93:4b:0b:93:
ba:07:51:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:07 2024 by rpki-client on console-ams.rpki-client.org