Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/70bee3a09f2146442bc0e95eaad3332e2fa0b451.roa
File: 70bee3a09f2146442bc0e95eaad3332e2fa0b451.roa (raw, json)
Hash identifier: iQwyAD+jPaZhkPMCSswu5dQYUQIZWZ19ERHRYOjkiS0=
Subject key identifier: EC:94:16:F0:25:25:1C:30:EA:A1:D3:19:C1:44:77:E2:6E:7A:A4:8C
Certificate issuer: /CN=00932e972389ea7205865b22c4909bed7cdcbf7e
Certificate serial: 0D6439
Authority key identifier: D0:65:6F:B9:27:C5:3E:D8:97:D3:4E:DA:2D:06:18:0B:0C:C3:99:30
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00932e972389ea7205865b22c4909bed7cdcbf7e.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/70bee3a09f2146442bc0e95eaad3332e2fa0b451.roa
Signing time: Wed 24 Mar 2021 14:34:48 +0000
ROA not before: Wed 24 Mar 2021 14:34:48 +0000
ROA not after: Tue 24 Mar 2026 14:34:48 +0000
asID: 61499
IP address blocks: 138.121.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877625 (0xd6439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00932e972389ea7205865b22c4909bed7cdcbf7e
Validity
Not Before: Mar 24 14:34:48 2021 GMT
Not After : Mar 24 14:34:48 2026 GMT
Subject: CN=70bee3a09f2146442bc0e95eaad3332e2fa0b451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:1d:e5:de:e8:ec:41:42:60:65:d2:c6:6f:
f8:a4:26:45:f0:01:b9:af:34:87:cb:f0:4e:f5:90:
dc:65:39:a7:df:64:8b:90:84:16:73:d2:d0:27:0c:
0d:3a:ae:b5:9d:a2:18:f4:95:31:da:3c:4a:52:69:
48:5b:20:a8:7c:b2:2a:2e:ce:84:23:18:69:04:7b:
87:55:83:5a:1a:99:50:55:c3:79:7e:dd:91:a7:1c:
c6:8a:a8:65:e0:4b:b9:8f:17:78:36:a4:89:77:34:
5f:11:7a:4a:aa:5f:91:74:a4:66:59:e2:10:a5:44:
f9:5c:5c:d7:38:9b:c7:07:79:13:75:6c:70:64:28:
23:f9:5e:8f:6f:46:c0:1c:0d:fd:77:6b:0f:00:c0:
dd:79:07:ca:06:56:26:1b:21:d1:a2:f5:3e:b5:92:
92:b0:cb:58:11:65:95:a3:1f:73:50:39:1d:0e:e0:
a8:e3:68:8f:07:49:c2:f1:5e:3b:b7:3b:34:12:c3:
35:b3:17:7f:59:1c:87:00:9b:84:c1:fb:c5:e4:3e:
f2:5a:5f:55:5a:f4:d2:9d:12:36:a9:37:85:19:53:
a8:5c:e4:c9:b0:04:ed:f8:bf:ba:54:a8:70:f2:83:
4c:28:a2:f3:0d:0c:6a:6b:b5:5d:65:c1:96:44:68:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:94:16:F0:25:25:1C:30:EA:A1:D3:19:C1:44:77:E2:6E:7A:A4:8C
X509v3 Authority Key Identifier:
keyid:D0:65:6F:B9:27:C5:3E:D8:97:D3:4E:DA:2D:06:18:0B:0C:C3:99:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00932e972389ea7205865b22c4909bed7cdcbf7e.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/70bee3a09f2146442bc0e95eaad3332e2fa0b451.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0a0b73b6-eaa0-4884-b426-78948e2e935d/00932e972389ea7205865b22c4909bed7cdcbf7e.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.4.0/24
Signature Algorithm: sha256WithRSAEncryption
39:02:9e:ae:b7:04:d3:06:7c:9f:23:c5:7b:e7:02:80:be:79:
4f:8a:25:74:be:18:3a:45:ab:75:e4:fd:a4:f7:df:15:78:fa:
a8:0f:2f:4a:f1:2b:59:3e:1a:0e:84:6e:4e:d3:1d:45:6c:f4:
60:e3:8c:7f:06:fc:0b:de:aa:a8:01:35:f2:b2:90:c0:f0:ab:
33:a7:7c:83:db:0a:86:3a:a8:3c:64:2b:d2:af:2e:81:38:0f:
8a:68:67:ff:39:cb:11:82:3a:40:c6:c2:1e:57:b6:d1:26:c3:
5e:6d:8f:a3:47:dd:22:c9:72:8e:6b:ea:08:80:1c:91:a4:97:
fa:6d:ad:44:8a:78:41:ce:fd:b6:eb:34:db:53:8f:66:6b:57:
7c:30:eb:9e:1c:e9:23:68:17:41:42:7c:a7:58:97:57:e3:96:
c4:18:dd:ce:20:13:5b:98:f5:8c:39:a4:d7:a7:5c:f0:21:60:
05:7e:6d:55:1e:2c:a1:9e:c9:5b:60:b6:ee:38:1a:d1:41:08:
3b:fc:ff:a5:51:dd:6b:5a:25:c8:00:f1:17:10:89:fe:e6:8f:
6e:2a:9c:57:3f:6e:4d:e0:12:e9:7a:9a:28:29:c3:68:4e:18:
41:7d:0a:2f:fa:47:ec:df:a2:75:f9:d4:fd:42:33:99:13:5c:
79:47:60:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org