Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/455972cf2d38056fca52cf3f46b331e545617334.roa
File: 455972cf2d38056fca52cf3f46b331e545617334.roa (raw, json)
Hash identifier: sTfAQ07tlI5sU7xiQaGRYIkMCE8lW4NCS0XcaDqZsFc=
Subject key identifier: 34:73:F8:BA:BF:F8:F2:A2:69:67:51:D8:AC:8B:53:E7:90:BC:D4:E8
Certificate issuer: /CN=5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0
Certificate serial: 199BE3
Authority key identifier: F5:C2:43:E9:59:3D:73:BE:76:93:9B:D0:3D:1F:C4:43:A4:85:A4:AC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/455972cf2d38056fca52cf3f46b331e545617334.roa
Signing time: Fri 24 Mar 2023 08:31:54 +0000
ROA not before: Thu 23 Mar 2023 08:31:54 +0000
ROA not after: Sat 22 Mar 2025 08:31:54 +0000
asID: 265810
IP address blocks: 201.182.0.0/24 maxlen: 24
201.182.1.0/24 maxlen: 24
201.182.2.0/24 maxlen: 24
201.182.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678307 (0x199be3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0
Validity
Not Before: Mar 23 08:31:54 2023 GMT
Not After : Mar 22 08:31:54 2025 GMT
Subject: CN=455972cf2d38056fca52cf3f46b331e545617334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:dd:71:06:0d:fc:ae:71:65:7f:ac:1b:6d:
48:e3:64:5d:84:6b:fa:c5:b6:93:aa:4c:0e:c6:06:
0f:89:a5:9f:35:4a:91:0f:d7:0f:79:57:9b:23:d1:
a8:90:27:92:2b:5d:08:97:43:ed:2d:92:d9:df:ef:
dc:e0:b5:6e:10:97:53:dc:5f:c8:7e:f0:a5:39:dc:
2e:53:1e:68:23:da:92:9f:5e:7d:95:14:ee:26:dc:
a1:60:9f:25:c1:97:10:00:d1:bf:0a:16:24:4d:d2:
33:a2:a5:06:79:20:46:ff:75:18:68:1c:50:5d:3a:
27:de:b3:ab:a6:4e:0b:30:c4:b5:f1:94:a2:c5:d8:
fb:74:03:41:d0:c1:e3:d2:7b:59:91:62:fd:2c:6f:
c9:16:6e:d0:be:22:86:46:bd:2e:18:42:f1:21:c0:
e0:24:c5:aa:e2:82:77:fa:86:70:1f:c6:b4:c7:04:
fc:41:c9:cb:c8:4a:b9:94:16:e0:d4:99:59:c0:4b:
56:5f:85:66:0a:36:79:e9:45:5b:41:28:11:da:e0:
8c:2b:80:bf:7c:63:c7:5f:48:90:cd:47:44:d8:e3:
bf:6b:8d:48:e3:90:df:c4:df:31:18:be:e7:74:91:
3f:93:fc:13:2f:ba:eb:24:3d:fd:78:db:6f:92:38:
4b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:73:F8:BA:BF:F8:F2:A2:69:67:51:D8:AC:8B:53:E7:90:BC:D4:E8
X509v3 Authority Key Identifier:
keyid:F5:C2:43:E9:59:3D:73:BE:76:93:9B:D0:3D:1F:C4:43:A4:85:A4:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/455972cf2d38056fca52cf3f46b331e545617334.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.182.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:01:34:bb:2d:f5:c7:97:fb:ed:f7:bc:f8:7f:1b:73:bf:8c:
d9:f9:46:c5:c4:5d:e7:7f:5b:ed:20:cd:b0:d9:ee:66:f8:ca:
8f:46:ec:0a:88:f0:05:5d:4e:c0:d3:19:9c:cc:c6:e9:6f:e0:
23:e0:26:e3:8c:30:c7:05:8c:75:87:83:89:ab:19:05:bb:71:
d9:6d:c5:1c:60:96:9b:30:04:22:7e:e1:e5:2e:96:e9:c2:57:
e7:18:a2:e2:52:35:ba:44:f4:0a:f7:dd:47:08:d0:7b:e2:91:
82:c5:6f:c2:fc:8e:c9:83:95:18:7d:0d:a8:69:42:d9:a2:fb:
e4:2b:07:c2:19:30:01:56:07:e5:14:8c:ba:4f:59:97:89:54:
e7:c3:98:de:f2:56:bc:98:21:55:c3:83:03:61:49:54:f9:f8:
f5:af:d6:2b:de:9d:6c:43:9e:d8:d7:a9:41:5b:7d:c6:47:41:
ad:29:42:76:6e:1d:b5:41:3e:5e:09:32:b8:cc:ad:c2:ce:47:
bc:2d:f4:e5:ee:8e:c2:d5:56:91:c0:13:7f:95:d9:d7:97:dc:
85:5f:dd:50:dc:0e:44:4f:75:05:4b:c6:c7:5f:87:c3:3d:ce:
f7:03:72:b5:08:fe:0d:af:26:26:1c:9f:d7:3e:5e:24:67:c2:
71:c5:8a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:29 2024 by rpki-client on console-fra.rpki-client.org