Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/3523c0d681f2a7fb98de0e97c723d384d4f9196c.roa
File: 3523c0d681f2a7fb98de0e97c723d384d4f9196c.roa (raw, json)
Hash identifier: aOA5qrICHbO1NCEwY1yb7O/l40kKGJw39rFMqzjgano=
Subject key identifier: 8B:F6:0C:6A:69:13:AD:4F:F1:87:6E:7A:0C:1A:B2:AF:FD:B4:1C:C9
Certificate issuer: /CN=8fd397f8d47b3a369017afd14e695229eb571750
Certificate serial: 1C0D3B
Authority key identifier: 45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fd397f8d47b3a369017afd14e695229eb571750.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/3523c0d681f2a7fb98de0e97c723d384d4f9196c.roa
Signing time: Wed 05 Jul 2023 12:33:38 +0000
ROA not before: Tue 04 Jul 2023 12:33:37 +0000
ROA not after: Sat 05 Jul 2025 12:33:37 +0000
asID: 265865
IP address blocks: 138.117.13.0/24 maxlen: 24
138.117.14.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1838395 (0x1c0d3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd397f8d47b3a369017afd14e695229eb571750
Validity
Not Before: Jul 4 12:33:37 2023 GMT
Not After : Jul 5 12:33:37 2025 GMT
Subject: CN=3523c0d681f2a7fb98de0e97c723d384d4f9196c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:a7:96:7b:20:5c:3f:fe:a5:ec:7c:29:2a:
ca:94:35:57:19:03:ee:bd:ad:62:ac:70:59:df:2c:
30:21:1a:b3:41:21:6e:d0:af:d7:a6:ca:bb:b2:51:
34:43:1a:cb:9f:3a:39:5f:6d:fe:37:19:ad:d4:6f:
1d:34:26:da:fe:95:02:2d:a7:09:83:cd:b2:86:07:
d0:12:92:0b:0a:58:08:77:0a:64:06:85:5f:fd:c8:
46:49:bb:a5:ee:8f:1c:3a:61:cf:68:b5:b3:5f:99:
a3:2f:80:d3:cb:e5:6a:51:bd:e9:43:7b:32:04:98:
d0:04:8f:61:93:88:3f:9c:c5:5d:4d:b5:1e:50:3c:
e3:9d:1a:80:7f:57:b8:1f:01:c6:47:c0:ff:7b:36:
2d:97:24:0d:9a:bc:a2:f4:f2:d0:c5:6f:5d:f4:2b:
1a:53:4f:c6:fb:70:d3:2b:2c:ec:79:89:cc:75:05:
2b:f0:4a:b6:49:90:1d:51:c7:ed:65:65:f0:90:2e:
76:cc:55:4b:48:7d:86:31:23:63:00:eb:b5:8e:bf:
f3:15:be:05:1e:e8:12:2f:d0:f0:91:5e:5b:70:9c:
c3:1a:a4:5d:d9:a2:6c:bc:d2:1b:c5:cc:7c:c1:33:
ef:38:39:89:63:99:ba:d2:0f:83:07:17:1b:c5:e3:
4a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F6:0C:6A:69:13:AD:4F:F1:87:6E:7A:0C:1A:B2:AF:FD:B4:1C:C9
X509v3 Authority Key Identifier:
keyid:45:DE:A6:A4:AF:83:D7:32:77:E6:5A:49:A7:EC:8A:93:D7:49:ED:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fd397f8d47b3a369017afd14e695229eb571750.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/3523c0d681f2a7fb98de0e97c723d384d4f9196c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/040e4397-756a-483b-b22a-8b23aef4894a/8fd397f8d47b3a369017afd14e695229eb571750.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.13.0-138.117.15.255
Signature Algorithm: sha256WithRSAEncryption
68:86:e3:36:13:a6:d1:9d:ba:6c:ad:2b:68:1c:eb:35:f4:1c:
9f:26:cb:c3:20:f7:4a:22:4e:90:b1:84:87:bf:46:39:a7:74:
04:c1:d4:2c:3b:01:af:76:00:a5:71:88:c7:63:35:68:a8:f6:
6e:81:7e:ff:0b:8a:05:1e:31:49:4c:4e:46:a2:c3:f2:9f:c0:
69:28:65:22:fd:2f:6b:6e:4a:7c:b3:70:8d:ae:74:0c:6a:ba:
78:64:93:51:a9:e5:a1:ca:86:73:2f:01:7e:2e:ea:d4:30:1d:
25:5c:50:69:32:25:ed:f8:83:56:55:b7:62:fc:c8:41:3c:af:
89:76:85:1e:6f:97:9a:e7:81:86:35:21:0a:40:6b:0a:fd:40:
86:3f:f0:a6:b1:50:89:d1:e2:50:61:7a:7d:db:84:6d:09:e8:
4c:03:f9:a2:51:3c:cd:68:00:2f:e0:1c:6e:f1:da:f9:c3:36:
09:b3:cc:c4:eb:15:73:a5:5f:fd:83:7c:47:32:e1:dd:7f:71:
9e:7f:b0:33:26:d5:cf:81:b4:43:2a:fb:7c:b2:b0:fe:f4:5c:
90:48:78:a0:a3:5d:ba:dc:60:7a:32:58:a1:5e:36:67:24:03:
59:1d:67:98:bf:81:e6:4e:42:2b:2c:b2:be:75:cc:86:ee:1a:
84:ae:d0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org