Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/135919a4-3c82-475b-b615-9127ab1cabb1/963e453443865807e907187c4109172feaf3b849.roa
File: 963e453443865807e907187c4109172feaf3b849.roa (raw, json)
Hash identifier: czW9ITO96jTzfM1FFCuRoTlqCHpYuCwQOzlqwJ7n4RI=
Subject key identifier: 45:59:D9:B7:92:0C:91:0D:D2:3F:30:A1:07:11:8A:FD:BD:15:10:86
Certificate issuer: /CN=9b542116cf9b5c5eac8afc75573b247026d5e7aa
Certificate serial: 0D5FE6
Authority key identifier: AE:F8:35:9E:3B:EE:5B:E8:C1:4C:A4:47:0D:17:FA:28:11:10:8B:9F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b542116cf9b5c5eac8afc75573b247026d5e7aa.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/135919a4-3c82-475b-b615-9127ab1cabb1/963e453443865807e907187c4109172feaf3b849.roa
Signing time: Wed 24 Mar 2021 14:32:44 +0000
ROA not before: Wed 24 Mar 2021 14:32:43 +0000
ROA not after: Tue 24 Mar 2026 14:32:43 +0000
asID: 263834
IP address blocks: 138.121.88.0/22 maxlen: 24
168.228.144.0/22 maxlen: 24
170.79.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 876518 (0xd5fe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b542116cf9b5c5eac8afc75573b247026d5e7aa
Validity
Not Before: Mar 24 14:32:43 2021 GMT
Not After : Mar 24 14:32:43 2026 GMT
Subject: CN=963e453443865807e907187c4109172feaf3b849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e7:f2:15:9c:b0:8e:6d:f0:1a:c8:d9:1c:65:
7b:00:bd:10:09:bb:2a:0d:e3:61:69:25:bf:15:81:
25:93:21:d2:08:75:52:7c:06:e4:b3:95:dd:59:29:
49:28:18:15:a0:26:05:f9:1c:b1:77:0c:e6:e3:52:
86:e7:37:22:ee:96:3e:30:ce:42:f7:22:99:1c:0c:
83:2b:6d:89:9d:c9:42:19:96:6d:84:12:a5:79:6c:
83:95:ef:c1:1e:d2:0f:25:8a:7a:25:45:70:86:33:
23:5b:7a:2d:42:e9:c1:42:b8:f5:b5:cd:ba:2f:65:
d4:66:85:8a:70:59:f0:f4:ca:49:c9:bc:5a:21:08:
5c:e9:e0:19:cc:05:33:05:92:8a:28:39:d1:a6:7e:
a7:0a:8c:86:d8:43:83:34:47:81:70:13:f5:00:b3:
94:db:43:42:2f:05:ec:c8:c5:c9:b3:cc:e9:d9:70:
c0:34:e5:57:df:7b:fc:05:18:ad:36:67:93:de:14:
01:8f:cf:96:82:41:a3:e5:c7:bc:c8:28:ab:72:1d:
5a:77:86:fc:92:ad:75:fb:1b:7d:6c:12:11:71:7a:
e2:66:40:9f:4a:74:f3:25:7d:e8:0b:22:5a:76:77:
66:0e:a8:ed:45:fd:b6:1b:de:ff:08:6d:81:35:f8:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:59:D9:B7:92:0C:91:0D:D2:3F:30:A1:07:11:8A:FD:BD:15:10:86
X509v3 Authority Key Identifier:
keyid:AE:F8:35:9E:3B:EE:5B:E8:C1:4C:A4:47:0D:17:FA:28:11:10:8B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b542116cf9b5c5eac8afc75573b247026d5e7aa.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/135919a4-3c82-475b-b615-9127ab1cabb1/963e453443865807e907187c4109172feaf3b849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/135919a4-3c82-475b-b615-9127ab1cabb1/9b542116cf9b5c5eac8afc75573b247026d5e7aa.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.88.0/22
168.228.144.0/22
170.79.252.0/22
Signature Algorithm: sha256WithRSAEncryption
07:2d:73:c5:b8:58:84:d8:cd:e4:9a:75:03:c0:27:e9:20:c9:
6e:f0:61:70:51:ec:74:3e:39:90:80:64:a1:be:dc:f7:75:ed:
20:12:5a:23:70:f2:4f:df:03:e3:bd:b8:86:63:51:df:2d:a3:
ce:a1:86:3d:18:ba:45:64:93:a1:2a:bb:a2:fd:1b:d3:a1:df:
9b:a7:ea:8f:48:5b:7d:19:af:1b:6e:9b:8b:91:3e:dd:24:62:
3c:da:81:04:57:25:4a:7f:11:ae:5e:b7:ec:a4:97:67:90:53:
b5:12:1c:7e:79:31:a6:48:49:af:17:93:6a:7e:0e:35:cb:dc:
d2:94:77:62:4d:35:eb:9e:79:7c:15:5f:0e:0f:9e:e1:27:ab:
22:02:af:80:65:60:b1:6d:db:f5:09:a8:16:5e:48:a0:d8:2f:
99:9d:29:ac:2b:d1:98:73:2e:fc:8a:bf:19:85:36:51:a2:2c:
ed:ee:f4:3f:15:8e:46:6a:cc:16:71:84:e2:6f:26:fa:dc:0a:
8f:6e:d6:48:1a:16:8c:23:20:91:7c:3b:f4:3d:98:a2:ef:b7:
ef:4f:e8:ab:8e:ba:a7:fa:97:fa:8c:92:8a:58:e6:02:1e:8d:
a8:cd:bf:28:50:20:cb:1a:df:16:89:ae:41:f5:b8:bb:7a:64:
e5:34:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-ams.rpki-client.org