Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/559e30f3-7cad-413e-a98e-84b34bb91913/1f36d12836cb302e943f93c5cb1d344c65ab78bc.roa
File: 1f36d12836cb302e943f93c5cb1d344c65ab78bc.roa (raw, json)
Hash identifier: X4HPI9RjesR9wN/eHmbO0KlR6iATYJWc/BeGYaI/zJc=
Subject key identifier: BA:DA:90:B9:62:70:67:32:ED:1A:57:F6:6A:BE:B8:AF:8C:C4:82:37
Certificate issuer: /CN=d675b3fed87f89fa91e060e500482b6ec9837fa3
Certificate serial: 0D94FD
Authority key identifier: DE:A2:D1:09:34:E2:C0:C8:4A:88:59:24:3D:DE:82:68:8C:CC:B9:A6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d675b3fed87f89fa91e060e500482b6ec9837fa3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/559e30f3-7cad-413e-a98e-84b34bb91913/1f36d12836cb302e943f93c5cb1d344c65ab78bc.roa
Signing time: Wed 24 Mar 2021 14:30:06 +0000
ROA not before: Wed 24 Mar 2021 14:30:05 +0000
ROA not after: Tue 24 Mar 2026 14:30:05 +0000
asID: 27955
IP address blocks: 138.122.228.0/22 maxlen: 24
168.90.160.0/22 maxlen: 24
170.78.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890109 (0xd94fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d675b3fed87f89fa91e060e500482b6ec9837fa3
Validity
Not Before: Mar 24 14:30:05 2021 GMT
Not After : Mar 24 14:30:05 2026 GMT
Subject: CN=1f36d12836cb302e943f93c5cb1d344c65ab78bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:0a:c4:2b:17:b7:df:49:7a:d3:88:65:fd:
fc:0d:fd:92:38:f1:d6:9f:25:b5:18:d3:11:61:4b:
b4:5a:53:68:24:09:50:dc:dc:79:5a:ea:07:5e:9f:
77:93:31:51:51:48:1c:3e:dd:5a:8e:d3:7f:f0:d8:
34:9c:28:9c:5b:20:79:c2:7c:df:2a:61:9c:7d:a1:
1a:ca:76:9c:2a:e8:39:f1:d5:10:69:00:99:0b:e7:
3e:64:eb:39:3f:68:3a:c6:93:b3:d5:bf:f4:ac:1e:
f6:54:92:3a:94:2d:81:ca:de:a6:62:b4:04:58:2e:
39:ef:f1:15:f8:3a:61:08:86:1f:ef:f0:c5:0f:71:
21:3d:49:d6:9b:2d:e4:e0:cd:6d:54:b1:0a:3a:d1:
41:3a:3d:28:18:42:a1:ea:3e:08:f9:f8:4b:40:13:
bb:1c:e8:3e:35:37:59:5c:52:23:39:88:2a:08:54:
88:71:89:96:1a:f5:00:71:80:3d:d5:eb:2f:a6:90:
bf:9e:d3:57:c7:9b:2e:c0:ca:b2:ca:55:3d:40:1a:
24:20:60:4e:ea:89:9f:98:bd:a2:65:72:3a:61:82:
31:e2:13:46:3b:75:7b:fa:2a:ab:c3:f8:8e:ea:36:
78:b1:b0:a7:1a:61:5b:b6:2c:02:6d:9a:97:f3:54:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DA:90:B9:62:70:67:32:ED:1A:57:F6:6A:BE:B8:AF:8C:C4:82:37
X509v3 Authority Key Identifier:
keyid:DE:A2:D1:09:34:E2:C0:C8:4A:88:59:24:3D:DE:82:68:8C:CC:B9:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d675b3fed87f89fa91e060e500482b6ec9837fa3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/559e30f3-7cad-413e-a98e-84b34bb91913/1f36d12836cb302e943f93c5cb1d344c65ab78bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/559e30f3-7cad-413e-a98e-84b34bb91913/d675b3fed87f89fa91e060e500482b6ec9837fa3.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.122.228.0/22
168.90.160.0/22
170.78.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:bb:48:6f:33:49:ec:ca:fe:66:9d:20:65:76:51:08:e3:c5:
f1:ec:f3:c4:6a:b3:59:62:b0:8d:c3:8a:31:34:ff:c9:0d:a6:
e9:c8:01:c0:bb:b2:70:9e:0d:22:a3:06:eb:6f:37:42:6b:92:
c0:03:62:4c:f6:16:fb:8d:87:cc:a0:d1:57:ce:c7:42:7f:35:
28:f5:66:f2:da:51:9e:89:d3:2e:6e:80:06:dc:46:dc:f9:90:
c8:a4:2c:67:1a:1d:61:a0:a8:9a:ac:dc:c8:59:2e:ba:a6:f6:
32:24:e4:7c:eb:32:ff:8c:c1:6d:17:27:37:f6:24:6e:25:c6:
fb:60:1b:34:f6:1b:66:ad:22:f9:b7:31:0a:b7:f7:57:93:2a:
b7:df:55:23:71:77:47:a4:82:b4:28:58:18:1e:2d:fb:9f:d9:
0b:2a:c2:ae:67:de:60:bb:a5:27:4a:49:15:4f:21:7d:b6:d0:
4a:dc:fe:a7:0e:39:bd:c6:ca:09:30:e2:ea:f5:0f:2d:39:40:
7b:8e:b7:83:8a:4b:3f:1c:0d:18:1b:f0:18:96:f1:b1:2e:52:
41:fb:d6:bf:1e:d1:8e:45:0e:d0:af:07:60:ca:97:0e:40:2e:
38:cd:0a:da:59:f4:b3:13:a7:4c:c9:cf:96:71:62:bb:41:e6:
90:fc:a9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:43 2024 by rpki-client on console-ams.rpki-client.org