Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/425d70d9d355af690700c9df3bd38b458fca94dd.roa
File: 425d70d9d355af690700c9df3bd38b458fca94dd.roa (raw, json)
Hash identifier: qbwHebCv8lC8mhlMct342rSw/PktwSaaviPRWAaWnXA=
Subject key identifier: 0F:E1:09:37:0F:BC:E9:22:81:EF:38:8D:E2:CF:77:D2:53:05:8D:61
Certificate issuer: /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial: 259D5D
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/425d70d9d355af690700c9df3bd38b458fca94dd.roa
Signing time: Tue 25 Jul 2023 18:36:38 +0000
ROA not before: Mon 24 Jul 2023 18:36:37 +0000
ROA not after: Fri 25 Jul 2025 18:36:37 +0000
asID: 52323
IP address blocks: 181.16.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2465117 (0x259d5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Validity
Not Before: Jul 24 18:36:37 2023 GMT
Not After : Jul 25 18:36:37 2025 GMT
Subject: CN=425d70d9d355af690700c9df3bd38b458fca94dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:25:84:3b:83:75:0e:0e:79:47:a2:84:76:ff:
6c:49:cd:6b:5b:64:d1:aa:fd:6c:1e:42:cc:e5:99:
1b:21:d2:24:d9:ab:91:5e:8a:5b:43:2e:d7:58:2c:
21:95:d4:2b:a5:ec:8d:e0:a0:dd:47:be:54:32:85:
97:28:f1:42:44:ad:1c:c4:17:02:6a:dd:d8:e3:b0:
73:51:70:11:7b:44:4e:46:31:4b:92:bf:e3:5f:8e:
a8:c7:da:b1:30:8a:5b:02:b1:f8:e5:da:ed:31:b4:
f6:86:48:86:73:09:89:e9:da:84:19:3d:3e:f1:ef:
38:ea:62:4c:fe:cc:6f:fd:a2:e8:1e:db:69:b1:39:
58:f9:bd:f2:ac:35:f5:73:eb:84:72:18:c6:4b:fd:
32:27:fc:c1:91:7c:df:0e:38:0d:ba:58:6b:db:1f:
19:66:50:21:87:d8:9d:83:b9:1e:04:79:78:64:00:
e3:bd:30:50:90:dc:77:34:1a:4d:cc:8f:75:d1:35:
08:5a:c1:57:b3:00:d3:f0:cb:9e:65:86:ce:65:7e:
1a:ec:a1:89:54:f8:29:c3:d7:06:42:92:cf:19:59:
46:25:dd:18:0b:79:75:1b:03:1a:53:79:ba:9d:34:
78:9b:63:f3:f6:31:f1:d1:d9:1b:98:17:42:74:0f:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E1:09:37:0F:BC:E9:22:81:EF:38:8D:E2:CF:77:D2:53:05:8D:61
X509v3 Authority Key Identifier:
keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/425d70d9d355af690700c9df3bd38b458fca94dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.16.172.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5c:c3:3d:3a:e6:d7:c6:dd:ee:31:5d:13:09:7d:d1:42:eb:
d2:8c:47:d0:d8:07:68:81:c2:b3:cc:33:f4:ad:08:9f:b1:97:
73:49:76:60:3b:52:a0:f8:ab:ea:8d:25:7c:7a:c4:e6:82:b2:
68:bd:08:38:83:9a:cc:0b:f3:b6:c7:36:94:fb:c8:f9:5b:06:
2c:d0:2d:9d:7a:80:33:86:10:7f:64:ec:42:5d:b2:15:82:55:
0a:0a:cb:db:28:79:28:0d:a5:ac:00:c6:44:c4:94:79:e9:96:
9b:a3:8e:00:9e:9b:97:7b:69:b8:91:d7:a4:b0:72:77:45:61:
0e:71:98:00:22:e2:4b:08:15:e9:17:a5:8a:58:cd:72:c1:c5:
25:06:3d:fc:1d:08:d2:f8:7a:48:ca:ff:35:d8:b4:23:d0:eb:
6f:8f:2f:b1:ce:a4:30:a2:3e:4e:df:00:76:3b:6c:f3:96:0e:
c5:f8:52:46:43:31:da:ca:d6:40:e6:c5:d8:06:ae:3a:6e:c8:
01:83:dd:c7:e6:8b:e1:4e:95:7b:1f:60:77:7c:8f:ae:4a:2d:
c3:bc:99:37:58:07:fe:dd:ce:ca:20:be:17:9b:82:f1:57:13:
5c:ad:ff:d6:4a:23:4e:d7:4f:46:f0:4e:f4:d1:17:d3:81:15:
0f:77:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:09 2024 by rpki-client on console-ams.rpki-client.org