Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa
File: 3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier: XwHTw6N7RboRLYu5Azqma/J+VbLudMMW/ZXV9Z77i9s=
Subject key identifier: 67:78:F3:1B:3E:A7:80:26:E4:5E:04:03:6B:58:F5:47:AB:21:C1:D9
Certificate issuer: /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial: 29B4FF17FBCBA510B726070B0B5369734885CD98
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa
Signing time: Mon 11 Mar 2024 18:55:01 +0000
ROA not before: Mon 11 Mar 2024 18:50:01 +0000
ROA not after: Mon 10 Mar 2025 18:55:01 +0000
asID: 265524
IP address blocks: 181.191.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b4:ff:17:fb:cb:a5:10:b7:26:07:0b:0b:53:69:73:48:85:cd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Validity
Not Before: Mar 11 18:50:01 2024 GMT
Not After : Mar 10 18:55:01 2025 GMT
Subject: CN=6778F31B3EA78026E45E04036B58F547AB21C1D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6a:67:78:1b:02:f3:f1:65:96:94:61:c4:0c:
05:b7:5e:65:dc:72:d8:e2:fd:1d:92:79:9b:22:a8:
81:a3:a5:81:b1:df:a4:f0:5d:a8:bc:5e:2c:44:87:
25:4b:cb:17:02:35:1a:7b:a0:d4:ac:31:4f:5f:39:
ec:e8:86:2f:b2:31:c6:6e:cc:ee:09:01:0f:55:d1:
13:5e:dd:ac:2c:1d:dd:f5:cb:ce:81:4d:84:38:f8:
ab:88:52:51:e6:ae:6d:de:11:20:f9:c8:f0:b6:76:
2c:37:7e:4a:c6:0d:06:41:33:80:e0:1d:a5:ae:31:
15:94:1f:44:f2:8b:54:8c:a2:63:4f:8c:db:2f:c7:
dc:14:ab:af:b0:c2:72:ed:f7:87:68:f0:62:9a:6b:
d3:50:19:ea:96:f4:a0:d0:85:1a:28:d5:3b:46:16:
38:56:87:9b:55:34:b9:17:42:fa:a7:de:dc:77:5c:
bf:59:55:7b:72:0d:59:bc:dd:19:94:61:a7:42:22:
d1:2d:b1:1b:e2:a7:1b:88:0d:e0:64:ad:cf:5d:f1:
32:02:f7:12:9b:b2:35:9d:90:33:e4:c5:8a:ae:a5:
d1:87:12:eb:f2:7d:1e:0e:86:4e:c1:bc:f5:f8:b5:
3d:2b:0a:67:7d:23:8c:1c:ad:3c:74:5b:a8:4e:d3:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:78:F3:1B:3E:A7:80:26:E4:5E:04:03:6B:58:F5:47:AB:21:C1:D9
X509v3 Authority Key Identifier:
keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3138312e3139312e3235322e302f32322d3234203d3e20323635353234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.191.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:a6:e1:20:b1:46:5d:54:96:ae:d1:18:df:64:da:db:98:75:
fb:31:f4:3e:92:61:9a:d7:fc:f7:df:c2:13:a0:1b:06:24:0f:
34:63:89:d3:8e:d7:4f:6c:b6:20:94:5d:53:09:79:a3:f0:19:
f8:c4:85:53:4e:b4:d8:db:3f:bc:14:b5:88:83:c3:0c:a1:aa:
7d:7b:31:48:86:10:25:ff:bc:64:2f:04:b0:17:77:1f:f1:02:
cd:ff:90:d9:a0:5f:5d:fb:76:0f:d3:cb:db:81:f5:a2:25:06:
01:35:e4:69:10:2b:c1:65:a7:d1:ca:3f:dd:05:3a:c6:15:b7:
32:f3:35:75:21:a1:8f:29:2c:5c:40:78:a2:26:50:82:8f:a6:
cd:df:b5:62:df:fa:cd:18:da:b2:63:02:39:51:16:77:67:34:
41:3b:2d:5f:05:37:0e:ef:1e:3e:d2:d6:d0:f1:01:0d:41:2d:
c5:1e:60:d4:09:7f:31:96:ca:5e:bc:ab:2c:0b:27:1a:e1:a8:
a7:69:13:9d:18:8a:64:46:b9:a6:0e:1e:6e:40:f2:38:c6:6b:
27:d7:70:4b:1b:8b:1e:cb:2f:c8:78:10:3a:7e:7e:38:05:2d:
6b:a7:a0:d6:64:f4:08:61:a7:59:78:6e:e5:f6:26:1d:5a:06:
46:0b:a6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:50:33 2025 by rpki-client