Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/d9ffcc7a7c49dd43e0e4117a5c239b75f872823f.roa
File: d9ffcc7a7c49dd43e0e4117a5c239b75f872823f.roa (raw, json)
Hash identifier: w4btXy85X8gRJwdiRVszRm9KRV8lhLBoLKLgs1aNjb4=
Subject key identifier: BF:B7:CF:35:E2:D3:B1:64:B7:6C:44:BA:C5:FC:19:52:F3:12:94:57
Certificate issuer: /CN=0cf82f2746d0f60feb6900d06d01749fb9fd33bd
Certificate serial: 12B747
Authority key identifier: AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/d9ffcc7a7c49dd43e0e4117a5c239b75f872823f.roa
Signing time: Fri 05 Apr 2024 15:15:20 +0000
ROA not before: Fri 05 Apr 2024 15:15:19 +0000
ROA not after: Sun 05 Apr 2026 15:15:19 +0000
asID: 265688
IP address blocks: 181.174.228.0/22 maxlen: 22
181.174.228.0/23 maxlen: 23
181.174.230.0/23 maxlen: 23
181.174.228.0/24 maxlen: 24
181.174.229.0/24 maxlen: 24
181.174.230.0/24 maxlen: 24
181.174.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1226567 (0x12b747)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cf82f2746d0f60feb6900d06d01749fb9fd33bd
Validity
Not Before: Apr 5 15:15:19 2024 GMT
Not After : Apr 5 15:15:19 2026 GMT
Subject: CN=d9ffcc7a7c49dd43e0e4117a5c239b75f872823f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:46:72:85:fe:dc:f7:d8:a2:c6:57:f5:37:3f:
85:9a:36:0d:0e:1a:26:d2:62:d4:b0:38:18:20:e5:
1b:6d:d2:fb:57:15:35:48:b3:7d:4c:09:3b:7e:f4:
05:7a:e6:20:62:29:27:76:fb:45:85:36:db:9f:a0:
1b:2e:0b:d7:31:d0:c7:c9:d8:e6:7b:90:40:96:3f:
44:98:bd:e6:d6:9d:b4:42:df:87:f6:08:ce:ca:bf:
cd:a9:a7:0f:d8:96:c8:7a:8b:07:34:7f:d2:d0:2a:
97:6c:77:e4:63:9c:4a:09:e0:49:c4:3e:24:68:ae:
ad:d6:7a:76:b4:8b:94:61:83:45:d9:8e:fc:bb:a6:
b6:c6:de:a3:91:26:97:9a:8a:60:7f:8a:fd:9b:3f:
ac:af:07:dc:66:80:4d:f2:ff:5c:c2:dd:fc:ff:77:
9e:1c:85:37:dc:03:8f:4b:8c:a3:51:8e:13:96:08:
66:66:35:60:01:b6:bf:d0:e1:e4:e5:46:de:a6:21:
95:b9:16:32:98:40:04:18:7a:77:95:c4:6d:00:0e:
de:34:03:ce:5e:72:ac:11:84:ec:f7:8c:60:37:3c:
42:96:1b:80:ce:6f:33:20:e4:d4:a2:38:2e:64:04:
ac:0a:25:16:c0:d5:29:c0:ff:b8:2c:ce:9d:42:b5:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B7:CF:35:E2:D3:B1:64:B7:6C:44:BA:C5:FC:19:52:F3:12:94:57
X509v3 Authority Key Identifier:
keyid:AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/d9ffcc7a7c49dd43e0e4117a5c239b75f872823f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.174.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:bb:fa:ef:6b:a3:65:e2:62:c7:92:e3:a1:0a:b5:44:52:0a:
d8:35:2d:4f:fe:e9:92:6a:7c:6e:bb:de:f6:dc:56:df:38:c6:
21:14:1a:06:45:ed:97:7e:1d:61:5e:10:be:fb:dd:ab:9e:bb:
78:46:f0:9d:15:64:28:c8:c7:eb:e1:5a:e7:06:38:29:e6:47:
8f:2f:97:93:aa:9e:24:ce:8f:4f:c4:aa:ca:ce:20:8c:9d:27:
5b:56:4a:42:27:b4:9c:cb:ba:39:2a:84:33:fc:99:f2:f2:01:
54:87:1c:04:45:ab:24:e9:09:87:ef:14:43:a9:05:a6:07:57:
84:89:49:b0:5a:b7:9a:02:38:bb:a6:d1:99:c4:5a:f1:ce:c9:
20:7b:31:e3:63:10:11:cc:c7:d8:1f:28:a4:5a:a9:1d:3e:ee:
67:b9:53:44:da:d3:e9:2c:ae:e3:20:1f:f9:8a:ec:96:4e:55:
8f:88:ae:c4:76:53:92:bc:8f:2c:bc:0e:4e:09:37:91:34:45:
2f:0d:17:3b:8d:60:19:76:f0:81:b1:a5:94:61:54:37:85:17:
ea:62:30:13:8d:88:92:83:1a:08:25:d4:42:62:d6:f5:8b:5d:
3b:f6:00:e3:f5:af:a2:65:11:71:24:a3:a0:90:79:1d:9b:75:
c9:a2:fe:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:14 2024 by rpki-client on console-fra.rpki-client.org