Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/e04426cfc55a48b9d5f9b8569d50fba0139ee952.roa
File: e04426cfc55a48b9d5f9b8569d50fba0139ee952.roa (raw, json)
Hash identifier: KxkccQg3JZSo5RrUeowwuuDie/IT+pnvj80eLf+ONec=
Subject key identifier: ED:50:BF:4F:18:2C:08:B0:FB:88:92:B7:E4:17:8E:59:3C:F1:66:D1
Certificate issuer: /CN=2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd
Certificate serial: 1C057B
Authority key identifier: 54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/e04426cfc55a48b9d5f9b8569d50fba0139ee952.roa
Signing time: Thu 08 Jun 2023 02:34:37 +0000
ROA not before: Wed 07 Jun 2023 02:34:36 +0000
ROA not after: Sun 08 Jun 2025 02:34:36 +0000
asID: 262253
IP address blocks: 181.224.225.0/24 maxlen: 24
181.224.226.0/23 maxlen: 24
181.224.228.0/23 maxlen: 24
181.224.231.0/24 maxlen: 24
181.224.232.0/24 maxlen: 24
181.224.235.0/24 maxlen: 24
181.224.236.0/22 maxlen: 24
181.224.240.0/20 maxlen: 24
2803:2500::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1836411 (0x1c057b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd
Validity
Not Before: Jun 7 02:34:36 2023 GMT
Not After : Jun 8 02:34:36 2025 GMT
Subject: CN=e04426cfc55a48b9d5f9b8569d50fba0139ee952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b2:61:56:81:83:5c:28:4f:24:f8:f0:75:c3:
6d:c9:9d:54:a9:e8:14:28:5f:3f:28:e9:74:05:e8:
ea:7e:fb:ef:20:62:99:11:6f:b6:5e:f1:90:2e:8c:
8c:e7:17:7d:6c:0d:67:28:95:b9:ef:53:8a:24:16:
1c:6f:fc:70:ce:f0:7f:9f:33:ea:31:9f:1d:d3:78:
b5:a4:6c:ab:d5:37:d4:06:a8:d9:65:15:36:48:e6:
85:72:ad:a5:eb:28:a4:ff:d2:a8:45:96:f1:b4:fb:
31:dd:28:a3:0d:35:56:14:8d:0d:c7:15:b0:4d:d5:
23:5d:d7:89:27:7a:12:c9:55:e0:8c:0d:b5:8a:de:
bb:95:41:a9:8a:92:aa:ab:df:c3:22:d0:1f:97:02:
40:45:11:46:75:d0:d0:57:4a:8a:60:56:d5:13:75:
c9:e2:50:60:3a:0f:ed:3a:1e:0b:54:0f:b6:7a:24:
95:58:bf:d9:75:dd:da:1a:cd:49:4c:99:f8:78:12:
89:20:1a:b2:82:55:81:1e:7f:a0:96:b0:f7:44:5a:
45:76:5a:5d:ec:ae:a8:59:8a:80:45:28:e0:1a:18:
be:98:ee:28:f8:13:4b:c2:cd:96:83:00:8e:27:94:
ee:b7:7a:de:da:e1:22:73:36:ea:a7:4f:a1:f8:ca:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:50:BF:4F:18:2C:08:B0:FB:88:92:B7:E4:17:8E:59:3C:F1:66:D1
X509v3 Authority Key Identifier:
keyid:54:86:A0:70:8A:EA:8F:83:DE:61:E5:CB:41:C7:82:FF:1E:6E:AA:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/e04426cfc55a48b9d5f9b8569d50fba0139ee952.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/d0fc6cda-e55e-4753-9c1b-3d65fa12c009/2f53f8bd7b3bbee9e49400d913e37c2f6eb10bdd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.224.225.0-181.224.229.255
181.224.231.0-181.224.232.255
181.224.235.0-181.224.255.255
IPv6:
2803:2500::/32
Signature Algorithm: sha256WithRSAEncryption
0d:b9:e1:a5:bd:7f:e3:d8:9f:9e:ca:b5:77:51:07:a1:e5:41:
57:0f:3d:b4:47:dd:bd:51:02:2c:04:90:dc:1d:d6:df:be:c9:
08:da:de:e1:f3:ba:3c:17:13:8c:99:9d:9f:e0:01:9a:4f:a6:
c8:e9:d2:07:30:97:50:38:7c:7a:41:df:45:2b:60:6d:7d:6d:
8a:6c:f1:c6:1b:34:31:56:13:bf:cc:98:b5:1d:3c:ec:6c:61:
74:28:8a:3b:2a:d7:3e:2d:6c:08:cb:68:4f:79:01:21:69:72:
55:e5:80:19:50:7c:3f:13:9c:49:30:1b:23:6c:da:8e:4d:ef:
04:63:ee:17:55:3f:02:9f:2e:b5:a7:51:f8:b2:77:42:e7:dd:
4d:0b:fe:81:45:9e:80:30:ca:a6:62:54:dc:b7:17:d4:59:04:
05:8c:02:e8:3b:ed:a9:8c:de:a1:7e:a0:4c:3b:60:87:5a:05:
bb:ff:e3:db:14:17:fc:e4:26:21:b6:d5:cb:ee:e9:27:bd:69:
f7:1b:02:2e:c6:ec:58:e5:86:84:d3:76:8a:d0:28:72:7c:a4:
33:1e:e6:90:f5:06:ae:44:d7:2b:8d:9e:fe:a3:56:c6:6e:8d:
ad:db:df:02:d6:aa:f4:8e:03:32:f6:6a:c8:9e:53:a9:ed:da:
c1:45:a7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:35 2024 by rpki-client on console-ams.rpki-client.org