Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/7a18dbff88e6f3b42539398e4af2bc1ddd9a77c7.roa
File: 7a18dbff88e6f3b42539398e4af2bc1ddd9a77c7.roa (raw, json)
Hash identifier: qdYxIko44CtXBdWtjAIFzogim16VhWqXZKUrOViekSA=
Subject key identifier: EA:5C:C8:9B:E1:B0:C6:BB:A0:ED:A4:40:8E:66:16:B8:DB:D7:35:98
Certificate issuer: /CN=0cf82f2746d0f60feb6900d06d01749fb9fd33bd
Certificate serial: 03483B
Authority key identifier: AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/7a18dbff88e6f3b42539398e4af2bc1ddd9a77c7.roa
Signing time: Mon 18 Jul 2022 16:33:35 +0000
ROA not before: Tue 08 Mar 2022 03:00:00 +0000
ROA not after: Fri 08 Mar 2024 03:00:00 +0000
asID: 265688
IP address blocks: 181.174.228.0/22 maxlen: 22
181.174.228.0/23 maxlen: 23
181.174.230.0/23 maxlen: 23
181.174.228.0/24 maxlen: 24
181.174.229.0/24 maxlen: 24
181.174.230.0/24 maxlen: 24
181.174.231.0/24 maxlen: 24
2803:cb10::/32 maxlen: 32
2803:cb10::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 215099 (0x3483b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cf82f2746d0f60feb6900d06d01749fb9fd33bd
Validity
Not Before: Mar 8 03:00:00 2022 GMT
Not After : Mar 8 03:00:00 2024 GMT
Subject: CN=7a18dbff88e6f3b42539398e4af2bc1ddd9a77c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:f4:cd:2a:50:7b:dd:e7:56:1f:f5:a8:a0:
ff:5c:b1:cd:43:c5:4b:23:87:fa:46:43:c7:b2:57:
4e:6f:ed:a9:71:04:87:ef:b0:8c:77:42:84:89:e9:
f1:b3:bc:93:bc:ba:b6:e8:10:8c:b4:2d:d9:ac:e0:
4d:9c:4c:ba:d8:57:d2:e5:89:2c:84:a8:50:fb:25:
d7:1a:cc:74:93:5f:d0:ad:1e:cb:bc:6c:b6:2c:ed:
4d:91:31:1a:2b:a5:89:c0:10:0f:b1:d9:1d:af:bd:
05:33:81:63:f1:03:d2:d0:f0:05:64:11:95:a5:1c:
ff:48:d7:91:96:ec:11:b2:62:c7:d8:ef:de:d9:f5:
e0:89:5b:8b:4c:44:e3:a5:1a:2b:d7:9b:93:f4:20:
3c:a0:f5:b1:ee:10:e5:53:9b:fb:e3:2e:9c:65:5d:
3e:7e:4f:44:c2:ef:aa:2d:a9:a1:cb:b5:2c:31:23:
f8:10:d6:db:19:3b:4f:75:52:6b:b6:0c:0c:4d:79:
32:8e:87:6c:18:4c:d7:c5:76:0b:dc:91:cc:3e:e0:
79:21:03:72:24:e2:4e:46:fa:00:4e:e1:d9:ee:58:
b1:0d:99:9e:da:35:50:cf:b3:6f:43:b2:27:07:81:
0c:90:08:1b:26:f6:5c:31:ad:f0:75:a4:fa:d8:91:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:C8:9B:E1:B0:C6:BB:A0:ED:A4:40:8E:66:16:B8:DB:D7:35:98
X509v3 Authority Key Identifier:
keyid:AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/7a18dbff88e6f3b42539398e4af2bc1ddd9a77c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.174.228.0/22
IPv6:
2803:cb10::/32
Signature Algorithm: sha256WithRSAEncryption
14:4a:48:ed:22:8c:1b:98:06:df:fc:9e:0a:3a:ee:5d:b8:2d:
20:60:8e:95:5c:c5:5d:33:1e:91:af:9a:e1:61:34:59:a1:e1:
52:57:ef:ae:60:2d:b0:08:fb:da:24:cb:c4:5e:66:02:46:9e:
ae:ac:b9:cb:bd:f9:1b:43:40:3a:fe:99:23:22:61:84:93:ce:
8b:d9:57:a8:ba:9a:69:7e:7e:dc:d4:0a:22:51:e6:77:23:5e:
ce:f4:90:3d:65:e7:f3:95:c0:ba:a9:68:e9:00:56:4b:d3:f0:
48:8b:bd:02:a6:59:08:2b:04:c2:4e:20:f9:40:4a:a5:82:61:
aa:aa:43:d7:d9:96:0a:76:39:bb:35:dd:96:6d:27:55:e3:06:
94:4b:68:f1:7f:41:40:44:8c:8d:a8:a3:c2:db:7d:81:49:0b:
02:2a:5b:e1:bb:5c:90:7b:6f:b9:16:bd:c0:45:02:15:53:4a:
72:98:42:7d:95:2f:b1:bb:71:ea:34:01:ab:06:be:ec:ba:06:
c4:2a:f2:be:31:0c:de:99:4d:17:1a:90:65:3f:f6:43:ee:fa:
64:ec:17:c1:47:c3:e1:14:04:1a:1e:9e:b3:1b:f2:81:80:01:
4f:ba:e7:df:03:0f:56:04:33:17:e8:ab:49:4f:2c:a8:8c:6b:
09:b1:d6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org