Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/23130f680430bf79789d21570989078db42ed45e.roa
File: 23130f680430bf79789d21570989078db42ed45e.roa (raw, json)
Hash identifier: A6qFQAnMkuOwd9UKpnpvbqnl2p3hCz3kgtGF08Hp8jg=
Subject key identifier: 3C:4E:51:11:A7:36:3C:45:C8:F8:82:AF:9E:6C:AC:99:CA:B5:FE:45
Certificate issuer: /CN=eaec8ce2b33df137eb80bce3bc979b817d27173e
Certificate serial: 0D09CF
Authority key identifier: 84:4E:A5:DB:49:5C:3F:9E:F0:26:D5:3E:0D:0A:38:0E:99:AE:3F:02
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eaec8ce2b33df137eb80bce3bc979b817d27173e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/23130f680430bf79789d21570989078db42ed45e.roa
Signing time: Wed 24 Mar 2021 14:46:25 +0000
ROA not before: Wed 24 Mar 2021 14:46:25 +0000
ROA not after: Tue 24 Mar 2026 14:46:25 +0000
asID: 263732
IP address blocks: 138.59.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 854479 (0xd09cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaec8ce2b33df137eb80bce3bc979b817d27173e
Validity
Not Before: Mar 24 14:46:25 2021 GMT
Not After : Mar 24 14:46:25 2026 GMT
Subject: CN=23130f680430bf79789d21570989078db42ed45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:04:13:7f:d4:76:66:f6:b7:71:57:23:f8:a6:
8d:f1:10:16:f4:97:05:05:22:b7:28:c0:79:4f:d0:
88:1a:1b:6c:9c:96:54:b8:27:9c:87:95:2a:bd:76:
00:7a:7f:2c:5a:77:50:59:cb:41:2a:86:c8:08:19:
75:74:4a:70:5f:22:4a:73:14:18:27:07:90:c4:94:
0b:b8:a4:9a:96:89:ef:9a:11:23:95:84:9d:3d:9a:
57:60:b5:49:67:0c:aa:a0:7d:a6:fc:2e:11:8a:10:
bb:aa:37:ae:78:81:8d:45:36:c4:0d:5e:93:3d:43:
f2:33:f3:dc:e9:21:c6:f0:fc:bb:a3:aa:ac:1e:29:
f1:eb:f2:e7:4c:cc:83:64:c6:aa:c0:64:58:4d:e1:
6a:ae:48:a3:d5:58:a2:2c:bc:bc:4a:27:09:33:9d:
62:74:b2:2c:19:d3:b5:76:7c:25:d4:a9:f7:f0:9f:
b1:38:7e:d8:f0:57:a4:23:66:b9:ae:83:dd:bd:4b:
d7:49:90:1e:e8:6e:b0:80:19:54:96:36:50:21:45:
6a:4d:ff:91:28:64:52:1f:01:29:8e:1c:67:d7:67:
8f:27:1a:ed:95:6d:78:30:ff:f1:d6:b6:c1:d0:8a:
55:85:9b:0d:93:78:d2:e9:1a:31:38:2d:bd:58:66:
67:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4E:51:11:A7:36:3C:45:C8:F8:82:AF:9E:6C:AC:99:CA:B5:FE:45
X509v3 Authority Key Identifier:
keyid:84:4E:A5:DB:49:5C:3F:9E:F0:26:D5:3E:0D:0A:38:0E:99:AE:3F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eaec8ce2b33df137eb80bce3bc979b817d27173e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/23130f680430bf79789d21570989078db42ed45e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/09c931fa-2d7b-43f0-9ec7-b094669559ff/eaec8ce2b33df137eb80bce3bc979b817d27173e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.164.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:15:91:34:11:ea:1e:1f:99:cc:47:68:4e:a0:b9:f9:3e:46:
22:80:29:89:bf:15:b2:63:e9:bf:44:c9:2d:a6:f6:80:22:9c:
18:ef:21:2f:93:ea:0e:45:e1:c0:9b:f4:b6:b6:ea:c1:8b:99:
86:b9:53:c9:a1:e3:46:14:cb:c2:a1:39:00:7d:64:94:07:ba:
b0:5f:61:5e:63:6a:ff:42:4d:33:60:2f:09:52:f1:ed:7b:f3:
b2:37:cc:f1:c0:38:34:20:90:15:6c:5f:00:01:55:e9:4e:02:
e3:c2:b2:cc:ba:b8:dd:af:ec:c7:c8:8d:1b:0a:06:76:da:1c:
1d:2d:e0:36:f4:9c:dd:be:fe:14:0a:2b:dd:c5:af:77:af:25:
99:ab:d2:20:8f:de:04:0f:76:00:18:bd:1f:6e:0f:32:0c:66:
76:60:24:98:8f:44:38:0f:8a:1c:7f:50:f5:dd:bf:60:27:17:
50:bd:7a:59:2c:d3:c8:d0:8f:da:b1:7b:8c:e7:a4:e6:ff:73:
4d:c6:25:7c:fb:c1:cc:62:24:1f:39:2b:bc:c8:92:97:0e:e6:
6a:be:4f:70:16:9c:31:0f:6a:1a:00:1d:e6:55:c0:1f:ae:8e:
09:3e:35:e9:7d:5e:dd:10:74:2d:99:27:b3:4d:87:d3:88:a5:
49:9d:45:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:15 2024 by rpki-client on console-ams.rpki-client.org