Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/b42bd44674c3b715bd96f6fea07794c259a38524.roa
File: b42bd44674c3b715bd96f6fea07794c259a38524.roa (raw, json)
Hash identifier: vDhwtptUejzsjIjXRYN7JcjvvSqkmcqDvNhklMuMKzo=
Subject key identifier: D8:EB:7A:96:93:40:43:14:1D:A6:EC:01:93:14:E7:24:20:32:08:2A
Certificate issuer: /CN=0cf82f2746d0f60feb6900d06d01749fb9fd33bd
Certificate serial: 1B
Authority key identifier: AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/b42bd44674c3b715bd96f6fea07794c259a38524.roa
Signing time: Tue 08 Mar 2022 14:43:11 +0000
ROA not before: Tue 08 Mar 2022 03:00:00 +0000
ROA not after: Fri 08 Mar 2024 03:00:00 +0000
asID: 265688
IP address blocks: 181.174.228.0/22 maxlen: 24
2803:cb10::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cf82f2746d0f60feb6900d06d01749fb9fd33bd
Validity
Not Before: Mar 8 03:00:00 2022 GMT
Not After : Mar 8 03:00:00 2024 GMT
Subject: CN=b42bd44674c3b715bd96f6fea07794c259a38524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f3:81:66:97:ba:73:23:55:64:74:f8:b2:70:
46:b2:48:59:61:a8:d6:a6:9f:72:f9:e1:58:99:25:
2c:06:98:a1:11:98:34:bb:ea:e3:b2:e0:a2:bf:14:
4e:2e:f1:16:ac:fd:00:de:d0:1b:a5:ac:59:94:89:
48:90:6a:93:d8:46:a0:ab:b7:e2:2e:1c:bf:af:e6:
ae:d0:9c:3c:21:ed:45:42:83:8b:5a:20:8c:80:4e:
dc:e5:63:69:77:af:8c:73:22:3a:9a:76:82:e4:fe:
79:06:4f:f5:56:b2:56:3e:7e:80:86:22:8d:aa:f5:
79:2e:84:20:e1:0a:60:a5:b5:7c:97:ce:ed:37:13:
12:db:9e:34:43:48:ce:f1:93:0e:94:1e:47:7a:8e:
95:9f:fc:8a:5c:7d:32:e9:f5:45:94:bd:15:eb:82:
da:19:ec:c7:9c:78:5c:c2:dd:bd:02:09:33:a1:53:
da:75:3c:f9:b7:00:ea:f5:41:5c:1a:b0:c9:58:3c:
38:97:65:e3:6d:06:b2:e4:64:a5:66:a2:03:f9:33:
eb:f6:1c:57:9e:09:71:e1:95:88:4c:4b:0a:e4:6f:
47:1d:c2:0d:4a:31:71:76:09:1e:43:18:a5:ad:b1:
e0:0f:f9:ac:57:dc:3f:72:2a:9b:42:e3:54:cd:b8:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EB:7A:96:93:40:43:14:1D:A6:EC:01:93:14:E7:24:20:32:08:2A
X509v3 Authority Key Identifier:
keyid:AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/b42bd44674c3b715bd96f6fea07794c259a38524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.174.228.0/22
IPv6:
2803:cb10::/32
Signature Algorithm: sha256WithRSAEncryption
57:3f:04:e9:15:f6:df:ab:30:08:95:e4:df:e9:3b:c7:c4:bc:
f5:76:9b:5f:d0:2d:c9:e2:41:48:7f:a0:de:68:72:dd:89:12:
86:7c:b6:2d:e4:48:42:a4:4c:ab:24:90:a7:ed:80:2c:be:35:
38:24:19:e3:ee:9b:a3:9b:60:3a:65:d9:67:93:77:fc:86:86:
56:26:67:f3:82:6a:52:5c:61:d2:c5:1e:5a:e0:88:87:88:f0:
33:6b:f8:5e:e9:33:1e:d8:9c:7f:85:ff:78:2c:ea:41:4a:d3:
b1:39:06:79:a9:7a:44:76:37:21:97:6f:3c:c4:71:79:7f:06:
70:01:0c:60:fa:2d:ed:d5:e3:9e:c9:0e:04:2b:7b:77:4a:9e:
58:24:4a:84:81:02:2d:4c:64:7b:49:ed:ad:16:84:80:f2:74:
84:ab:f6:41:fc:3c:f7:95:79:84:fa:c7:16:2b:fc:83:65:fe:
7e:bb:0d:a5:ad:3d:2d:c6:36:b7:a7:cd:08:66:73:41:a8:b4:
73:54:de:cb:8e:12:98:f9:88:21:b4:3b:c2:68:6f:b4:0a:9d:
eb:f8:51:8a:b4:f1:e7:2c:bd:b6:a7:f1:1d:ec:ac:4e:68:18:
99:ce:88:a5:91:14:25:af:23:fe:ac:e8:ff:0e:59:4d:7f:0b:
09:51:80:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-ams.rpki-client.org