Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/4c425783ed91eb1b071da4924f5ad66f8b14e155.roa
File: 4c425783ed91eb1b071da4924f5ad66f8b14e155.roa (raw, json)
Hash identifier: NzFT8gMCXGGBuLy3+Z6GUQ+S/jMnT3dwExt+LjD4yd8=
Subject key identifier: FB:59:C7:42:CE:91:8B:04:E7:4A:44:0E:71:E2:C7:A9:01:8E:4D:13
Certificate issuer: /CN=a336e26974c3cfc7b7b20511c84d25414d7bfc61
Certificate serial: 11B351
Authority key identifier: 8E:A8:72:0C:76:FA:89:D2:25:D2:CD:69:69:9C:EF:EB:47:6F:03:CA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a336e26974c3cfc7b7b20511c84d25414d7bfc61.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/4c425783ed91eb1b071da4924f5ad66f8b14e155.roa
Signing time: Thu 25 Jan 2024 07:30:00 +0000
ROA not before: Thu 25 Jan 2024 07:30:00 +0000
ROA not after: Sat 24 Jan 2026 07:30:00 +0000
asID: 52323
IP address blocks: 138.118.208.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1160017 (0x11b351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a336e26974c3cfc7b7b20511c84d25414d7bfc61
Validity
Not Before: Jan 25 07:30:00 2024 GMT
Not After : Jan 24 07:30:00 2026 GMT
Subject: CN=4c425783ed91eb1b071da4924f5ad66f8b14e155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f2:b6:6f:1c:61:f8:1f:c8:30:f9:d1:9d:33:
21:a3:11:01:60:d1:36:90:d4:62:e7:dd:ee:5d:41:
ba:5d:1d:d1:89:b6:42:6b:45:0b:19:60:15:fb:67:
f9:17:d5:07:68:b9:41:60:c7:c7:85:0d:24:2d:21:
cb:52:2a:93:b7:4c:b0:de:2b:fe:03:d7:63:34:56:
d6:e7:bd:c8:e3:b1:64:e7:6e:a6:62:c9:81:e7:c5:
87:d2:d7:a0:aa:4d:b6:d1:4e:68:87:96:ba:51:62:
be:da:32:8a:19:f1:1a:ee:49:6e:00:31:7b:72:1f:
2b:a8:ea:ad:59:d4:20:ca:c6:87:7d:b3:90:77:e5:
ac:6a:65:5b:8c:31:cd:1d:c4:c7:bd:49:65:30:d2:
2a:b1:41:cd:68:97:14:9e:11:e6:82:5b:b4:c5:90:
3c:66:76:45:b4:25:98:14:b8:c0:f3:94:fe:ae:1e:
c7:e1:96:d9:64:fb:bf:40:93:b6:a9:39:d9:01:29:
61:5f:26:df:fb:aa:4f:f0:40:db:b8:1a:82:fc:e1:
8f:5e:67:a9:6c:4b:03:b6:60:c4:3a:99:c1:8d:1f:
88:b4:0d:ca:c1:22:36:a2:ce:e0:5d:01:6b:a0:e7:
8a:0a:7f:34:b5:1b:db:84:06:3f:10:57:0b:bc:1f:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:59:C7:42:CE:91:8B:04:E7:4A:44:0E:71:E2:C7:A9:01:8E:4D:13
X509v3 Authority Key Identifier:
keyid:8E:A8:72:0C:76:FA:89:D2:25:D2:CD:69:69:9C:EF:EB:47:6F:03:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a336e26974c3cfc7b7b20511c84d25414d7bfc61.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/4c425783ed91eb1b071da4924f5ad66f8b14e155.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0ae69dcd-0cd0-4926-a32c-9900de01ac1a/a336e26974c3cfc7b7b20511c84d25414d7bfc61.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.208.0/22
Signature Algorithm: sha256WithRSAEncryption
95:e2:04:c3:76:ad:40:a8:62:b5:2b:47:21:a8:b9:d8:f7:23:
19:d1:73:45:23:b9:75:5a:99:2f:17:52:db:f7:f1:dc:cd:87:
57:f4:9c:d4:9c:04:fe:0f:f0:b3:23:c5:6c:63:9b:cb:41:97:
de:17:91:7f:a5:a1:b7:34:3e:5f:a3:9b:7d:4d:8d:f1:73:f4:
39:5c:b6:5e:18:ac:3e:62:99:9e:d2:ca:ed:63:01:d6:32:9f:
0f:c1:f3:35:19:30:d2:c6:90:88:3f:f2:9b:12:d7:8f:9d:a0:
9d:d3:1d:6e:ca:a3:c4:8d:81:e8:f9:94:00:d6:70:fe:9a:19:
6f:43:89:f4:b2:1c:6e:86:ea:b0:e7:25:f6:5f:a0:cc:df:ed:
94:3b:4c:7d:12:db:3f:57:97:d9:68:57:ef:05:97:de:d0:9f:
ad:4e:e4:22:61:bf:d9:d7:13:27:65:04:90:95:2b:e3:bc:d2:
06:bb:ed:be:d4:26:7f:86:6d:45:58:37:a7:ee:db:36:93:c9:
c6:06:be:69:9b:0d:fe:2a:b4:9b:ce:ff:a3:91:29:f7:41:dd:
e0:f5:c4:21:67:31:e8:4d:2c:e6:e5:61:9c:98:5a:65:fc:3d:
1f:df:79:72:1c:51:f8:a4:26:a7:e4:91:77:a5:b1:5b:09:12:
0f:c0:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:01 2024 by rpki-client on console-fra.rpki-client.org