Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ac6ad4a-00a9-4e21-9338-2bda21db26be/c5b1cc39febe836abb19e0128b7ca2dde9a77818.roa
File: c5b1cc39febe836abb19e0128b7ca2dde9a77818.roa (raw, json)
Hash identifier: Z44jGtzu0VZHyutqQqyTvPtWgj3z5Wy4tCalKxqv0Bg=
Subject key identifier: 97:61:BA:64:B9:35:64:F3:69:E9:8F:C5:B2:17:9F:03:87:49:30:A2
Certificate issuer: /CN=86e766e07cf0cd3dfd57b2a4acd47666d35711b6
Certificate serial: 12E99B
Authority key identifier: 88:17:E3:63:3B:91:B1:21:50:2E:54:71:20:ED:AA:8C:67:83:20:AF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86e766e07cf0cd3dfd57b2a4acd47666d35711b6.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/3ac6ad4a-00a9-4e21-9338-2bda21db26be/c5b1cc39febe836abb19e0128b7ca2dde9a77818.roa
Signing time: Mon 15 Jan 2024 18:35:10 +0000
ROA not before: Mon 15 Jan 2024 18:35:09 +0000
ROA not after: Thu 15 Jan 2026 18:35:09 +0000
asID: 263717
IP address blocks: 131.108.192.0/22 maxlen: 24
181.174.160.0/22 maxlen: 24
2803:c80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239451 (0x12e99b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e766e07cf0cd3dfd57b2a4acd47666d35711b6
Validity
Not Before: Jan 15 18:35:09 2024 GMT
Not After : Jan 15 18:35:09 2026 GMT
Subject: CN=c5b1cc39febe836abb19e0128b7ca2dde9a77818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ea:06:16:cf:9e:3e:38:c6:7d:de:e5:77:ff:
2b:59:c3:7a:33:52:69:b5:56:66:e0:d8:74:0e:86:
25:6f:ae:23:1e:99:be:35:dd:8c:07:fe:b5:be:3a:
09:6d:b8:a0:39:fb:c4:5b:9c:89:01:bc:4e:ff:90:
58:8d:59:8c:05:81:90:52:7c:17:c6:7e:96:53:0d:
a4:83:6b:d8:6e:3d:f4:c9:2a:6a:66:cc:50:24:c4:
5e:cc:c2:0a:42:db:6d:b8:7f:8f:f7:4d:e5:a1:ac:
c8:fc:c8:02:6b:35:9d:31:52:dc:53:ad:d5:12:2c:
fd:40:03:e1:b8:d2:07:9b:f9:c1:d0:b0:26:c3:c4:
e7:77:2e:a0:74:89:a4:df:0f:cf:dd:eb:b3:80:f0:
18:55:43:5c:10:8b:8a:0b:89:6e:45:58:b2:f0:f6:
6b:5b:0b:92:33:af:f2:30:4d:ca:e3:67:5d:ef:f1:
eb:74:35:af:c7:08:e4:34:34:da:b0:33:f0:a5:50:
40:d7:2f:2d:3f:0b:8a:f4:e4:d4:16:7e:90:0b:65:
ae:f6:66:15:6a:1d:9d:29:a0:1a:60:d8:47:9d:c3:
8a:b9:30:8f:24:75:fe:72:2f:fc:61:8e:07:58:8e:
5d:32:ed:90:bd:68:ad:23:6d:ee:85:40:6f:bf:f7:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:61:BA:64:B9:35:64:F3:69:E9:8F:C5:B2:17:9F:03:87:49:30:A2
X509v3 Authority Key Identifier:
keyid:88:17:E3:63:3B:91:B1:21:50:2E:54:71:20:ED:AA:8C:67:83:20:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86e766e07cf0cd3dfd57b2a4acd47666d35711b6.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ac6ad4a-00a9-4e21-9338-2bda21db26be/c5b1cc39febe836abb19e0128b7ca2dde9a77818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/3ac6ad4a-00a9-4e21-9338-2bda21db26be/86e766e07cf0cd3dfd57b2a4acd47666d35711b6.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.108.192.0/22
181.174.160.0/22
IPv6:
2803:c80::/32
Signature Algorithm: sha256WithRSAEncryption
5f:e6:63:a7:db:76:e9:d8:da:57:5b:85:a4:8e:48:22:9d:28:
47:14:ba:5c:68:19:6b:b9:5f:f7:b7:45:72:42:b0:35:37:47:
3f:79:f7:31:3e:6a:82:67:d9:9b:09:29:95:f4:a9:62:1d:3b:
b8:aa:cd:8a:6d:01:67:7b:d6:1b:1f:02:70:53:45:54:f5:f2:
0e:d8:58:27:4d:1d:20:61:50:c4:ca:43:6d:e4:c3:8e:42:2b:
bf:03:f7:3e:c5:03:83:3f:3c:31:1b:58:5e:f1:20:fe:ba:f2:
33:75:2d:61:07:a6:6f:a0:64:f4:71:7c:ef:03:3f:b8:1f:0e:
a4:d0:cf:f1:1a:90:b5:31:2a:04:b4:8a:14:aa:fc:f2:6e:17:
45:73:33:ed:86:ce:9d:0c:96:fd:7d:76:1c:db:0e:1a:d5:82:
e4:be:9c:87:eb:f2:77:81:b4:5f:de:52:80:a1:78:48:d6:5d:
bd:c0:e9:40:f6:db:3f:cc:12:a7:ae:d1:6a:c5:dc:b1:87:3a:
7a:7f:5d:80:14:29:25:69:d9:20:7c:61:95:e1:f4:86:24:8d:
bd:c8:39:44:75:ea:44:88:17:f8:d9:4c:ec:f1:08:43:4b:27:
f4:bd:b1:47:4c:02:7b:2b:a8:86:ea:4c:ed:8e:a0:ad:13:da:
9a:38:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:27 2024 by rpki-client on console-fra.rpki-client.org