Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f30cee74-e9d4-4a18-be4f-8e85a9363b96/0ef15204bf47c423a7591a04be2bf4511529225f.roa
File: 0ef15204bf47c423a7591a04be2bf4511529225f.roa (raw, json)
Hash identifier: +I67na5AlnecIyrPP1tvs36HFktHEWEndi8Y+waVOgM=
Subject key identifier: 28:80:94:74:AF:BE:83:8B:DF:47:EC:9E:A4:26:0E:D9:71:4B:40:93
Certificate issuer: /CN=a4336b29ec8bc0375f86cd82d7995cda551537ec
Certificate serial: 0DC8D1
Authority key identifier: 05:3E:28:96:E1:1A:C6:10:5F:18:A3:0A:0B:D8:0F:93:5B:2C:60:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a4336b29ec8bc0375f86cd82d7995cda551537ec.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/f30cee74-e9d4-4a18-be4f-8e85a9363b96/0ef15204bf47c423a7591a04be2bf4511529225f.roa
Signing time: Wed 24 Mar 2021 14:42:41 +0000
ROA not before: Wed 24 Mar 2021 14:42:39 +0000
ROA not after: Tue 24 Mar 2026 14:42:39 +0000
asID: 7727
IP address blocks: 131.221.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903377 (0xdc8d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4336b29ec8bc0375f86cd82d7995cda551537ec
Validity
Not Before: Mar 24 14:42:39 2021 GMT
Not After : Mar 24 14:42:39 2026 GMT
Subject: CN=0ef15204bf47c423a7591a04be2bf4511529225f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:ed:e4:ab:cd:0d:61:97:d1:66:ff:61:d4:
5b:f8:e9:5b:e5:b3:6b:4b:59:ff:eb:81:54:87:70:
1c:08:3c:3f:f6:0c:e0:5b:27:64:ec:6a:17:67:6e:
00:50:ad:78:a8:41:0a:a7:83:9e:06:07:df:36:bb:
4d:e1:8d:ee:8d:c8:c2:3e:3e:99:9a:f3:c2:aa:57:
a1:63:68:8b:c4:1b:5d:e2:b3:5b:00:97:29:4b:14:
5e:14:c9:e1:3b:89:c2:72:b0:08:7d:10:4e:df:3e:
ac:d6:72:e3:67:12:c8:e1:6f:87:0f:9c:00:90:5e:
16:3a:bc:ca:ee:ea:f3:db:9a:7e:29:fe:39:2e:b1:
7c:db:4c:6a:95:42:c5:d7:ab:c7:0a:3d:72:96:6b:
7c:78:3a:87:ca:6e:34:21:4c:d5:c1:61:c9:e8:bf:
ef:d5:46:2d:12:09:76:5c:99:6b:b4:6b:1e:69:ed:
18:91:94:9a:1a:3e:15:f6:4d:0e:7b:56:19:31:f7:
e3:8e:05:32:4d:56:24:9e:8b:ba:2d:a8:88:e3:a4:
f7:a2:20:8e:07:d9:58:04:c2:5e:51:18:15:0e:8e:
b5:c6:0d:59:66:6d:b4:f0:f2:d8:5e:56:5d:fe:36:
cc:29:26:49:0d:5b:a3:1e:e1:13:55:e0:ce:34:82:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:80:94:74:AF:BE:83:8B:DF:47:EC:9E:A4:26:0E:D9:71:4B:40:93
X509v3 Authority Key Identifier:
keyid:05:3E:28:96:E1:1A:C6:10:5F:18:A3:0A:0B:D8:0F:93:5B:2C:60:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a4336b29ec8bc0375f86cd82d7995cda551537ec.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f30cee74-e9d4-4a18-be4f-8e85a9363b96/0ef15204bf47c423a7591a04be2bf4511529225f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/f30cee74-e9d4-4a18-be4f-8e85a9363b96/a4336b29ec8bc0375f86cd82d7995cda551537ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.8.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:ec:3e:a6:b0:cf:07:e3:93:4d:d5:06:32:c0:9a:10:f9:15:
d0:b6:cd:d5:ac:49:31:65:0f:dd:9e:28:b0:24:09:62:26:f9:
bd:4d:62:15:0e:09:84:c6:7a:95:2b:8b:7b:a6:71:c4:85:e2:
09:59:7d:63:0d:03:4b:62:48:3a:4a:36:9c:3b:99:f3:45:07:
6f:cf:80:c6:52:31:ad:1a:b3:a5:4e:93:50:e4:a8:80:53:93:
9f:37:8a:b3:50:32:35:f4:18:21:58:46:3e:a2:7a:a0:c2:ca:
ab:4a:90:94:92:fa:17:81:d5:c2:02:eb:4f:fc:54:3f:3a:aa:
95:77:ec:f6:2a:40:1b:97:2a:59:79:2c:ca:cc:76:42:5e:9f:
4a:6a:56:a0:01:0f:9a:14:78:90:8b:d7:04:55:2e:d8:84:17:
48:5b:63:64:d1:0e:69:08:82:0a:48:6e:f6:d8:e1:32:23:b1:
ab:d8:4c:de:49:1e:93:43:47:5d:bf:d5:72:98:27:49:07:86:
ed:2d:32:af:5d:6e:bb:68:44:74:c1:b2:d6:c4:77:59:43:5d:
73:30:4f:f7:02:32:95:e3:53:fa:a7:6b:1f:40:b0:53:2a:2b:
a4:71:c1:dc:90:85:6a:e1:92:0f:9b:65:24:60:9f:dc:a9:29:
a4:04:ba:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:53 2024 by rpki-client on console-ams.rpki-client.org