Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/cbb1985f9c6f6a4a4e949fe0e12d472de2a878fb.roa
File: cbb1985f9c6f6a4a4e949fe0e12d472de2a878fb.roa (raw, json)
Hash identifier: l10sc95kml3mNVavlfupfPZH9O5ZXUsdXiYHFBjk54E=
Subject key identifier: 57:CE:5C:9A:5D:13:A5:1F:68:7B:E9:B9:C2:44:20:50:B0:0C:46:DE
Certificate issuer: /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial: 14DAF5
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/cbb1985f9c6f6a4a4e949fe0e12d472de2a878fb.roa
Signing time: Tue 23 Nov 2021 15:26:52 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 52323
IP address blocks: 181.16.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1366773 (0x14daf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=cbb1985f9c6f6a4a4e949fe0e12d472de2a878fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:83:dd:34:84:27:fa:1a:8d:0c:c6:f9:cd:
06:87:49:42:c4:9a:2b:3f:2c:aa:25:0a:6b:78:de:
a8:62:3a:c8:f8:23:0b:17:80:2c:a8:67:5e:1a:43:
3e:c0:da:a5:de:bc:20:e5:ee:1d:43:05:c0:f4:a8:
04:17:4a:80:5a:20:7f:0c:03:97:91:69:a5:13:14:
c1:c9:b1:4c:8c:dc:16:05:94:cc:57:51:29:e7:25:
2c:3b:d0:e0:1a:32:30:5f:98:1a:9f:6f:75:11:f7:
ef:6a:58:8e:ad:99:a1:35:87:0c:b6:43:92:80:0b:
d8:81:53:f2:82:af:19:c2:04:4e:42:cd:25:f3:00:
3a:f2:cd:59:53:86:64:56:92:eb:07:20:b9:4e:45:
27:13:1d:2a:6d:38:2b:5b:85:ed:98:65:0d:64:5a:
ce:94:f9:e1:c9:22:0f:9a:26:18:21:7a:be:e3:16:
b2:21:ad:62:e6:2c:a6:75:42:15:5c:ce:40:46:b6:
aa:18:93:83:06:b9:fe:19:a8:ef:5e:e5:09:c5:8f:
96:f8:a3:d3:89:74:b2:20:71:03:66:14:39:c7:a2:
3b:56:df:79:8d:21:74:a4:da:7a:9f:07:41:e4:f9:
f6:d1:23:fe:bd:e5:23:3e:b7:fa:3e:a0:6b:b4:e8:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CE:5C:9A:5D:13:A5:1F:68:7B:E9:B9:C2:44:20:50:B0:0C:46:DE
X509v3 Authority Key Identifier:
keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/cbb1985f9c6f6a4a4e949fe0e12d472de2a878fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.16.224.0/21
Signature Algorithm: sha256WithRSAEncryption
53:37:2b:46:f7:08:f2:99:74:77:d8:03:52:09:3a:a9:ce:99:
b6:98:dd:1c:60:cf:e4:20:b7:11:d0:fa:4e:99:be:70:f3:3b:
87:7f:e1:e3:86:46:28:67:2a:ba:6f:68:17:c0:99:9d:08:fa:
2d:d8:cd:31:e9:7e:f7:65:a2:94:6c:13:26:34:08:e8:11:2e:
42:a8:1b:f7:63:94:89:54:e7:b5:9e:1d:42:98:ed:89:1c:f8:
69:86:24:4f:7f:25:0a:66:ce:87:e4:4a:e6:23:f6:43:ae:9e:
15:d9:a4:5e:7f:bd:c5:88:f0:be:2b:f0:21:d6:e3:5c:3e:a4:
ef:dc:7b:90:bd:61:7d:28:ca:1d:05:4a:a1:1c:e8:94:0e:d2:
c7:2e:ad:a3:a6:f1:f5:7e:05:1a:49:5b:b0:09:7d:33:d7:4d:
82:18:8f:6d:14:c8:b1:5e:62:7e:a4:ba:ac:54:cd:d4:7a:2c:
99:6b:53:2a:c1:56:af:5d:a8:4b:c0:ca:01:29:bc:59:3b:51:
71:e5:f3:a5:df:eb:78:75:98:19:64:cc:d1:8b:7c:bd:dc:fe:
fe:c3:ca:c7:79:b4:9f:4b:a0:2e:d6:af:85:a9:41:ff:b5:7b:
f8:ca:c7:68:ab:93:15:45:e8:0a:62:38:66:20:43:94:5b:c4:
04:39:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-ams.rpki-client.org