Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/11d6bac12d48052d1cd025012be5107678038fbd.roa
File: 11d6bac12d48052d1cd025012be5107678038fbd.roa (raw, json)
Hash identifier: d3ZPz6RRyR9vldTdpHZCfEU8GUFY8vUJKu7Gt8lXn0g=
Subject key identifier: 56:F4:26:38:9F:B7:61:23:F4:63:94:60:9A:F7:25:C1:B7:D8:CA:8B
Certificate issuer: /CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
Certificate serial: 1A3239
Authority key identifier: 29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/11d6bac12d48052d1cd025012be5107678038fbd.roa
Signing time: Tue 06 Sep 2022 23:17:14 +0000
ROA not before: Tue 06 Sep 2022 23:15:16 +0000
ROA not after: Fri 06 Sep 2024 23:15:16 +0000
asID: 263746
IP address blocks: 138.121.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1716793 (0x1a3239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
Validity
Not Before: Sep 6 23:15:16 2022 GMT
Not After : Sep 6 23:15:16 2024 GMT
Subject: CN=11d6bac12d48052d1cd025012be5107678038fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:7a:89:7b:c6:bb:3c:62:2d:d7:68:73:08:
ca:51:d6:bf:a6:64:86:4d:1d:31:35:0b:5c:5b:a0:
f4:6b:4d:ad:d0:ef:0c:6b:be:f7:0d:44:78:04:c7:
56:f7:1b:7e:16:e0:56:f4:16:85:48:ff:1f:c0:0a:
ef:65:99:18:43:78:c0:20:43:c7:c6:61:1f:b7:a6:
ff:38:78:f8:b3:18:3a:19:7d:5f:7d:2e:52:5b:3f:
6e:8a:b0:5a:b7:e8:f1:fa:0f:b1:f8:ab:33:1e:58:
0c:d2:8c:3d:12:86:25:09:7c:14:7b:54:b5:1b:cd:
6a:1f:b0:67:f4:db:50:84:c2:2a:c4:a6:8b:2a:ae:
cd:74:ac:e9:45:4d:33:b4:7a:87:4e:75:81:ac:0b:
3c:bf:3f:aa:2b:37:6d:47:1f:8b:27:aa:ca:25:4b:
97:46:4a:15:2d:39:3c:75:52:26:53:95:6f:eb:a0:
0c:0a:b5:2f:e4:6e:44:e3:1d:2a:a2:b2:70:23:e3:
28:37:07:3b:3a:fb:a4:6b:0c:21:1a:54:5a:29:7e:
16:44:9a:26:45:85:e7:8c:19:23:c8:57:09:41:83:
a6:b5:36:53:ff:7f:2d:3e:67:f6:ea:ac:16:8d:e9:
28:da:d9:cd:a1:a9:16:ec:0f:f8:74:ae:3c:6c:d2:
e8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F4:26:38:9F:B7:61:23:F4:63:94:60:9A:F7:25:C1:B7:D8:CA:8B
X509v3 Authority Key Identifier:
keyid:29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/11d6bac12d48052d1cd025012be5107678038fbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.240.0/23
Signature Algorithm: sha256WithRSAEncryption
21:b2:10:7c:7d:e7:ef:1d:e1:ad:63:43:a1:d4:33:59:a3:08:
8b:45:89:ae:24:54:f1:7f:84:c1:cc:f1:36:96:f2:a5:12:5b:
b4:31:ad:ab:56:b8:0b:8c:bf:5e:b1:d4:86:cd:22:4a:8b:2a:
d2:89:16:ed:b5:1f:a1:30:3e:37:19:76:d1:36:fb:16:3b:bc:
75:a2:a3:02:1a:88:6c:9a:1a:81:12:82:3a:e9:8c:87:b3:d5:
a9:db:36:f4:f5:b8:87:db:fa:6f:5e:7c:04:5c:66:72:af:a7:
1f:7f:df:70:3a:67:6b:c6:c3:85:6b:4a:6d:32:72:d8:33:1a:
47:eb:2f:e1:37:3b:d2:51:a4:f7:ea:d3:4c:5b:e9:1b:1a:14:
96:74:91:e6:a0:69:9b:2a:c4:74:b0:e6:91:3d:b8:95:68:0c:
82:db:bb:00:e0:e8:ca:34:a4:1d:57:f1:39:3c:be:4f:43:6e:
e2:ec:82:c8:97:f9:d9:c2:7b:af:f7:95:72:d9:41:52:62:07:
69:43:bb:1d:11:e3:e2:0a:7c:64:f4:44:25:32:aa:5d:7e:a0:
0e:12:5a:18:5c:0b:a9:99:13:f6:a0:a6:8d:b1:2a:8f:a1:14:
5a:1b:b5:30:87:1e:e3:98:41:66:f2:c4:d5:f4:b9:21:c8:18:
92:de:bc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:00 2024 by rpki-client on console-fra.rpki-client.org