Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/52674667ac6f6b2b53c9a78a86769b1476b46850.roa
File: 52674667ac6f6b2b53c9a78a86769b1476b46850.roa (raw, json)
Hash identifier: 82s7B9ki8MPxTIV0VwfS2WoyEsbHYlVPixiiLn5D4lw=
Subject key identifier: 29:EB:4E:4A:74:CC:23:73:50:CB:CE:BF:24:15:08:9C:07:B2:DE:09
Certificate issuer: /CN=9335683e4b18488db2c2495f3084999892751bfe
Certificate serial: 13CEF0
Authority key identifier: F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/52674667ac6f6b2b53c9a78a86769b1476b46850.roa
Signing time: Wed 02 Mar 2022 15:22:28 +0000
ROA not before: Wed 24 Mar 2021 03:00:00 +0000
ROA not after: Tue 24 Mar 2026 03:00:00 +0000
asID: 263793
IP address blocks: 138.117.16.0/24 maxlen: 24
138.117.16.0/23 maxlen: 23
138.117.17.0/24 maxlen: 24
138.117.18.0/24 maxlen: 24
138.117.19.0/24 maxlen: 24
138.117.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1298160 (0x13cef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9335683e4b18488db2c2495f3084999892751bfe
Validity
Not Before: Mar 24 03:00:00 2021 GMT
Not After : Mar 24 03:00:00 2026 GMT
Subject: CN=52674667ac6f6b2b53c9a78a86769b1476b46850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:e6:63:7a:80:4e:8f:22:de:26:66:e3:ba:
b1:97:91:82:27:a1:37:cd:0c:56:6c:ee:dc:d7:90:
0d:f9:22:2e:d2:47:7f:a4:06:a8:3f:7d:ce:1b:4c:
33:b8:e9:b4:e9:c2:ba:52:d8:b8:32:8d:a2:53:78:
56:59:4e:b7:79:91:63:a9:9c:75:5e:8c:c3:f0:9f:
0d:a7:ae:70:d2:53:08:67:87:57:94:28:56:76:97:
4f:5c:c2:7d:b1:25:79:fc:8c:04:16:e2:32:89:10:
e1:de:8b:86:30:8d:7d:ed:66:c2:2b:a9:12:d1:d7:
1e:2c:29:b8:e1:43:df:f6:4f:0c:f5:0d:aa:47:cb:
fd:93:70:02:08:01:a3:04:b3:40:0a:68:1e:d8:da:
b3:b7:76:1f:61:24:f5:23:88:0c:6a:cf:59:25:ff:
69:6d:b6:d9:d4:2d:af:1e:39:e2:07:b8:9c:0f:39:
45:64:7a:d9:ff:0e:21:ba:6f:cb:a5:97:ae:45:b5:
67:d8:88:3f:d1:f4:d0:92:62:a4:ee:f4:60:b9:3e:
f3:49:14:ab:e7:61:bf:1d:95:e0:ac:e5:d1:5f:0b:
70:d6:d5:d8:33:80:0a:f3:ea:60:2a:b5:56:97:34:
61:c9:ff:e4:fd:2b:9f:97:63:d6:e6:f1:78:49:2f:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EB:4E:4A:74:CC:23:73:50:CB:CE:BF:24:15:08:9C:07:B2:DE:09
X509v3 Authority Key Identifier:
keyid:F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/52674667ac6f6b2b53c9a78a86769b1476b46850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/9335683e4b18488db2c2495f3084999892751bfe.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.16.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:b3:a9:96:a3:ab:37:7d:d3:63:55:7f:63:55:a3:f9:aa:35:
c4:dd:a1:d8:84:ad:57:48:6f:3b:59:3b:eb:94:60:43:a7:be:
a0:3a:44:a9:46:ed:7a:40:8b:57:5c:4b:df:7e:53:30:77:17:
e5:0c:54:53:1b:95:d4:20:6c:9c:50:49:90:34:22:c8:c5:30:
2b:5b:79:11:b0:ba:fc:7e:15:ac:61:46:16:3f:7f:5d:3e:8e:
30:1e:5d:89:2e:f9:c7:65:bc:ef:18:7e:19:c5:eb:3d:fa:c4:
79:0c:e5:8e:2e:0f:33:ab:15:60:b0:b6:ee:48:0e:10:05:ac:
34:32:f5:d9:f4:62:f3:44:bb:b7:a0:d6:d6:37:ad:1f:8a:d1:
79:c0:91:cd:fc:0e:5e:f0:b6:ad:84:ac:43:82:d2:d9:f8:91:
7a:4a:17:bd:16:f1:ee:18:ba:c8:ac:de:1e:f2:43:f0:73:32:
41:21:df:a2:71:06:4c:27:ac:f8:e5:1a:46:d0:a7:96:4a:39:
6e:c3:cc:54:8e:05:3a:79:55:83:f4:72:1b:d1:c1:00:ef:2b:
28:ed:2e:35:ee:34:4c:03:a5:ae:97:d2:e9:00:c5:10:4b:c5:
05:fb:97:6a:d3:dd:2c:3f:8e:99:91:27:ef:ad:0b:7b:e5:dd:
61:24:41:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:04 2024 by rpki-client on console-ams.rpki-client.org