Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ef4aaf3-3259-48f0-a2f9-b27fd4da2f87/11ff360c02198b82182b37c5d7eb3b153f7c80fd.roa
File: 11ff360c02198b82182b37c5d7eb3b153f7c80fd.roa (raw, json)
Hash identifier: kwvfmJ/93C5Koog/P6wHBV3lsxdjYCQKlV8w5iZ0Mks=
Subject key identifier: F3:CF:02:4D:F2:EE:DA:A5:1F:72:65:D5:85:B8:E2:BA:66:B2:1A:37
Certificate issuer: /CN=25d5cce30222e125dcd0e3e703615e77b6c2353a
Certificate serial: 0CEE4A
Authority key identifier: 7C:08:51:80:F9:2A:B2:2D:CC:BF:60:C6:54:EE:FD:1B:DE:93:B8:50
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d5cce30222e125dcd0e3e703615e77b6c2353a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0ef4aaf3-3259-48f0-a2f9-b27fd4da2f87/11ff360c02198b82182b37c5d7eb3b153f7c80fd.roa
Signing time: Wed 24 Mar 2021 14:30:58 +0000
ROA not before: Wed 24 Mar 2021 14:30:58 +0000
ROA not after: Tue 24 Mar 2026 14:30:58 +0000
asID: 263775
IP address blocks: 138.121.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847434 (0xcee4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d5cce30222e125dcd0e3e703615e77b6c2353a
Validity
Not Before: Mar 24 14:30:58 2021 GMT
Not After : Mar 24 14:30:58 2026 GMT
Subject: CN=11ff360c02198b82182b37c5d7eb3b153f7c80fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:58:50:8e:ed:d0:7e:8a:1f:b1:ea:d2:e2:b6:
4f:0c:23:b1:97:93:3c:40:8f:e7:5f:5d:90:c4:42:
e5:c9:0e:5a:e7:25:ba:9d:b2:8b:2f:60:4c:40:fa:
3c:85:d5:c6:7e:c5:7a:bb:42:a7:c5:d3:68:7a:ef:
0e:83:97:b2:73:c3:00:67:b1:eb:d6:4f:ee:00:db:
73:a8:af:b5:ff:98:9c:b7:48:66:6b:13:56:28:16:
67:f0:36:e6:d0:28:14:88:08:0b:03:27:d0:b3:fb:
31:82:eb:15:58:6f:69:1c:3a:e1:87:41:d4:50:46:
a3:95:44:d0:d7:ba:e6:df:a8:1a:f7:e0:f3:f1:08:
6b:e6:d3:67:6d:07:71:cc:99:29:60:ab:3b:29:e8:
e3:76:d0:95:4f:68:a9:05:de:07:e6:32:2e:94:d7:
a0:9e:16:73:53:84:57:63:88:3d:d3:ff:55:7b:2e:
a8:da:73:6d:4a:78:6c:4f:d8:a4:fb:70:81:fc:51:
98:47:4a:4f:fe:fc:d4:5a:f1:b8:d2:28:3d:92:6f:
df:08:ca:73:6f:7b:03:f2:ce:49:3b:13:37:b0:23:
7d:02:1e:67:82:ae:7d:4f:6c:d2:73:bf:8c:44:89:
38:a4:93:4b:c0:34:77:de:9b:35:5e:3a:cc:ab:dc:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CF:02:4D:F2:EE:DA:A5:1F:72:65:D5:85:B8:E2:BA:66:B2:1A:37
X509v3 Authority Key Identifier:
keyid:7C:08:51:80:F9:2A:B2:2D:CC:BF:60:C6:54:EE:FD:1B:DE:93:B8:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d5cce30222e125dcd0e3e703615e77b6c2353a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ef4aaf3-3259-48f0-a2f9-b27fd4da2f87/11ff360c02198b82182b37c5d7eb3b153f7c80fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0ef4aaf3-3259-48f0-a2f9-b27fd4da2f87/25d5cce30222e125dcd0e3e703615e77b6c2353a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.100.0/22
Signature Algorithm: sha256WithRSAEncryption
92:d1:2e:90:ad:68:b7:92:db:b4:38:a8:77:69:c9:a8:88:20:
0c:47:44:99:80:d9:94:dc:d9:77:68:6e:eb:4c:ed:a3:13:2c:
dc:5c:df:33:94:19:9d:1b:b9:56:8d:42:b5:55:71:07:b8:aa:
a6:b2:5c:a9:61:fc:91:11:44:9b:e2:b4:26:94:49:91:b6:67:
5a:d7:c7:c6:b7:da:ca:b3:9d:de:4c:c1:fa:df:9d:73:82:74:
53:2b:b0:05:56:75:73:f5:45:5f:42:f2:d5:1e:c4:e4:a2:2e:
5d:dd:d3:52:f4:b4:06:c4:1b:37:1d:98:64:9a:e0:08:3b:1f:
4d:2a:ef:f5:01:bb:14:fd:e3:ba:86:0b:25:05:bb:fa:79:fd:
6b:8c:40:e3:1d:76:36:4e:42:a4:f7:b4:c0:3c:ed:17:5f:cb:
58:0d:46:3d:0a:eb:b4:25:e5:0c:47:49:ce:b6:57:c1:af:a3:
bc:e4:18:c4:2b:b8:51:34:e5:44:87:2b:93:a4:8c:9b:5d:b8:
05:b2:c0:30:cb:b3:52:a8:bb:c5:b5:03:c5:c7:3f:1e:e5:d0:
38:0e:8d:92:69:02:e6:ea:ca:cb:bd:b6:20:2a:95:20:cb:42:
5f:96:23:f8:62:86:da:ae:72:28:9d:ec:d3:aa:14:74:46:f9:
b7:c6:ca:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:16 2024 by rpki-client on console-ams.rpki-client.org