Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/21a34f1dca19980e57d5ea0d047199072ed4e844.roa
File: 21a34f1dca19980e57d5ea0d047199072ed4e844.roa (raw, json)
Hash identifier: 3z58Avo9P/ok5ys4+7uuLtEPxynZ/jDTuY+4FBFWRI0=
Subject key identifier: 8E:C8:08:7F:95:FF:86:45:3D:65:FA:57:83:63:F1:D3:D1:25:B2:EF
Certificate issuer: /CN=2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd
Certificate serial: 1BFF36
Authority key identifier: 54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/21a34f1dca19980e57d5ea0d047199072ed4e844.roa
Signing time: Thu 08 Jun 2023 02:34:37 +0000
ROA not before: Wed 07 Jun 2023 02:34:36 +0000
ROA not after: Sun 08 Jun 2025 02:34:36 +0000
asID: 267749
IP address blocks: 181.224.224.0/24 maxlen: 24
181.224.230.0/24 maxlen: 24
181.224.233.0/24 maxlen: 24
181.224.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1834806 (0x1bff36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd
Validity
Not Before: Jun 7 02:34:36 2023 GMT
Not After : Jun 8 02:34:36 2025 GMT
Subject: CN=21a34f1dca19980e57d5ea0d047199072ed4e844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:b9:01:3b:12:30:8a:77:5d:ca:ee:89:9e:
e0:0f:29:2b:d0:48:38:25:54:ad:2b:dc:c9:fd:cd:
f6:a4:a4:4f:aa:88:ba:6b:b9:d4:f1:f4:c1:c4:c1:
e9:0b:7c:70:54:af:01:f2:0a:2f:68:9b:6d:53:cb:
ec:4b:81:e9:b2:42:12:70:fe:bd:59:6b:fd:dc:fa:
61:09:9d:36:63:1a:c0:b2:90:7d:70:cf:57:62:bf:
40:ec:46:0e:5e:f2:cd:19:ba:e8:52:d6:85:c6:21:
10:f9:e8:e5:89:82:75:ac:0a:8b:92:e4:3f:f2:0d:
e8:c8:41:41:0f:22:57:28:63:5d:a3:e0:7f:81:8b:
d6:5a:63:0c:75:c2:6e:bd:94:66:37:b9:b2:82:55:
5d:70:4b:12:54:94:b9:e6:d5:00:81:6f:47:ad:60:
d7:90:2c:88:09:1f:1b:1c:e1:ac:ac:ce:9e:7a:5f:
64:cf:43:02:3d:1f:ef:71:9d:67:6d:b8:29:27:4d:
ab:f8:15:ab:69:7d:d3:84:d4:f0:53:f6:0b:c9:b0:
47:75:17:e0:46:4b:91:1b:7c:00:69:bd:7d:9d:ff:
49:c7:ff:bf:f8:be:dc:7f:da:bf:60:fa:90:ae:30:
2f:8d:46:b1:9e:ba:8a:45:d5:bd:53:8f:4c:9f:9a:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C8:08:7F:95:FF:86:45:3D:65:FA:57:83:63:F1:D3:D1:25:B2:EF
X509v3 Authority Key Identifier:
keyid:54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/21a34f1dca19980e57d5ea0d047199072ed4e844.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.224.0/24
181.224.230.0/24
181.224.233.0-181.224.234.255
Signature Algorithm: sha256WithRSAEncryption
47:a5:49:c5:d0:be:74:af:f2:39:1a:4f:65:5b:20:70:9d:87:
d9:40:13:92:fc:4d:81:d6:cc:cd:8d:9b:40:6a:58:40:40:30:
b8:52:e3:4d:99:b2:9f:57:28:4c:9c:48:9e:b2:be:05:72:14:
f2:4a:8e:53:41:22:d8:55:53:9a:c1:a1:d2:d0:37:6a:4a:79:
dc:87:15:c2:72:8c:6d:64:00:8c:82:81:c3:51:dd:67:d6:f8:
c5:ed:d0:0b:89:ec:65:3e:63:3f:12:7e:ef:96:bd:22:83:3f:
2f:4e:77:63:53:c7:0a:0c:fd:d1:f3:5c:b4:6f:d5:2b:5b:cb:
3d:6c:9e:ae:ec:25:b9:2b:ab:fb:5c:11:48:bd:21:9b:fb:b4:
1a:f4:a9:25:06:56:a9:e1:3e:60:0e:3b:cc:58:a8:8b:da:49:
1d:18:8e:e6:4b:1f:87:31:7c:1c:ce:e1:dc:a4:2a:3a:ea:25:
66:bf:71:e7:9a:e4:0f:18:a0:8e:00:87:0e:eb:4d:71:2b:e9:
81:b8:74:a0:f3:c7:f5:79:a9:8b:d2:09:97:d1:f9:18:13:fa:
08:87:0f:9a:9b:97:5b:ba:9b:24:0c:04:2c:b8:ef:0d:3a:79:
fc:14:5b:93:55:b8:b1:7c:84:f6:a7:50:e1:3e:f1:70:41:b6:
98:51:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:48 2024 by rpki-client on console-ams.rpki-client.org