Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/3ee5a605f27b7892fca969f3e1d9a5c471b2beb5.roa
File: 3ee5a605f27b7892fca969f3e1d9a5c471b2beb5.roa (raw, json)
Hash identifier: tK2aJLArzrg2TGZgx9gFEnBwj+piCybgCl7V/78UM44=
Subject key identifier: 69:8E:94:1B:FE:C8:15:72:7B:7C:2E:AB:97:93:0A:A4:EC:5F:D7:C3
Certificate issuer: /CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Certificate serial: 1C451C
Authority key identifier: 61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/3ee5a605f27b7892fca969f3e1d9a5c471b2beb5.roa
Signing time: Mon 05 Feb 2024 19:07:44 +0000
ROA not before: Mon 05 Feb 2024 19:07:44 +0000
ROA not after: Thu 05 Feb 2026 19:07:44 +0000
asID: 272992
IP address blocks: 131.221.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1852700 (0x1c451c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c
Validity
Not Before: Feb 5 19:07:44 2024 GMT
Not After : Feb 5 19:07:44 2026 GMT
Subject: CN=3ee5a605f27b7892fca969f3e1d9a5c471b2beb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:11:76:d6:dc:c6:8b:ac:a2:17:87:92:96:
81:18:1f:72:36:f7:90:42:49:d9:f1:4d:57:8c:a8:
92:d3:b0:7f:20:66:44:6d:90:e3:5a:9a:fa:20:1f:
50:19:f0:1a:2c:06:ba:53:83:91:2c:5a:e7:d0:76:
47:34:03:5c:e0:14:e0:97:e1:c8:59:07:f1:d0:ef:
00:80:e4:cd:51:c8:14:41:b8:1b:ae:63:95:2d:7d:
d6:07:33:31:97:15:8b:95:3d:66:0b:fa:c3:f2:be:
14:93:ae:51:ab:6f:20:28:5a:b3:06:6f:b3:c3:25:
1f:9d:7d:95:4a:b1:b8:97:63:cb:a2:e7:02:3c:38:
14:d2:49:2e:d7:b0:fb:66:25:ea:fa:fb:d9:0e:a5:
03:12:d2:4f:c0:12:7b:46:74:06:4b:0f:fb:c4:a6:
02:a1:7c:2a:b7:b1:b3:c5:38:25:6c:df:13:50:cf:
5f:c6:b7:e0:3c:f3:e0:6c:6e:c8:4a:f4:91:45:f3:
10:bf:30:63:45:2d:3c:87:2b:7d:8f:ef:3b:39:e7:
91:26:ed:31:88:d6:64:14:38:9a:4c:c9:0e:b7:52:
32:79:3b:d2:b8:2e:b8:80:58:10:68:fd:73:da:f3:
8d:6c:28:22:47:6b:89:0b:39:41:87:9b:d7:48:29:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:94:1B:FE:C8:15:72:7B:7C:2E:AB:97:93:0A:A4:EC:5F:D7:C3
X509v3 Authority Key Identifier:
keyid:61:EE:C6:FD:C2:CC:2F:CE:DC:E0:F7:2C:72:C7:54:2C:93:0D:F6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/3ee5a605f27b7892fca969f3e1d9a5c471b2beb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0985e667-da9f-4f15-acff-59a3666037be/374e0c7c10e3ca2e7d1945ead6a9ee4cd0458f6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.221.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5b:89:d1:d1:3d:df:5e:c1:0d:a8:0d:b7:c3:b5:1a:ee:ad:
16:fb:b6:dc:39:de:38:6d:2a:20:b0:d9:b5:a1:b8:98:15:9c:
d5:b8:49:b8:3c:c4:13:33:69:52:c7:67:ea:20:43:d7:25:d5:
3a:4d:4f:cc:85:68:5f:ff:58:9d:af:36:4a:ec:26:d9:0f:82:
b9:36:92:07:dd:41:26:1b:10:70:6d:ff:ab:48:98:e3:a5:30:
f5:d5:3c:a5:86:f7:11:b3:b9:09:b2:1e:18:ba:bf:e4:39:17:
d7:26:cf:09:b8:2e:28:bc:05:93:4e:b3:79:ee:d3:c6:c8:95:
ff:f1:c3:b4:6b:df:2f:fc:bb:ac:35:9e:74:1a:df:54:d0:40:
0a:28:81:4a:fc:25:cf:c1:fa:52:46:6f:5e:89:b0:ec:dc:27:
35:29:de:f8:6d:e1:d8:16:b2:80:d8:61:7a:3a:92:ff:62:a1:
2d:34:33:41:0d:ea:66:50:d9:cc:33:c1:67:4b:10:73:32:c2:
cd:39:47:e6:14:fd:45:b6:cd:b6:86:e3:dc:3b:c6:f2:df:a9:
54:b9:60:06:b2:4b:9b:a5:92:9e:d6:dd:92:13:c1:37:0c:c8:
f8:a1:92:9c:f4:83:58:98:58:45:59:dd:73:59:10:81:b9:0c:
80:8a:df:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:56 2024 by rpki-client on console-ams.rpki-client.org