Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/fc8337ef3f6f1120ed7539a371fdd48ce9693514.roa
File: fc8337ef3f6f1120ed7539a371fdd48ce9693514.roa (raw, json)
Hash identifier: hI+JA8PZ/MEJ7QqyNQGHhup9CTqE3ldIMrN6joimcNs=
Subject key identifier: 11:5F:F5:0A:42:81:C7:42:D2:5F:33:BF:F7:EB:F8:A0:9F:2E:A9:56
Certificate issuer: /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial: 248D99
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/fc8337ef3f6f1120ed7539a371fdd48ce9693514.roa
Signing time: Fri 03 Nov 2023 18:59:24 +0000
ROA not before: Fri 03 Nov 2023 18:59:24 +0000
ROA not after: Mon 03 Nov 2025 18:59:24 +0000
asID: 263781
IP address blocks: 138.118.104.0/22 maxlen: 24
2803:1440::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2395545 (0x248d99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Validity
Not Before: Nov 3 18:59:24 2023 GMT
Not After : Nov 3 18:59:24 2025 GMT
Subject: CN=fc8337ef3f6f1120ed7539a371fdd48ce9693514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:68:35:7a:14:fe:91:94:fa:ec:61:63:98:
64:b3:53:06:11:49:d7:c8:29:ad:ae:91:8e:26:02:
4c:91:b2:bb:ec:94:83:39:8d:80:a0:f6:ac:8d:07:
63:b5:f8:a3:37:74:ac:5c:84:0d:64:0a:ac:4b:34:
40:fc:09:78:c2:b9:76:af:d3:0c:af:e1:1f:06:64:
6c:05:28:b5:6b:a3:0e:35:e8:32:15:22:4e:3a:0c:
77:36:ef:25:ee:81:14:2a:e2:a4:66:37:18:5a:7d:
9f:12:9b:f6:44:2a:8d:dd:d6:8e:13:a8:27:4a:ea:
87:1e:76:0f:b2:b8:4c:d5:45:31:b9:02:af:5c:57:
7d:1e:b2:77:e0:e2:27:95:8f:30:7a:be:a4:bd:f4:
91:ed:68:db:6c:e2:99:62:11:15:7b:43:ac:dc:bb:
22:37:38:b7:c3:ad:92:40:09:ac:86:66:f9:22:07:
be:43:8c:2d:d0:d4:21:79:17:7d:00:0c:0e:54:ba:
14:4b:e0:b7:8f:e3:80:cb:85:87:6e:60:b1:87:d7:
86:30:74:21:a2:3b:49:c9:66:9a:19:a8:06:79:73:
34:b9:47:1a:58:66:49:bc:ad:a7:43:b4:01:78:6b:
b3:94:5c:b8:42:3f:7a:88:92:19:61:10:92:44:d1:
b5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5F:F5:0A:42:81:C7:42:D2:5F:33:BF:F7:EB:F8:A0:9F:2E:A9:56
X509v3 Authority Key Identifier:
keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/fc8337ef3f6f1120ed7539a371fdd48ce9693514.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.104.0/22
IPv6:
2803:1440::/32
Signature Algorithm: sha256WithRSAEncryption
24:45:f0:f4:e1:36:21:f4:34:4d:54:a4:92:c4:cd:c3:74:bd:
e0:72:d0:96:9f:28:87:47:a5:29:84:ae:34:df:b9:d5:68:74:
b3:f0:f3:98:dc:dc:4c:7f:83:81:e4:2b:d8:15:40:b2:62:e6:
af:f0:e0:70:21:a8:f7:0f:76:f7:ba:a8:29:47:5e:26:ce:ce:
94:2f:f1:e8:78:5a:82:f9:dd:ba:74:0a:dd:03:4a:1d:35:9c:
23:c9:16:71:cf:aa:5d:d3:3b:99:96:a4:1c:cc:33:6b:ae:9e:
b5:be:39:b2:3c:07:79:7a:53:b8:d2:61:78:36:bb:7a:ec:f8:
88:a9:c7:aa:1d:1a:21:25:ff:14:35:96:8b:c3:33:31:c9:bd:
3e:49:cf:39:ed:5f:3d:d8:7c:cb:2f:9c:53:49:50:9d:d5:30:
7a:9d:a8:05:2d:ff:f4:15:34:3a:8e:0d:21:38:c6:98:4d:64:
cd:98:f9:8f:c1:c2:c6:10:2c:24:cb:ca:1d:d3:a7:a9:86:2d:
71:0e:f2:d7:4e:70:ab:25:3f:61:c9:44:8b:a5:a9:d4:45:59:
76:0d:84:d3:0c:80:f7:d1:47:3a:e3:c9:d2:a8:ba:36:86:36:
a4:bf:f8:e7:43:18:43:d4:64:6c:96:ca:8d:f5:3f:84:72:69:
ec:4e:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:21 2024 by rpki-client on console-fra.rpki-client.org